Who is responsible

Fobba is run by Yedi Tech ("we"). Each school that uses Fobba decides what data about its students, parents and staff goes into it and why; for that data the school is the controller and we process it on the school's behalf and on its instructions. For the accounts of people who sign in to Fobba, and for this website, we are responsible ourselves.

If you are a parent or a member of staff, the quickest route for most questions is your school. You can also write to us at hello@yedite.ch.

What we hold

• About students: name, admission number, class, and, if the school adds them, gender and date of birth; the ID number of the student's fob or card; the name and phone number of a guardian, and whether texts are switched on.
• About attendance: the time each fob was tapped, at which gate reader and in which direction; the day's status (present, late, absent or excused), the first arrival and last exit; and any correction a member of staff makes, with its reason and who made it.
• About staff: name, username, email address and role; for schools with a fingerprint clock, the staff number the clock uses and the times of each scan. Fingerprints themselves stay on the clock and are never sent to us.
• About parents who use the parent portal: the phone number they sign in with, when they last signed in, and the one-time sign-in codes we send, which we store only in scrambled (hashed) form and which stop working after ten minutes.
• About texts: the number each text was sent to, the message, whether it was sent, held back or failed, and which provider carried it.
• About schools and gate phones: the school's name, address and contact details, and for each gate phone a name, the model of phone and when it last connected.

What we use it for

• To work out each student's attendance from the taps and show it to the school.
• To text a guardian when their child arrives or leaves, and when a child is absent.
• To let parents see their own children's attendance, and staff see their school's.
• To sign people in securely, keep each school's data separate, and investigate faults.

We do not sell personal data, show advertising, or use the data to build profiles for anyone else. Fobba has no analytics or tracking scripts.

Children's data

Most of the data in Fobba is about children, but children do not use Fobba themselves. Schools enter it and are responsible for having a lawful basis to do so, including the consent of a parent or guardian where the law requires it. A parent who wants their child's data corrected or removed should ask the school, which can do it directly in Fobba, or write to us.

Who else sees it

• Text-message providers (Termii and Africa's Talking) receive the guardian's phone number and the text of each message, so they can deliver it.
• Where a school sends texts from its own gate phone, the message goes through that phone's mobile network like any other text.
• Our servers are run by a cloud hosting provider, which stores the data on our behalf and has no right to use it. Details of where the data is stored are available on request from hello@yedite.ch.

We share data with nobody else unless the law requires us to.

The Fobba reader app

The reader app turns a phone into a gate reader and lets staff assign fobs. It reads only the ID number of a fob held to the phone. To name students and text parents without a connection, it keeps a copy of the school's student list (names, classes, fob numbers and guardian phone numbers) and any taps it has not yet sent, on the phone itself. Its sign-in details are kept in the phone's secure storage.

On Android, if the school uses its gate phone to send texts, the app asks for permission to send SMS and sends the arrival and departure texts from the phone's own SIM. The app does not read your location, contacts, photos or camera, and contains no advertising or analytics. Uninstalling it removes everything it stored on the phone.

How long we keep it

We keep a school's records for as long as the school uses Fobba, so that it can look back over past terms. A school can remove a student or member of staff at any time. When a school stops using Fobba, we delete its data within 30 days of being asked to, after giving the school the chance to export it.

How we protect it

• All connections to Fobba are encrypted (HTTPS).
• Passwords, sign-in codes and gate-phone keys are stored only in hashed form.
• Every record belongs to one school, and staff can see only their own school's data; parents can see only their own children's.

Your rights

Under the Nigeria Data Protection Act 2023 you can ask to see the personal data held about you, to have it corrected or deleted, to restrict or object to its use, and to receive a copy. Ask your school, or write to us at hello@yedite.ch; we will respond within the time the law allows. If you are unhappy with how your data has been handled, you can complain to the Nigeria Data Protection Commission.

Changes to this policy

If we change how we handle personal data, we will update this page and tell schools before the change takes effect.

Contact

Yedi Tech

Suite 305, The Capital Hub, Abuja

hello@yedite.ch