OneLink (“OneLink”, “we”, “our”, or “us”) is a workplace and employee-services application. This Privacy Policy explains how information is collected, used, stored, and shared when you use the OneLink mobile application and related OneLink services.
This policy applies to the OneLink Android application (package: avee.me.info_hub) and the OneLink services made available through the app.
1. Information We Collect or Process
Account and access-request information
When you request access to OneLink, we may collect your full name, CNIC, Personnel Number, phone number, department, unit, and other profile or employment-related information provided by the organization. This information is used to verify eligibility, process access requests, authenticate users, provide personalized workplace services, and administer OneLink accounts.
Login and authentication information
OneLink uses Personnel Number and CNIC for authentication where configured. These credentials are transmitted to the OneLink server when you sign in. After a successful login, the app stores an authentication token on the device so you can remain signed in.
For the BOK/PTW convenience feature, OneLink may securely store the signed-in user's Personnel Number and CNIC in operating-system-protected secure storage on the device. The CNIC field is visually masked when automatically filled into the trusted BOK/PTW web page. These locally stored credentials are cleared when you log out or switch to guest mode.
PDFs or XFA
If you choose a PDF using the Salary Slip feature, the selected PDF is sent to the OneLink server for analysis. Supported XFA salary PDFs are analyzed to extract salary-slip information, and the latest extracted salary summary and related salary/loan information displayed as a formatted salary slip.
Incident reports and optional photos
If you submit an incident report, OneLink may collect the incident category, location entered by you, description, an optional photo selected from your device or captured using the camera, and your signed-in account identifier. This information is sent to the OneLink server for authorized review and management.
Location information
OneLink can request location permission for location-based utilities such as Qibla direction. When you choose to use current location for Qibla direction, the app reads your device location to calculate the direction. In the current implementation, this Qibla calculation is performed in the app and the precise coordinates are not intentionally submitted to the OneLink server as part of that feature.
Camera, photos, files, and documents
OneLink may request camera access when you choose to capture an incident photo, photo/gallery access when you select an existing incident image, and file/document access when you select a PDF such as a salary slip. OneLink does not automatically upload all content on your device; only content that you actively select or submit through a relevant feature is processed.
Push notifications
OneLink uses Firebase Cloud Messaging (FCM). A device messaging token may be generated by Firebase and registered with the OneLink server, associated with the signed-in user where applicable, so notifications can be delivered.
App usage analytics
OneLink records limited first-party app usage events. These may include app opens, module opens, module identifier, a random/session identifier, operating-system platform, event date/time, and association with the signed-in OneLink account where applicable. Pending events may temporarily remain on the device until they can be sent to the OneLink server.
Advertising and consent
OneLink includes Google Mobile Ads functionality and uses Google's User Messaging Platform (UMP) where required to manage advertising consent. Google and its advertising partners may process information such as device or advertising identifiers, IP address, approximate location derived from network information, ad interactions, diagnostics, and similar information under Google's own policies and the user's consent choices.
OneLink does not sell CNIC, Personnel Number, salary information, or other OneLink account data to advertisers.
Technical and server information
Standard technical information may be processed when the app connects to servers, including IP address, request date/time, application/server logs, platform information, authentication status, errors, and security information.
2. How We Use Information
- Authenticate users and maintain signed-in sessions.
- Process account and access requests.
- Provide workplace, employee, schedule, menu, salary, notification, Islamic-resource, utility, and other OneLink features.
- Provide BOK/PTW credential autofill when the signed-in user opens the configured trusted portal.
- Process selected salary PDFs and present salary information.
- Receive and administer incident reports, complaints, requests, and other submissions.
- Deliver push notifications.
- Operate advertising with applicable consent controls.
- Measure basic app usage and improve OneLink.
- Maintain security, prevent misuse, and diagnose technical problems.
- Comply with applicable legal or organizational requirements.
3. BOK/PTW and External Web Services
Some features open websites or web portals inside an in-app browser. For the configured BOK/PTW portal, OneLink may automatically insert the signed-in user's securely stored Personnel Number and CNIC and submit the login form after the user opens that feature. This occurs only for the trusted portal host configured by OneLink.
Once information is submitted to an external or third-party portal, that portal's own privacy, security, and retention practices may apply. OneLink is not responsible for independent third-party websites that are not operated by OneLink.
4. How We Share Information
Information may be made available only as reasonably necessary to authorized OneLink administrators or organizational personnel, hosting/infrastructure providers, Google Firebase, Google Mobile Ads and consent services, external portals you choose to use, and authorities where disclosure is legally required or necessary for security.
We do not sell OneLink personal information such as CNIC, Personnel Number, salary data, or incident-report data.
5. Data Storage and Retention
Information is retained only for as long as reasonably necessary to provide OneLink, meet organizational requirements, resolve disputes, maintain security, or comply with applicable law.
- Account and access-request records may remain while they are administratively relevant.
- Incident reports and submitted photos may be retained as workplace reporting records.
- Analytics records may be retained for service reporting and improvement.
- FCM tokens may remain until replaced, expired, inactive, or removed during administrative cleanup.
- Secure PTW/BOK P.No and CNIC stored by the app on the device are cleared on logout or guest mode.
Backup copies and server logs may persist for a limited additional period through normal security and backup processes.
6. Security
We use reasonable safeguards including HTTPS connections for OneLink server endpoints, authentication controls, operating-system-protected secure storage for sensitive local autofill credentials, CNIC masking in relevant login fields, restricted administrative access, and server-side validation. No transmission or storage method can be guaranteed to be completely secure.
7. Your Choices and Requests
- Choose whether to grant notification, camera/photo, or location permissions.
- Change app permissions in Android settings.
- Manage advertising consent/privacy choices when Google's privacy options are available.
- Log out to clear OneLink's locally stored secure PTW/BOK credentials.
- Request correction of inaccurate account information.
- Request deletion or deactivation of your OneLink account or associated personal information, subject to applicable workplace, contractual, security, legal, and record-retention requirements.
Email: muhammadnav33d1483@gmail.com
Please do not send your full CNIC through ordinary email unless specifically requested through an approved secure process.
8. Children
OneLink is a workplace and employee-services application and is not designed or directed primarily to children under 13. We do not knowingly intend to collect personal information from children through an employee account.
9. Third-Party Services
OneLink may use or interact with Google Firebase/Firebase Cloud Messaging, Google Mobile Ads, Google User Messaging Platform, Android operating-system services, and external workplace/service web portals. These services may process information under their own terms and privacy policies.
10. Changes to This Privacy Policy
We may update this Privacy Policy when OneLink features, legal requirements, providers, or data practices change. The revised policy will display an updated effective date. Material changes may also be communicated through the app, website, or another appropriate channel.