Privacy Policy
This policy explains how the KES mobile app (“the app”) and the services behind it handle your personal data. The app is provided for the Kurdistan Engineering Syndicate (“the Syndicate”, “we”), which keeps the membership records, and is developed and operated on the Syndicate's behalf by Giga Ant Technology.
1. Data we collect
Membership and identity data
- Your name (in Kurdish/Arabic and in English), gender, year and place of birth.
- Mobile number and email address.
- National ID number, university, graduation year, specialty, workplace, branch, department and engineering rank.
- Your membership number, status, dues and payment history.
Much of this already exists in the Syndicate's membership roll. The app shows it to you and lets you keep it up to date.
Documents and photos you provide
- Documents you attach to an application or request — for example a graduation certificate, national ID card or information card, or a CV for a job vacancy.
- Your profile photo, if you set one.
The app uses the camera and photo library only when you choose to take or attach a picture, and uploads only the pictures and files you select.
Requests and activity in the app
- Membership and rank applications, service requests, support letters, complaints, training enrolments and job applications you submit, and their progress.
- Your notification settings and the notifications sent to you.
Device and sign-in data
- Device name and model, platform (iOS or Android), app version, and a push-notification token for the device.
- The IP address of sign-in requests and the time a device was last used.
- Whether you turned on Face ID / fingerprint unlock. Your biometric data never leaves your phone: the check is done by your device, and we never receive fingerprints or face data.
We do not collect your location, contacts, or advertising identifiers.
2. How we use it
- To sign you in, keep you signed in, and protect your account (one-time codes, device sessions, rate limits).
- To show your membership card, rank, dues and records.
- To receive, review and decide on your applications and requests.
- To process payments of dues and fees that you start in the app.
- To send you notifications about your applications, payments, news, events and trainings. You can change which notifications you receive in the app's settings, or turn them off in your phone's settings.
- To answer your support requests and to meet the Syndicate's legal and accounting obligations.
3. Who we share it with
Your data is seen only by authorised Syndicate staff, limited to what their role and branch require. Every staff view of an uploaded document is logged. We use the following service providers, only to deliver the app's features:
| Provider | Purpose | Data involved |
|---|---|---|
| Standing Tech | Sending sign-in codes by WhatsApp and SMS | Mobile number, the code |
| Mailgun | Sending sign-in codes by email | Email address, the code |
| Google Firebase Cloud Messaging, Apple Push Notification service | Delivering push notifications | Push token, notification content |
| Payment providers (such as FIB, FastPay, ZainCash, Qi Card) | Processing payments you start | Amount, reference, payment result |
| Our hosting provider | Running the servers that store the data | All data described above |
Card and wallet details are entered with the payment provider, not in KES, and we never receive them. We may also disclose data where the law requires it. We do not sell personal data or share it for advertising.
4. How we protect it
- All traffic between the app and our servers is encrypted (HTTPS).
- Your sign-in token is stored in the iOS Keychain or Android Keystore, and our server keeps only a one-way hash of it. Sign-in codes are also stored only as hashes.
- Uploaded documents are stored outside the public website and can be opened only by you and authorised staff.
- You can see every device signed in to your account in the app and sign any of them out.
5. How long we keep it
Membership records are kept for as long as you are a member and afterwards for as long as the Syndicate's rules and the law require a professional register to be kept. Financial records are kept for the period accounting law requires. Sign-in codes expire within minutes. Device sessions and push tokens are removed when you sign out or delete your account.
6. Your rights and choices
- See the data we hold about you — most of it is shown in the app.
- Ask us to correct data that is wrong.
- Delete your app account — see Delete your account.
- Stop notifications at any time in the app or in your phone's settings.
To make a request, email info@gigant.tech from the address on your record, or write from the app's support options. We answer within 30 days.
7. Guests
You can read public news, events and trainings without signing in. In that case the app sends no personal data.
8. Children
KES is intended for engineers and applicants for membership. It is not directed at children, and we do not knowingly collect data from anyone under 16.
9. Changes
If we change this policy we will update this page and the date above. Significant changes will also be announced in the app.
10. Contact
Kurdistan Engineering Syndicate — KES app
Email: info@gigant.tech