Privacy notice

Who this is about

Yara is a work-tracking application used by manufacturing businesses to run their production floor. If you sign in to it, your employer has chosen to use it and has given you an account. This notice explains what Yara records about you, why, who can see it, and what you can ask for. It is written under the Personal Data Protection Act 2010 of Malaysia.

Who is responsible

Your employer decides why your data is collected and how it is used in their business. In the Act’s words they are the data user.

[REKA registered company name] builds and runs Yara on your employer’s behalf and handles the data only on their instructions. In the Act’s words we are the data processor. You can reach us at [privacy contact email] or at [REKA registered address].

What is recorded

• Your account: your name or the role name your employer chose, a username, your role, and optionally a phone number or email if your employer entered one. Passwords are stored only in encrypted form and nobody, including us, can read them.
• Your work: which jobs you were assigned, when you started, paused and finished each one, the reason you gave for a pause, notes you typed, problems you reported, and photos or documents you uploaded against a job.
• Your use of the app: when you signed in, what you changed, and the device type and browser you used. This is kept as an audit trail.
• Your preferences: your chosen language and whether you have seen the introduction screens. These stay on your own device.

Yara does not record your location, does not read anything else on your phone, and does not use advertising or tracking services.

Why it is recorded, and on what basis

To run production: to give you your jobs in the right order, to record how long work takes, to alert a supervisor when something stalls, and to work out what a job cost. This is necessary for your employment contract and for your employer’s legitimate business of running its factory, which is the lawful basis under section 6 of the Act. Photos of parts are recorded where a job requires proof of completion.

Who can see it

• Your employer’s management (owners, operations managers and, for their own teams, supervisors) can see your jobs, times, notes and uploads.
• Other workers cannot see your jobs or your details.
• [REKA registered company name] staff can access the system to operate and support it. Every such access is logged.
• Service providers that host the system: the database and file storage (Supabase and Vercel). They process data on our instructions and do not use it for their own purposes.

Commercial figures such as order values are never shown to workers. Your data is not sold and is not shared with anyone else unless the law requires it.

Where it is kept and for how long

Data is stored in Singapore, on servers operated by our hosting providers. Job records are kept for as long as your employer uses Yara, because they are the production history of the business. In-app notifications are deleted after 180 days. When you leave, your account is deactivated rather than deleted so that the history of work you did stays accurate; your employer can ask us to remove your name from it.

How it is protected

Every connection is encrypted. Each company’s data is isolated from every other company’s at the database level. Files are only reachable through short-lived links. Passwords must be changed on first sign-in. Access by our staff is logged.

What you can ask for

You have the right to see the personal data held about you, to have it corrected if it is wrong, and to object to a use of it. Ask your employer first, because they control it; if you cannot, contact us at the address above and we will help. You can change your password at any time by asking your manager to reset it, and you can change your language from your own settings screen.

Changes to this notice

If this notice changes in a way that matters to you, the date at the top will change and your employer will be told. The current version is always at this address.