1. Scope
Queli d.o.o. (“Queli”, “we”, or “us”) provides the Queli Mobile application and the associated Makra platform (together, the “Service”). The mobile application is a business tool for maintenance and construction operations. It is made available to authorized employees, contractors, dispatchers, project managers, and other personnel of the organization that operates the workspace (the “Client Organization”).
The same Queli Mobile application may be used by different Client Organizations, including organizations using client-specific workspace names or brands. The workspace configuration, enabled features, and business controls are determined by the Client Organization.
This policy covers the mobile application and its direct service infrastructure. Our website cookie notice is separate and applies where you visit the Queli website.
2. Roles and Contact
For work orders, timesheets, field evidence, and location data that the Client Organization submits or controls through the Service, Queli normally acts as a data processor. The Client Organization, normally the employer or the organization engaging the worker, is the data controller. It decides why and how those features are used.
Queli acts as a data controller for limited platform data used to provide, secure, support, invoice, and improve the Service, such as account provisioning data, billing records, aggregate usage information, security logs, and support communications.
You may also contact Queli at office@queli.ai or Queli j.d.o.o., Bukovačka cesta 250A, 10000 Zagreb, Croatia. We will route processor-controlled requests to the Client Organization where appropriate.
3. Information We Process
| Category | Examples |
|---|---|
| Account and role data | Name, business email address, authentication identifier, workspace membership, role, language preference, and secure session or device tokens. |
| Employment and assignment data | Employer or Client Organization, manager or approver, team, project, cost center, work schedule, and work assignment. |
| Work records | Work order details, task status, problem descriptions, notes, materials, receipts, photographs, checklists, messages, approvals, and related customer or site information. |
| Time records | Daily timesheet entries, worked time, pause or resume events, breaks, absence or cost-allocation entries, submission status, and manager approval status. |
| Location evidence | GPS coordinates, accuracy, timestamp, derived place label or travel estimate, distance from a work site, and the work order or workday to which the evidence relates. |
| Technical and security data | App version, platform, device type, application identifiers, IP address, timezone, synchronization events, performance data, crash reports, and security or audit logs. |
Some information may relate to other people, for example a customer contact named in a work order. It is processed for the Client Organization’s operational purpose described in this policy.
4. Location Data
Location evidence helps the Client Organization operate field work, understand time at or near a work site, estimate travel, validate work records, and review timesheets. Queli does not use customer-controlled location data for advertising, sale, or unrelated profiling.
When location may be collected
- While the app is open, when you use a feature that needs location, such as opening or updating work, capturing evidence, synchronizing records, or reviewing time.
- During an active workday or tracking session, if the Client Organization enables that mode and you grant the required mobile permission. On Android this can include a foreground service with a persistent notification so travel and job-site time can be estimated while the app is in the background.
Production builds normally collect periodic location probes rather than continuous high-frequency tracking. The interval depends on the configured workspace, app version, device, and movement context. In the current production policy, probes are generally no more often than about every five minutes while moving or near a job site, and no more often than about every thirty minutes while stationary. Internal, test, or development configurations may use different intervals.
Tracking is intended to stop when the active workday or session ends, when tracking is paused, or when you sign out. You may withdraw or change location permission in your device settings. Some work or time features may then be unavailable, and the app may report missing location evidence to the Client Organization.
The Client Organization is responsible for determining whether and how location features are enabled, providing workplace notices, meeting employment-law and consultation requirements where applicable, and establishing the appropriate legal basis. Queli processes this data on the Client Organization’s documented instructions.
5. Purposes and Legal Bases
| Purpose | Queli role | Legal basis |
|---|---|---|
| Provide work orders, timesheets, evidence capture, approvals, synchronization, and configured field operations. | Processor | The Client Organization’s instructions and legal basis, normally employment or contract necessity, legal obligation, or legitimate interests, with consent only where required and appropriate. |
| Operate, secure, monitor, and support the Service. | Controller | Contract, legitimate interests, and legal obligation. |
| Billing, account administration, and compliance. | Controller | Contract and legal obligation. |
| Improve the Service using aggregate or statistical information. | Controller | Legitimate interests, with safeguards against unwarranted impact on individuals. |
Where consent is required, it must be freely given and specific to the enabled feature. The Client Organization is responsible for collecting and documenting that consent where it is the controller.
7. Retention
Customer-controlled work, time, evidence, and location data is retained as instructed by the Client Organization and as needed for its legal, tax, employment, audit, and operational obligations. Account, billing, and contract records are retained for the commercial relationship and applicable statutory periods. Security and diagnostic logs are retained for a limited troubleshooting and security period, normally up to twelve months. Backups may persist for a limited additional recovery period.
The Client Organization controls deletion or archiving of records in its workspace. Workers should request deletion or correction through their employer or manager as described in Section 2.
8. Security
We use encryption in transit, access controls, least-privilege administration, audit controls, secure development practices, logging, backup and recovery procedures, and review of subprocessors and infrastructure. Access to production data is restricted to authorized personnel for support, security, and service operation.
No system is perfectly secure. If a personal-data breach affects customer-controlled data, Queli will notify the affected Client Organization without undue delay and assist it in meeting its regulatory obligations.
9. Your Rights and Choices
Depending on applicable law, you may have rights to access, rectification, erasure, restriction, portability, objection, and withdrawal of consent. You may also complain to your local supervisory authority; in Croatia this is AZOP.
For customer-controlled data, first contact your employer, manager, or workspace administrator. They are responsible for handling data subject requests as controller and can instruct Queli where action in the Service is required. You may contact office@queli.ai if you do not know your workspace contact or need to contact Queli about data for which Queli is controller. We may need to verify your identity and may need the controller’s instruction before acting.
You can control camera and location permissions through your device settings. Disabling a permission may prevent the related feature from working and may create a missing-evidence status visible to the Client Organization.
10. Children and Business Use
The Service is intended for business use by Client Organizations and is not directed to children. We do not knowingly collect data from children through the mobile application.
11. Changes
We may update this policy to reflect product, legal, or organizational changes. The effective date above will be updated when we publish a new version. Material changes affecting Client Organizations will also be communicated through the service relationship where appropriate.