Privacy policy

Last updated 3 November 2026

Numidah helps businesses record attendance and prepare payroll. This policy explains what we collect, why, and the choices you have. It applies to the Numidah website and the Numidah phone app.

Who is responsible

Your employer decides how Numidah is used for its staff and is responsible for that information. We run Numidah for your employer and use the information only to provide the service. For your own account on this website (for example if you sign up a company), we are responsible.

What we collect

Account details: name, work email, phone number, role and the company you work for.
Sign-in details: your password (stored only as a one-way scramble), and the email Google or Apple confirms if you choose to sign in with them.
Attendance: when you clock in and out, the work site, and your phone's location at that moment, with how accurate it was and whether it looked faked. We do not track your location at any other time.
Clock-in photos: only if your employer turns this on. Photos are set to be deleted after 90 days unless a legal hold applies.
Leave, shifts, time corrections and overtime your employer records.
Pay details your employer enters, such as pay rate, tax and pension details and bank account. Bank account numbers and pension PINs are stored encrypted.
A phone token so we can send you alerts, if you allow notifications.
Basic technical records, such as sign-in times and security events, to keep accounts safe.

Why we use it

To let you sign in, clock in and see your shifts, leave and payslips.
To let your employer run attendance and payroll.
To send emails and alerts about your account, such as invitations, password resets and payslips.
To protect accounts and prevent misuse.

We do not sell your information, and we do not use it for advertising.

Who else handles it

We use a few trusted services to run Numidah, each only for its job:

Render, which hosts the website and database in Frankfurt, Germany.
Resend, which sends our emails.
Google and Apple, if you choose to sign in with them, and Google Firebase for phone alerts.
Cloudflare, which manages our web address.

Because these services are outside Nigeria, your information may be processed abroad. We only use services that protect it properly.

How long we keep it

We keep records while your employer uses Numidah, and payroll and attendance records for as long as the law requires, up to seven years. Clock-in photos are set to be deleted after 90 days. When an employer closes its account, its records are deleted or made anonymous, except where the law requires us to keep them.

Your rights

You can ask to see, correct or delete your information, or object to how it is used. Because your employer is responsible for staff records, the quickest route is to ask your employer. You can also contact us at the contact details on our website. In Nigeria you may also complain to the Nigeria Data Protection Commission.

Keeping it safe

Information travels encrypted, each company can see only its own records, and sensitive details are encrypted when stored. No system is perfect, so tell us at once if you think your account has been misused.

Children

Numidah is for workplaces and is not meant for anyone under 16.

Changes

If we change this policy, we will update the date above and, for important changes, tell account holders.