Privacy Policy

1. General information

This Privacy Policy describes the processing of personal data by the “Ijro Boshqaruv” mobile application (Google Play package identifier: uz.ijroapp.app, the “App”). The App is intended for authorized employees of the Andijan Regional Government and its subordinate organizations. The data controller is the Andijan Regional Government.

2. Data we collect

Profile information	Phone number, full name, position, organization and profile photo are used to identify and authenticate an account and display an employee profile. Accounts cannot be created in the App. They are provisioned outside the App by an authorized administrator based on employment or an official service relationship.
Execution evidence	Photos, videos and documents expressly selected by the user are used as evidence that an assigned task was completed. The App accesses only the files selected through the operating system picker and does not receive broad access to the device media library.
Location	Precise location is collected once when the user submits a task for which location evidence is required. The App does not continuously track location in the background.
Push token	An app installation identifier and device token are stored to deliver official notifications through Firebase Cloud Messaging.
App activity	Viewing and completing tasks, submitting evidence, search queries and other official actions may be recorded for app functionality, audit and information-security purposes.

3. Purposes of processing

• authenticate users and associate them with their official accounts;
• record and verify task completion;
• support internal oversight of deadlines, reports and ratings;
• deliver official notifications;
• prevent fraudulent requests and false execution evidence.

4. Data disclosure

Personal data is not sold or used for advertising. Tasks, execution evidence and associated location data are visible only to managers, administrators and employees who have the appropriate official permissions. Google Firebase Cloud Messaging receives only the technical app/device identifiers and tokens necessary to deliver notifications. Data may be disclosed to authorized public authorities when required by law.

5. Retention and security

Profile data is retained while the official account is active. Tasks, appeals, execution evidence and audit records may be retained for periods required by law, public-record retention rules and the Controller’s internal audit requirements. Data is encrypted in transit using HTTPS, and access is restricted through authentication, roles and permissions.

6. User rights

Users may request access to, correction, clarification or deletion of their personal data. An authorized administrator handles the deletion or deactivation of an official account. Tasks, evidence, appeals and audit records that must be retained under law, public-record requirements, audit rules or official duties may remain stored until the applicable retention period expires.

7. Permissions

• Camera — capture task evidence photos or videos;
• System file picker — attach expressly selected photos, videos and documents;
• Precise location — only for tasks that require location evidence;
• Notifications — receive official updates.

8. Policy updates

The current version is published on this page. The last-updated date is displayed at the top.