Privacy Policy

Fasvia Work is a GPS-verified attendance management app for businesses and startups in Nigeria and Africa. This section describes exactly what data Fasvia Work collects and how it is used.

Company administrators provide:

• Company name, admin full name, admin email address, admin phone number
• Office GPS coordinates used to define the geofence boundary for check-in verification
• Attendance rule configurations including work start time, work end time, and late check-in policy

Employees provide:

• Full name, work email address, phone number, department, and role
• GPS coordinates captured at the moment of check-in and check-out only
• Background location access during configured work hours only — used solely to verify the employee is physically present at the workplace. Background location stops automatically when the employee checks out or when the configured work end time is reached. Location is never collected outside of work hours.
• Attendance records including check-in time, check-out time, total hours worked, break durations, and late arrival reasons

Fasvia is a smart attendance management platform built for African businesses and institutions. Fasvia provides GPS-verified, fraud-proof attendance tracking services to businesses, startups, and organisations across Nigeria and Africa.

For all data protection enquiries, contact us at: support@fasvia.app. We are committed to protecting the privacy of every user and process personal data only in accordance with applicable Nigerian and international data protection law.

For Fasvia Work, we collect the following categories of personal data:

• Identity Data: Full name, email address, phone number, department, and role — used to create and authenticate your account.
• Location Data: GPS coordinates captured at check-in and check-out. Background location is accessed during work hours only to verify workplace presence. No location data is collected outside of configured work hours.
• Attendance Records: Check-in time, check-out time, total hours worked, break start and end times, late arrival reasons, and attendance status per day.
• Usage Data: Login timestamps and session activity logs used for security and dispute resolution.

We collect only the minimum data necessary to provide the attendance management service. We do not collect biometric data, financial data, or any data unrelated to attendance verification in Fasvia Work.

Under the Nigeria Data Protection Act 2023 (NDPA) and applicable international law, our lawful bases for processing are:

• Location Data — Explicit Consent: Background location access is granted explicitly by the employee before the app requests the permission. Employees may withdraw consent at any time by contacting their company administrator or emailing support@fasvia.app.
• Identity and Attendance Data — Performance of Contract: Collecting name, email, and attendance records is necessary to deliver the attendance management service to the employer.
• Usage Data — Legitimate Interest: Login logs are processed on the basis of our legitimate interest in maintaining service security and resolving disputes.

We use your personal data exclusively for the following purposes:

• Verifying that an employee is physically present at the registered workplace at the time of check-in
• Recording accurate attendance data including check-in time, check-out time, hours worked, and break durations
• Alerting company administrators when employees arrive late, including the reason provided by the employee
• Generating attendance reports and summaries for company administrators
• Automatically checking out employees at the configured work end time if they have not manually checked out
• Sending security notifications when account changes such as password resets occur

We do not use your data for advertising, profiling unrelated to attendance, or sale to any third party.

We never sell your personal data. We share data only with the following parties:

• Supabase: Our database and backend infrastructure provider. Data is stored with Row Level Security enforced, ensuring no data leakage between companies.
• Your Company Administrator: Attendance records, check-in times, check-out times, and late arrival reasons are visible to your company's registered admin — solely for workforce management purposes.
• Law Enforcement: We will disclose data to law enforcement only when lawfully required under Nigerian law and only to the extent strictly required.

All sub-processors are contractually bound to process your data only as instructed by Fasvia and to apply appropriate security measures.

We retain your personal data only as long as necessary:

• Active employee data: Retained for the duration of your employment at the registered company.
• Attendance records: Retained for 3 years from the date of the record to support payroll disputes and HR audits.
• Deleted accounts: All personal data is erased within 30 days of a valid account deletion request, except where retention is required by Nigerian law.

When data reaches the end of its retention period it is securely and permanently deleted from all Fasvia systems within a 30-day window.

Under the Nigeria Data Protection Act 2023 you have the following rights:

• Right to Access: Request a copy of all personal data we hold about you.
• Right to Rectification: Request correction of inaccurate or incomplete data.
• Right to Erasure: Request deletion of your personal data, subject to legal retention obligations.
• Right to Withdraw Consent: Withdraw consent for location processing at any time. This will affect your ability to use the check-in feature.
• Right to Data Portability: Request your attendance records in CSV or JSON format.
• Right to Lodge a Complaint: Complain to the Nigeria Data Protection Commission at ndpc.gov.ng.

We implement the following security measures to protect your personal data:

• All data stored in our database is encrypted at rest
• All data transmitted between the app and our servers is encrypted in transit using TLS
• Supabase Row Level Security ensures users can only access their own company's data
• Passwords are never stored in plain text — all passwords are hashed before storage
• Access to production data by Fasvia staff is limited to authorised personnel on a need-to-know basis

In the event of a data breach we will notify the Nigeria Data Protection Commission within 72 hours and notify affected users without undue delay, as required by NDPA 2023.

Fasvia Work is designed for use by adults in a professional workplace context. We do not knowingly collect data from anyone under the age of 18. If you believe a minor's data has been processed without appropriate consent, contact us immediately at support@fasvia.app.

Fasvia uses a minimal approach to cookies and storage:

• Session authentication: Used solely to maintain your logged-in session securely.
• Local storage: Used only to cache pending attendance records for offline support. This data syncs to the server and is cleared upon successful sync.
• No advertising cookies: We use zero third-party advertising or tracking cookies.
• No tracking pixels: We do not embed third-party tracking pixels on any Fasvia page.

We may update this Privacy Policy from time to time. For material changes we will notify you by email at least 14 days before the changes take effect. For minor changes we will update the "Last updated" date at the top of this page.

If you are not satisfied with our response you may escalate to the Nigeria Data Protection Commission (NDPC):

• Website: ndpc.gov.ng