Privacy Policy

1. Overview

Nexus (“we”, “our”, “us”) is committed to protecting your personal information. This Privacy Policy explains how we collect, use, store, and protect your data when you use the Nexus platform. By using the Service, you consent to the practices described here.

2. Information We Collect

We collect the following categories of information:

• Account data: Name, email address, and password (hashed) provided at account creation
• Attendance data: Clock-in and clock-out timestamps, GPS coordinates, and calculated hours per session
• Task data: Kanban board tasks, titles, descriptions, attachments, and status updates you create
• Usage data: Login timestamps and feature interactions
• Technical data: IP address, browser type, and device information collected automatically

3. How We Use Your Information

We use your data to:

• Provide and operate the Service, including tracking attendance and OJT progress
• Authenticate users and enforce role-based access control
• Generate attendance reports and OJT progress summaries
• Allow supervisors and admins to monitor assigned trainees
• Improve the platform and diagnose technical issues
• Communicate important updates about the Service

We do not sell, trade, or rent your personal information to third parties.

4. Data Storage and Security

Your data is stored securely. We implement industry-standard security measures including:

• Password hashing using industry-standard algorithms
• Secure session-based authentication
• HTTPS encryption for all data in transit
• Role-scoped data access — users can only access data appropriate to their role

No method of transmission over the internet or electronic storage is 100% secure. While we strive to protect your data, we cannot guarantee absolute security.

5. GPS and Location Data

Nexus requests access to your device's location solely for the purpose of verifying on-site presence at clock-in and clock-out. Location data is stored only at the time of each attendance event and is not tracked continuously. You can revoke location permissions in your browser settings, though this will prevent clock-in functionality from working.

6. Data Retention

We retain your data for as long as your account is active or as needed to provide the Service. If your account is deactivated or deleted by an administrator, your personal identifiers may be removed while attendance records may be retained for programme reporting purposes as required by your institution.

7. Cookies

We use minimal cookies and local storage to maintain your session and user preferences. We do not use third-party tracking cookies or advertising cookies.

8. Your Rights

Depending on your jurisdiction, you may have the right to:

• Access the personal data we hold about you
• Request correction of inaccurate data
• Request deletion of your data (“right to be forgotten”)
• Export your attendance data in a machine-readable format

To exercise any of these rights, please contact us or speak to your system administrator.

9. Third-party Services

Nexus may use third-party services for hosting and infrastructure including Supabase for database and authentication services. These providers are bound by their own privacy policies and we ensure they meet adequate data protection standards.

10. Changes to This Policy

We may update this Privacy Policy periodically. We will notify users of significant changes by updating the date at the top of this page. Continued use of the Service constitutes acceptance of the updated policy.

11. Contact Us

If you have any questions or concerns about this Privacy Policy, please contact us.