Privacy policy

Who we are

Tadween is a salary-documentation app for employers and domestic workers in Kuwait. It is operated from Kuwait by its developer, who is responsible for the data described in this policy. You can reach us about anything in this policy at support@tadween-kw.com.

What Tadween does

An employer records a monthly salary payment they have already made in the real world. The worker independently confirms receipt from their own phone. The result is a signed, tamper-evident record of the payment that both parties hold. No salary money flows through the app.

What we collect

• Account details: your name, your phone number (verified by a one-time code), your role (employer or worker), and — for employers — optionally an email address.
• Payment records: the month, amount, and type of each payment the employer records, and the employment relationship (who works for whom, with joining and ending dates and the worker's role).
• Signatures: the signature each party draws on their own device when recording or confirming a payment. Signatures become part of the receipt.
• Confirmation evidence: when a payment is confirmed, we record which installation of the app confirmed it — a device label (for example, the phone model and system), a random per-installation identifier, and the network (IP) address at that moment. The receipt shows only the device label and whether the confirming device is the same one that recorded the payment; the raw identifiers and IP address are stored separately on the server, are never shown publicly, and exist so that either party can point to them if the record is later disputed.
• Purchases: employers buy record credits through the App Store or Google Play. Payment is handled entirely by the store — we never see your card or bank details. We keep a record of which bundle was bought and the store's transaction reference.
• Notifications: in-app notices about payments recorded or confirmed on your employment links.

We collect nothing else. There is no advertising, no analytics service, and no tracking in the app or on this website.

Records are kept permanently — here is why

A confirmed payment record is not only yours. It is, at the same time, the other party's proof — the worker's proof of what they received, and the employer's proof of what they paid. For the record to be worth anything, neither side can be able to change or erase it later.

So confirmed payments, their receipts, both signatures, and the employment-link history are immutable and retained permanently. Retention is not tied to the lifetime of your account. Mistakes are fixed by adding a new, linked correction record — never by editing the original. Each receipt carries a digital fingerprint chained to the receipts before it, so any alteration becomes detectable.

Deleting your account

You can delete your account at any time from inside the app (account menu → “Delete my account”). Before anything is deleted, the app offers you a PDF export of all your receipts — export first, because deletion is irreversible and you lose access to your own records.

Deleted forever: your sign-in, your name and phone number from your profile, and any pending invitations.

Kept forever: confirmed payments, receipts, signatures, and employment-link history — including your name and phone number inside receipts that were already issued. These are the other party's evidence of payment, and deleting your account can never erase the other party's evidence.

Deletion cannot be undone. If you register again — even with the same phone number — you start with a brand-new, empty account; your old records do not reattach. Deleting your account also does not remove your details from records the other party already holds, whether inside their app or in PDFs they exported earlier.

Legal basis

We process account and payment data because it is necessary to provide the service both parties asked for: creating a payment record that both can rely on. We retain confirmed records permanently on the basis of the legitimate interest of both parties in preserving evidence of payments that actually happened — the record exists precisely so that neither side can unilaterally alter or destroy it. Confirmation evidence (device and IP) is collected on the same basis: it strengthens the record's reliability if it is ever disputed.

Who can see what

• Each record is visible only to its two parties — the employer and the worker on that employment link. There is no public access.
• We never sell data and never share it for advertising.
• Data is stored and processed on our hosting provider's infrastructure (Supabase). One-time sign-in codes are delivered through an SMS/WhatsApp provider, which receives your phone number and the code — nothing else.
• Apple and Google process store purchases under their own privacy policies.

Security

Access rules are enforced on the server, not just in the app. Confirmation is controlled by the worker's own phone: the one-time code is sent only to the worker's verified number, and an employer can never confirm on a worker's behalf. Confirmed records are immutable even to us in normal operation, and the receipt fingerprint chain makes tampering detectable.

Your choices

• View and export your records as PDFs at any time, free.
• Ask for a correction record if a confirmed payment contains a mistake.
• Change your phone number from inside the app (verified from the new phone).
• Delete your account, as described above.
• If you believe data we retain about you should not be retained, contact us at support@tadween-kw.com. Because retained records are the other party's evidence, we cannot remove them unilaterally, but we will review every request and explain what applies to your case.

Changes to this policy

If this policy changes, the new version will be published on this page with an updated date. Material changes will be flagged inside the app.