Legal & Trust Centre
UseTimio is operated by Spent Digital Lab Limited. Attendance data is people data, so we have written down exactly what we collect, who touches it, where it lives and what you can make us do with it. It is all here, in plain language.
Centre last reviewed: September 30, 2026
Your data stays yours
Attendance records belong to the organization that collected them. We process them to run the service you pay for — never to sell, rent or train on.
Separated by tenant
Every organization is its own tenant with its own subdomain. Queries are scoped to an organization ID, so one customer cannot read another customer’s records.
Biometrics never leave the device
Biometric check-in uses WebAuthn. We hold a public key; the fingerprint or face template stays in the phone’s secure hardware.
Built for Nigerian law, aware of the rest
We work to the Nigeria Data Protection Act 2023, and honour GDPR-style rights for organizations and staff based in the EU/UK.
Agreements
The contracts between your organization and Spent Digital Lab Limited.
Terms of Service
The agreement that governs your organization’s use of UseTimio.
Updated July 2, 2026
Acceptable Use Policy
What you may and may not do with the platform, and how we enforce it.
Updated September 30, 2026
Billing, Refund & Cancellation Policy
How subscriptions, credits, renewals, refunds and cancellations work.
Updated September 30, 2026
Privacy & data
What we do with personal data, and the commitments we make about it.
Privacy Policy
What personal data we collect, why we hold it, and the rights you have over it.
Updated July 2, 2026
Data Safety
A plain-language, item-by-item account of every category of data UseTimio collects, why, who sees it and how long it is kept.
Updated September 30, 2026
Cookie Policy
The cookies and local storage UseTimio sets, what each one does, and how to control them.
Updated September 30, 2026
Data Processing Agreement
The controller-to-processor terms that apply when UseTimio processes your employees’ or members’ personal data.
Updated September 30, 2026
Security & compliance
How the platform is protected, who we rely on, and the laws we work under.
Sub-processors
The third parties that help us run UseTimio, what each one handles, and where they operate.
Updated September 30, 2026
Security Practices
How accounts, tenant data, backups and our infrastructure are protected day to day.
Updated September 30, 2026
Compliance
Our position under the Nigeria Data Protection Act, the GDPR and payment-industry rules, and how we handle data-subject requests and breaches.
Updated September 30, 2026
Questions a document does not answer
Security disclosures, data-subject requests, a signed DPA, a procurement questionnaire or a deletion request all start the same way: email info@usetimio.com. Put “Legal”, “Privacy” or “Security” in the subject line and we route it on arrival. We acknowledge within 5 business days.
Spent Digital Lab Limited, 3 Idishin Street, Surulere, Ondo, Ondo State, Nigeria