Privacy Policy

Who this applies to

This policy covers two kinds of users: organization admins who set up and manage a company on Simal, and employees whose organization has added them to Simal. If you are an employee, your organization is the data controller for your HR records; Simal processes that data on the organization's behalf.

Information we collect

• Account & profile data — name, email, phone number, role, and login credentials (handled via our authentication provider).
• Employment records — department, position, attendance, leave requests and balances, payroll and payslip data, and approval history, as entered by your organization.
• Device & usage data — app version, device type, and crash/error logs, used to keep the product working reliably.
• Local preferences — this website stores a light/dark theme preference in your browser's local storage. We do not use advertising or analytics cookies on this site.

How we use this information

We use collected data to operate the core HR functions of Simal (attendance, leave, payroll, approvals, and employee records), to authenticate users, to provide customer support, and to maintain the security and reliability of the service. We do not sell personal data, and we do not use employee HR data for advertising.

Who we share data with

We use a small number of infrastructure providers to run Simal, each of whom processes data only to provide their service to us and under their own security and confidentiality commitments. We do not share HR or personal data with third parties for their own marketing purposes.

Data retention

We retain organization and employee data for as long as the organization's account is active. If an organization deletes their account, we remove data from active systems, except where we are required to retain payroll, tax, or employment records for longer to comply with applicable Nepali labor and tax record-keeping requirements.

Your rights

You can request access to, correction of, or deletion of your personal data by contacting us at the email below. If you are an employee, some requests (for example, correcting an attendance record) may need to go through your organization's admin, since they control that data.

Security

We use industry-standard measures — including encryption in transit, access controls, and role-based permissions — to protect data stored in Simal. No system is perfectly secure, and we encourage you to use a strong, unique password.

Changes to this policy

We may update this policy as Simal evolves. We'll update the "Last updated" date above when we do, and post material changes here.

Contact us

Questions about this policy or your data? Email us atprivacy@simal.app.