Privacy policy for the staff app

the organisation that employs you decides what information is held about you, because it is your employer and these are its staff records. People360 is the software it uses to hold them, and we act on its instructions. We do not sell your information, we do not advertise to you, and there is no tracking or analytics code in the app.

the organisation that employs you is the data controller.It decides what is collected about you, what it is used for, and how long it is kept. Questions about your own record — seeing it, correcting it, or asking for it to be removed — go to its HR department first, because we are not permitted to change a hospital’s staff records on a request from someone else.

Taka Square Services Ltd (trading as People360, RC 1882928) is the data processor. We built and run the software. We handle your information only to provide the service to your employer, under a written data processing agreement with it. If you write to us about your own record we will pass you to your employer rather than act on it ourselves.

All of it is tied to you as a named member of staff. Nothing in this list is anonymous, and nothing in it is optional to the running of payroll and HR.

If your employer uses geofenced clocking, the app reads your location when you open the Clock-in screen and when you tap Clock in, to confirm you are at one of your employer’s sites. The coordinates are saved with that attendance record.

It is never read in the background, never while the app is closed, and never for anything else. Your phone will ask your permission the first time, and you can refuse or withdraw it in your phone’s settings. If you do, clocking in through the app stops working and you clock in whatever other way your employer provides.

• You, for your own record, your payslips and your own requests.
• Your managers and approvers. Anyone who approves your leave, your duty swaps, your profile changes or your appraisals can see what they are approving, and your appraisal scores and comments are visible to whoever appraises you.
• HR and payroll staff at the organisation that employs you, as their roles allow.
• Our support engineers, only where your employer asks us to look into a problem, and only as far as that problem requires.
• Organisations your employer must file with, such as tax authorities, your pension administrator and your bank. Those filings are your employer’s legal obligations, not our choice.

Every hospital using People360is separated from every other, and staff at one organisation cannot see another’s records.

You can ask for your account to be deleted from inside the app: open More › Delete my account. This sends a deletion request to the organisation that employs you’s HR department, who own your account and close it. You can follow the request under Queries & complaints.

Closing the account removes your access and the personal details your employer does not have to keep. Your employment record itself belongs to your employer, and payroll, tax and pension records have to be kept for the periods set by Nigerian law, so those are kept until that period ends. You can also ask HR to correct your record at any time. If you leave your job, your access ends and your record is kept only as long as your employer must keep it.

You can remove the app from your phone at any time. Doing so signs that device out and deletes the sign-in token stored on it. It does not change anything held by your employer.

Your employer sets the retention period, because it is the controller. In practice employment, payroll and tax records in Nigeria are kept for several years after someone leaves, to satisfy tax, pension and labour obligations. Ask the organisation that employs you for its own schedule.

• Traffic between the app and the server is encrypted in transit.
• Your sign-in token is held in your phone’s secure storage, not in ordinary app files.
• Passwords are stored as one-way hashes, so nobody can read yours back.
• Each organisation’s records are isolated from every other organisation’s at the database level.
• Signing a device out, or your employer disabling your account, stops that device working.

No advertising. No tracking across other apps or websites. No analytics or advertising code of any kind. The app does not read your contacts, photos, camera, microphone, calendar, health data or browsing history, and it does not use an advertising identifier.

People360 is workplace software for employed adults. It is not intended for children and we do not knowingly hold information about them.

If this policy changes, the date at the top changes with it and the new version appears at this address. Where a change materially affects staff, we tell the employing organisations so they can tell their people.

Start with the organisation that employs you’s HR department, since it decides what is held about you. If your question is about the software rather than your record, write to us at hello@people360.ng and a person will answer.

You may also complain to the Nigeria Data Protection Commission, which regulates how personal data is handled in Nigeria.