Privacy Policy

1. Who we are and who this covers

NANATRADE publishes the Basilissa Staff app for Android (Google Play) and iPhone (Apple App Store). It is used by employees to record their attendance (clocking in and out). Accounts are created by the employee's employer, and this policy covers those employees.

The app is not for the general public and is not for children. We do not knowingly collect data from anyone under 18.

2. Data we collect

• Account information: your name, phone number, employee ID, and your assigned branch and role.
• Login: you sign in with your phone number and a 6-digit one-time code sent by SMS. There are no passwords.
• Location: your precise (fine) and approximate location, collected when you clock in or out, to check that you are at a branch you are assigned to. We collect it only while the app is in use.
• Attendance records: your clock-in and clock-out times, shift status, and whether each record has synced.
• Device information: a device identifier, used to tie one account to one device, and a push notification token.
• Diagnostics and analytics (Google Firebase): crash reports (Crashlytics), app usage events (Analytics), and push messaging (Cloud Messaging).

3. Why we use it

• To verify that attendance happened at the workplace
• To sign you in and keep your account secure
• To prevent device sharing and fraud
• To send you notifications
• To find and fix crashes and to improve the app

4. Who we share it with

• The employer or organisation you work for.
• Google Firebase, as a service provider. See Google's Privacy Policy.
• Hubtel, our SMS provider, to deliver your login codes by SMS.

We do not sell personal data.

5. Storage and security

Data is sent over HTTPS. Login tokens are kept in the device's secure storage. Attendance may be saved in a local database on your device and synced when the device is back online.

6. Retention

Attendance records are kept indefinitely, for legal and audit reasons. Profile data is kept while you are an active employee, and is then deleted or anonymised.

7. Your rights and deleting your account

You can ask us for access to your data, to correct it, or to delete it. Contact info@basilissagh.com. To delete your account, see how to request account deletion.

8. Permissions the app requests

• Location: to check you are at your assigned branch when you clock in or out. On Android this is fine and coarse location. On iPhone it is “While Using the App” location, and you can turn off precise location in iOS settings. We do not ask for location access in the background.
• Notifications: to send you shift and attendance alerts.
• Network access: on Android, network state, to know whether the device is online so saved attendance can be synced.
• Background refresh (iPhone): lets the app sync saved attendance and receive notifications while it is not open. It does not use your location.

9. Changes to this policy, and contact

If we change this policy we will update the date at the top of this page. Questions about it: info@basilissagh.com