KorevraField — Privacy Policy
KorevraField is a workplace app. You use it because your employer or the organisation you work with has deployed it to run their field operations — attendance, visits, sales, stock, training and reporting.
The short version. Your organisation controls your data, not us. We collect only what the app needs to do its job. Most of it stays on your device. We do not sell your data, we do not use it for advertising, and we do not build profiles of you across other apps or companies.
Who is responsible for your data
Your organisation is the data controller. They decide what is collected, who can see it, and how long it is kept. Korevra Technologies Limited is the data processor — we provide the software and process data on your organisation's instructions.
Questions about your own records — what is held, correcting it, deleting it — should go to your organisation's administrator first. They can act on those requests directly inside the app. If you cannot reach them, contact us and we will help.
What the app collects, and why
| Data | Why | Where it goes |
|---|---|---|
| Name, staff ID, work email, role, branch | To sign you in and show you the right screens for your role | Your organisation's workspace |
| Location (including in the background) | To GPS-verify attendance at your assigned branch and record route visits. Background access powers automatic clock-in/out when you enter or leave a site geofence. If your organisation turns on location sharing during shifts and you agree, your position while you are clocked in with the app open | Attendance, visit and shift-route records in your organisation's workspace |
| Camera and photos | Only when you choose to attach one — proof-of-visit images, stock QR scans, evidence on tickets and surveys | Attached to the record you created |
| Work you enter | Sales, orders, stock counts, visits, tickets, survey answers, training progress | Your organisation's workspace |
| Device and diagnostic information | To keep you signed in on one device at a time and to diagnose sync problems | Your organisation's workspace |
We do not collect: contacts, your personal photo library beyond the images you explicitly attach, browsing activity outside the app, advertising identifiers, or your location when you are not on duty and the app is not running a geofence your organisation configured.
Location, specifically
Location is the most sensitive permission the app asks for, so it deserves a plain explanation.
- The app asks for location only when your organisation has enabled GPS-verified attendance or visit tracking.
- Background location ("Allow all the time") is optional. It exists so that clocking in and out happens automatically when you arrive at or leave a site, instead of you having to open the app. If you decline it, the app still works — you clock in manually.
- Location is recorded as points attached to your work — clocking in and out, visits, sales, stock counts and similar records.
- Location sharing during shifts is a separate setting your organisation may turn on. If it is on, the app asks you at each shift before anything is shared, and you may say no for that shift. When you agree, your position is recorded about every few minutes, and when you move a noticeable distance, so that your managers can see the route of the shift on a map. It is recorded only while you are clocked in, never when you are off duty. Normally it records only while the app is open on your screen. Your organisation may also allow it to continue while the app is closed or your screen is locked; if so, the question at the start of the shift says so, and for as long as it runs your phone shows a notification (and, on iPhone, the blue location sign) as well as a 📍 sign at the top of the app. Either way it stops when you clock out. Your managers and administrators can see these positions; your colleagues cannot. If you say no, your manager sees that location was not shared for that shift.
- You can revoke location access at any time in your device settings.
Where your data lives
KorevraField is offline-first. Your work is written to your device first so the app keeps working with no signal, then synchronised to your organisation's workspace when a connection is available.
Each organisation's data is held in a separate namespace — on your device and on the server. One organisation's records are never readable by another, and signing in to a different organisation on the same device does not mix them.
Who else sees it
People inside your organisation, according to the role your administrator gave you — a manager sees their team, an administrator sees the workspace. That is the app's purpose and your organisation configures it.
Outside your organisation: nobody, except the infrastructure providers who host the service on our behalf under contract, and where we are required to disclose by law. We do not sell personal data, and we do not share it with advertisers or data brokers.
How long it is kept
For as long as your organisation's agreement with us is active and their retention settings require. When an organisation leaves, their data is deleted or returned to them. Removing the app from your device clears the local copy on that device. Positions recorded by location sharing during shifts are deleted automatically after the period your organisation sets (90 days unless they choose otherwise), and your device keeps its own copy for only a couple of days.
Your rights
Depending on where you live (including under the Nigeria Data Protection Act and, for users in Europe, the GDPR) you may have the right to access, correct, delete, export or object to the processing of your personal data. Because your organisation controls the data, ask them first — they can act immediately. We support them in responding and will act directly where the law requires it of us.
Messages, reporting and blocking
The app lets colleagues message one another. If a message breaks your organisation’s conduct policy you can report it from inside the app, and you can block the person who sent it — they stop being able to reach you, their messages disappear from your threads, and they are not told that you blocked them.
When you report something we keep a copy of the reported text, who reported it and who sent it, so a moderator at your organisation can judge it fairly even if the sender deletes the message afterwards. That record is a safety record: it is kept for 24 months and then deleted, and it survives a deletion request from the person who was reported. Only administrators at your own organisation can read it.
Children
KorevraField is a workplace tool. It is not directed at children and we do not knowingly collect data from anyone under 16.
Security
Access is protected by a personal PIN or a one-time code, PINs are stored only as salted hashes (never in plain text), accounts lock after repeated failed attempts, and a session is bound to one device at a time so a login elsewhere ends this one. Data in transit is encrypted.
Changes
If this policy changes materially we will update the date at the top and notify organisations using the service. Continued use after a change means you accept the updated policy.
Contact
Korevra Technologies Limited
privacy@korevra.com
korevra.com