Last updated: 24 August 2026

This Privacy Policy describes how MBOS MCHJ ("Company", "we", "us", or "our") collects, uses, and shares information when you use the MTracker mobile application and related MNazorat platform services (the "Service").

MTracker is a workforce location app for employees. Organizations that subscribe to the MNazorat platform (after the Company enables their organization) give their employees login credentials. The employee uses MTracker during the work schedule set by that organization. Organization administrators can view location on the organization's operations dashboard.

By using the Service, you agree to this Privacy Policy.

This Policy is written in English. The in-app interface of MTracker is in Uzbek.

1. Controller and contact

Company: MBOS MCHJ

Address: Tinchlik ko'chasi 6a, IT Park building, 3rd floor, room 306, Urganch, Khorezm Region, Uzbekistan

Questions about this Policy or personal data: write to the Company at the address above, or use the account tools listed in Section 9.

• Email: mbosgroupservice@gmail.com
• Phone: +998 62 227 76 76
• Website: https://mnazorat.uz
• This Policy: https://privacy-policy.mnazorat.uz/
• Account deletion request: https://new.mnazorat.uz/auth/delete-account

2. Who this app is for

MTracker is intended only for adult employees (18+) of organizations that use the MNazorat platform. It is a business tool, not a consumer social or advertising product.

You do not create a public account yourself. Your employer / organization creates or assigns your account and work schedule. The Company enables each organization on the platform.

If you are not an employee of an enabled organization, you cannot use MTracker.

3. Data we collect

3.1 Account data (provided by you or your organization)

• Username and password (sign-in)
• Display name
• Profile image URL (if your organization has set one)
• Organization and role as assigned on the platform

MTracker does not collect payment card data and does not show ads.

3.2 Precise location (including background)

With your permission, MTracker collects precise GPS (latitude, longitude, time, and whether you are inside a work area defined by your organization).

• Location is collected during the work hours configured for you. If your organization sets a 24-hour schedule, location may be collected for those 24 hours.
• If you grant background / "Always" location permission, collection may continue while the app is in the background or the screen is off, only to perform this work-location function.
• Location is sent to our servers so your organization administrator (for example, the head of the enterprise) can see workforce location for operations.
• Location is not used for third-party advertising or sale to data brokers.

If you refuse location permission, the core function of MTracker will not work.

3.3 Device and technical data

• Device identifier used to bind the login session (on iOS: identifier for vendor; on other supported systems: the equivalent device identifier)
• App version and basic technical logs needed to run the Service
• Authentication token stored on the device so you stay signed in

3.4 Data we do not collect in MTracker

MTracker does not collect: advertising IDs for ads, biometric templates (Face ID / fingerprint stay on the device if the OS uses them), contacts, photos from your library, microphone, or third-party analytics / crash SDKs.

4. Why we use this data

We process personal data to:

• Authenticate you and keep your session secure
• Provide workforce location to your organization during your work schedule
• Queue location points on the device if the network is unavailable, then send them when connected
• Operate, secure, and maintain the MNazorat platform
• Comply with law and respond to valid legal requests

Legal bases under the Law of the Republic of Uzbekistan "On Personal Data" and, where they apply, other rules: performance of the arrangement between the Company and your organization; our legitimate interest in running a secure business platform; your consent for location and notification permissions on the device; and legal obligations.

5. Who can see your data

• Your organization administrators — this is the main purpose of the product (location and account identity).
• MBOS MCHJ staff who operate hosting and support, only as needed to run the Service.
• Processors that host infrastructure for us (see Section 6), under our instructions.
• Authorities, if required by law.

We do not sell personal data. We do not share it with third parties for their independent advertising.

6. Processors and infrastructure

We use service providers to host and operate the Service, including:

• Beget — server hosting
• Object storage (S3-compatible, MinIO) — files used by the MNazorat platform (for example profile images), not for advertising

The full MNazorat platform (web dashboard used by organizations) may also use Telegram to send operational notices to users who have linked Telegram. MTracker itself does not require Telegram.

Location is shown to administrators on our operations dashboard.

Servers and related infrastructure may be located in Uzbekistan or in other countries used by these providers. Where data leaves Uzbekistan, we take reasonable steps consistent with applicable law.

7. Retention

• GPS points and GPS event reports: deleted automatically when older than two (2) months (nightly cleanup, Asia/Tashkent).
• Account data: kept while the account is active. After the account is closed or deleted, we keep what we still need for security, disputes, or law, then delete or anonymize what we can.
• On the device: login token, profile cache, and queued GPS points are stored locally. Signing out or deleting the app removes local app data (subject to your device backups).

8. Security

We use HTTPS for data in transit and commercially reasonable measures on our servers. No method is 100% secure. Keep your password confidential and use a device lock screen.

9. Your choices and account deletion

You can:

• Turn location or notifications off in system Settings (core tracking will stop if location is off)
• Change your password in the app
• Sign out (this stops tracking on that device and clears local credentials)

Delete account: MTracker does not create consumer self-signup accounts. To request deletion of your employee account and related personal data, use:

https://new.mnazorat.uz/auth/delete-account

You may also ask your organization administrator. We or your organization will handle the request as required by applicable law. Some records may remain where the law requires us to keep them.

Access, correction, or other requests: contact the Company at the address in Section 1 or through your organization.

10. Children

The Service is for workforce use by people 18 years of age or older. We do not knowingly collect personal data from anyone under 18. If you believe we have, contact us and we will delete it.

11. App Store and Google Play data summary

For store nutrition labels / Data safety, MTracker may collect:

Used for app functionality and employer operations only.

12. Changes

We may update this Policy. The "Last updated" date will change. Material changes may be announced in the app or on https://mnazorat.uz. Continued use after an update means you accept the new Policy.