Privacy Policy for DewCIS Mobile Applications

Effective Date: 1st January 2025
This Privacy Policy supplements and should be read in conjunction with our general Privacy Policy, available at Privacy Policy Here. This Mobile Application Privacy Policy specifically applies to DewCIS mobile applications, including but not limited to Baraza HCM, Baraza ERP, and other applications published by DewCIS on the Google Play Store and Apple App Store (collectively referred to as “the Applications”).

1. Operation of Our Mobile Applications
Our Applications function as client-side interfaces that establish direct connections with in-house or privately hosted instances of Baraza systems (e.g., HCM, UMIS, MIS). These underlying Baraza systems are administered and controlled by the respective organizations that have licensed and deployed them.
By default, the Applications do not transmit or store any data on DewCIS servers. All data exchange occurs directly between the Application installed on your mobile device and the client organization’s designated server, utilizing secure communication protocols, typically HTTPS.

2. Categories of Information Collected by the Applications
The Applications are designed to collect and process only the data strictly necessary to provide their intended functionalities, which may include:

User Authentication Data: This includes usernames and passwords required to authenticate users and grant access to the relevant Baraza system.
Employee Self-Service Data: Depending on the features enabled by the client organization, the Applications may process data related to employee self-service functions, such as:
o Clock-in and clock-out timestamps and associated location data (if geolocation-based clock-in is enabled).
o Leave requests and related information.
o Claim submissions and supporting documentation.
Device Information: For the purposes of optimizing Application performance and enabling specific features (such as geolocation for clock-in, if configured), the Applications may collect information about your mobile device, including device type, operating system, and unique device identifiers.

The data collected by the Applications is transmitted exclusively to the client organization’s hosted instance of the Baraza HCM or ERP system. This data is not shared with DewCIS unless explicitly configured by the client organization for specific purposes, such as technical support or managed services.

3. Permissions and Device Access
Depending on the specific features configured and enabled by your employer, the Applications may request access to certain device functionalities. These permissions are requested to enable specific features within the Application and will only be utilized for their stated purpose. The types of access that may be requested include:

Location Services: Access to your device’s location may be requested for features such as GPS-based clock-in/out, if this functionality is enabled by your employer.
Camera and Files: Access to your device’s camera and file storage may be requested to facilitate the uploading of documents, receipts, or profile pictures, as required by the functionalities enabled by your employer.
Push Notifications: The Application may request permission to send push notifications to your device for purposes such as task alerts, approval requests, or important messages originating from your employer’s Baraza system.
You can manage these permissions through your device’s settings at any time. Disabling certain permissions may limit the functionality of the Application.

4. Third-Party Services
Our Applications are designed to operate independently and do not integrate any third-party analytics, advertising, or data tracking services. If the client organization, in its discretion, integrates such third-party services within their hosted Baraza instance, DewCIS assumes no responsibility or liability for those implementations. We recommend that you review your organization’s internal privacy policies for information regarding any third-party services they may utilize.

5. Data Security
DewCIS recommends and supports the implementation of robust security measures, including SSL/TLS encryption and industry-standard security practices, for all deployments of Baraza systems. However, as the data processed by the Applications is stored and managed on client-hosted servers, DewCIS does not directly access or manage customer data unless under a specific managed service agreement or during authorized technical support sessions initiated by the client organization. The security of your data is primarily the responsibility of the organization that manages the Baraza system you are accessing through the Application.

6. Children’s Privacy
Our Mobile Applications are intended for use by organizations and their employees. They are not designed for or directed at children under the age of 13, and DewCIS does not knowingly collect personal data from minors through these Applications.

7. Contact and Support
For any privacy-related concerns or questions regarding the use of the Mobile Applications within your organization, please direct your inquiries to your employer or the system administrator responsible for your organization’s Baraza system.

For general inquiries about DewCIS Mobile Applications or this Privacy Policy Update, please contact us at:
📧 info@dewcis.com
🌐 www.dewcis.com