Privacy Policy
Effective July 16, 2026
This Privacy Policy explains how NVM GeoAttend (“the app”, “we”) collects, uses, and safeguards information when you use the NVM GeoAttend mobile app and web application. By using the app you agree to the practices described here.
Information we collect
We collect only what is needed to record attendance and keep your account secure:
- Account details: name, email address, and role, provided when you sign up.
- Location data: your device’s latitude and longitude at the moment you punch in or out. Location is captured only when you take a punch action — the app does not track you in the background.
- Attendance records: entry and exit times (set by our server), computed work hours, and the map coordinates of each punch.
- Device and session data: a device identifier, device name, platform, and IP address, used to enforce device limits and detect misuse.
- Activity logs: security-relevant events (sign-ins, punches, and policy violations such as screenshot or developer-tool attempts) recorded with your IP address for your administrator.
How we use your information
- To record and display your attendance and calculate worked hours.
- To verify punches against your institution’s configured campus geofence.
- To authenticate you and enforce security policies (device limits, account status).
- To provide administrators with attendance reports and activity oversight.
Legal basis and consent
Location is collected with your consent each time you punch, and is essential to the app’s core purpose. You may decline location access, but attendance punching will not function without it.
Data sharing
We do not sell your data or use it for advertising. Your data is visible to authorized administrators of your institution and is processed by our infrastructure providers (Supabase for database and authentication, Vercel for hosting) solely to operate the service.
Data retention and security
Attendance records are retained for as long as your institution requires them. Data is protected by database row-level security, encrypted transport (HTTPS), and access controls. Attendance records are immutable once created; corrections are made through an audited process rather than by editing the original entry.
Your rights
You may request access to, correction of, or deletion of your personal data by contacting your institution’s administrator or NVM APPS. Deleting your account removes your profile and associated personal data, subject to records your institution is legally required to keep.
Children
The app is intended for staff and enrolled students of an institution and is not directed at children under 13.
Changes to this policy
We may update this policy; material changes will be reflected by the effective date above.
Contact
Questions about privacy: NVM APPS.