Privacy Policy

GeoMark ("we", "our", "the Platform") is a geo-verified attendance management system designed for Nigerian universities and educational institutions. This Privacy Policy explains how we collect, use, share, and safeguard personal information when you use our web application, APIs, or any associated services.

We are committed to protecting your privacy in accordance with the Nigeria Data Protection Regulation (NDPR) 2019 and the Nigeria Data Protection Act (NDPA) 2023. By using GeoMark, you consent to the practices described in this Policy.

We collect the following categories of personal data:

• Account Information: Name, email address, profile photo, role (student / instructor / admin), and department.
• Location Data: GPS coordinates at the moment of attendance check-in only. We do not track your location continuously — location is captured solely to verify classroom presence.
• Device Fingerprint: A non-reversible identifier derived from your browser and device properties. Used solely to prevent one device from registering attendance for multiple students in the same session.
• Attendance Records: Course name, session timestamps, check-in method, attendance status (present / late / absent), and approximate distance from classroom centre.
• Technical Metadata: IP address and request logs retained for security monitoring and fraud detection.
• Cookie & Consent Data: Whether you accepted or declined cookies, stored in a first-party cookie for 365 days. We do not use third-party tracking cookies.
• Enterprise Billing Data: For institutional administrators: institution name, contact email, billing address, and payment plan. Payment card details are never stored on our servers.

Under the NDPR/NDPA we process your data on the following lawful bases:

• Verify that you are physically present in the correct classroom before marking attendance.
• Detect and prevent fraudulent check-ins (proxy attendance, device sharing, location spoofing).
• Provide instructors and administrators with real-time attendance dashboards and reports.
• Send you in-app notifications when a session starts, or when your attendance status changes.
• Investigate security incidents and maintain an audit trail of platform activity.
• Generate invoices, quotations, and subscription records for enterprise accounts.
• Continuously improve GeoMark's features, performance, and fraud-detection accuracy.
• Comply with legal obligations under Nigerian law.

We do not sell, rent, or trade your personal data. We share it only in the following limited circumstances:

• Your Institution: Instructors and administrators at your institution can view attendance records for courses they manage.
• Cloud Infrastructure Providers: We use enterprise-grade cloud providers for database hosting and application delivery. All providers are contractually bound to process data only on our instruction and maintain equivalent security standards.
• Authentication Providers: We support sign-in via Google. When you use Google sign-in, we receive only your name, email address, and profile photo — we never see or store your password.
• Law Enforcement: We may disclose data if required by a valid court order, subpoena, or applicable Nigerian law.

A full list of our data sub-processors is available on request at geomarktechnologies@gmail.com.

We retain your personal data only for as long as necessary:

• All data is transmitted using encrypted connections (HTTPS).
• Passwords are stored using industry-standard adaptive hashing algorithms — plain-text passwords are never stored or logged.
• Session tokens are cryptographically signed, time-limited, and validated on every request.
• Device fingerprints are stored as non-reversible hashes — the original device properties cannot be reconstructed.
• All databases use encryption at rest and in transit.
• Rate limiting is applied to all authentication and check-in endpoints to prevent automated attacks.
• Security events are automatically detected, logged, and reviewed by our team.
• Access to production systems is restricted to authorised personnel and requires multi-factor authentication.
• We conduct periodic security reviews and apply patches promptly.

As a data subject under Nigerian law, you have the following rights. To exercise any of them, email us at geomarktechnologies@gmail.com:

We will respond to verified requests within 30 days as required by the NDPA. We may ask you to verify your identity before processing your request.

GeoMark uses only essential first-party cookies — no advertising or tracking cookies:

We do not use Google Analytics, Facebook Pixel, or any third-party advertising or tracking cookies.

You can withdraw consent at any time by clearing cookies for this site in your browser settings. Clearing the session cookie will sign you out.

GeoMark is intended for use by university students aged 16 and above. We do not knowingly collect personal data from children under 16. If you believe a child under 16 has created an account, please contact us at geomarktechnologies@gmail.com and we will promptly delete the account.

To deliver GeoMark globally, your data may be processed on encrypted servers outside Nigeria. All such transfers are made to fulfil our contract with you and are governed by data processing agreements with each sub-processor. Every sub-processor is contractually obligated to maintain data security standards equivalent to or exceeding those required by the NDPA 2023. You may request the list of sub-processors at geomarktechnologies@gmail.com.

We may update this Privacy Policy from time to time. When we do, we will update the "Last updated" date at the top of this page and, for material changes, notify active users via an in-app notification. Your continued use of GeoMark after the effective date constitutes acceptance of the revised Policy.

GeoMark is the data controller for personal data processed through this platform. For privacy-related enquiries, data subject requests, or to report a concern: