Privacy policy.
The short version
- WorkNest keeps your data on your own devices. There is no WorkNest account and no WorkNest server.
- Elevven11 does not receive, see or store your documents, files, staff, employee, payroll or any other records.
- The app has no advertising, no analytics and no tracking.
- Data leaves a device only when you choose: a backup you save or copy, an export, a file you open in another app, a document you print, or devices you pair on your own office network.
Who we are
WorkNest is made by Elevven11 Studio. Contact: the contact page or elevven11studio@gmail.com.
Your role and ours
Your organization decides why and how the information it puts into WorkNest is used, including information about clients, patients, pupils, applicants, employees and other people. Under the Nigeria Data Protection Act 2023 (NDPA) your organization is the data controller for that information, and is responsible for having a lawful basis for it, telling people about it, keeping it no longer than needed, and answering their requests.
Because we never receive that data, we are not its processor. We only provide the software. If you contact us for support, do not send us records with personal data in them; we will not ask for them.
What WorkNest stores, and where
Everything below stays in an encrypted database on the device that holds the workspace, and on devices you pair with it.
| Information | Examples | Why |
|---|---|---|
| Organization details | Name, address, phone, reference prefix | Records and labels |
| Staff | Names, staff IDs, roles, departments, PIN (stored only as a salted hash) | Access control and accountability |
| Documents | Files, versions, titles, tags, text read from scans | Keeping and finding records |
| Paper archive | File references, storage places, who borrowed what and when | Knowing where originals are |
| Tasks, letters, forms, notices, meetings | Their content and history | Running the office |
| Contacts | Names, phone numbers, emails, addresses | Correspondence and records |
| Employee records | Job details, leave, attendance, certificates, equipment, joining and leaving checklists | HR administration |
| Hiring | Applicants' names, contact details, CVs, interview times, notes | Recruitment |
| Payroll | Pay, deductions, tax and pension figures, bank account numbers, tax IDs and states, pension fund and RSA PIN, payslips | Paying people and filing tax |
| Patients | Hospital numbers, dates of birth, contact and next of kin, allergies, HMO details, visits, appointments, admissions, inpatient charts (nursing notes, observations, each dose given or not), vital signs, diagnoses, prescriptions, lab results, HMO claims | Caring for patients and billing their insurers |
| Invoices and accounts | Customers billed, amounts, payments and receipts, expenses, account balances, journals, imported bank statement lines, fixed assets | Billing and bookkeeping |
| Property | Properties, landlords, tenants, tenancy terms and agreements, rent owed, repairs | Letting and managing property |
| Passwords | Shared company logins: usernames, passwords, two-step keys, earlier passwords | Letting staff use company accounts without passing passwords around |
| Branding | Logo, colour, tab names, invoice and printout text | Making WorkNest look like your organization |
| Notifications | What each person was told about and when they read it, and which kinds they turned off | Telling people what needs them |
| Activity log | Who did what, when, and from which device | Preventing and investigating mistakes and fraud |
Sensitive information. Health details (for example in a clinic's patient records or a pupil's medical notes), children's records, bank details and pay are sensitive. Only collect what you need, keep them in restricted folders or the HR and payroll modules, and give access only to the people who need it. The NDPA sets extra conditions for sensitive personal data, such as explicit consent or another lawful basis.
Camera. On phones and tablets the camera is used only when you scan pages or a QR label. Page photos become part of the document you save.
Reading text from scans. Text is read from scanned pages on the device itself, without the internet: by Google ML Kit on phones and tablets, and by the text recognition built into Windows on a computer. Neither sends the pages anywhere.
Who can see what
Each person signs in with their own PIN, and sees only what their role allows. Patient records are hidden from everyone without clinical access, and invoices and accounts from everyone without accounts access. HR records, hiring and payroll are hidden from everyone without HR or payroll access; each person sees only their own record, leave, checklist and approved payslips. Restricted folders are hidden from everyone without the restricted-records permission. Every sign-in and change is written to the activity log.
When names are hidden at sign-in, the lock screen does not show who works at your organization; people type their staff ID instead.
Security
The database is encrypted with a key kept in the device's secure storage. Backups are encrypted with your 24-word recovery phrase or a password you choose. Anyone with the phrase or password can read a backup, so keep them safe. Devices on your network connect to the main computer over an encrypted connection after being paired with a one-time code.
Passwords. Shared logins are encrypted for the people they are shared with. Each person sets a vault passphrase, separate from their PIN, which WorkNest never stores. A login's password, two-step key, notes and earlier passwords are encrypted with the login's own key, and that key is locked for each person who may use it, and for a recovery key that only the organization's 24-word recovery phrase can open. A copy of the database, a paired device or a backup shows only scrambled text for them without someone's passphrase or the recovery phrase. The names, usernames and websites of logins stay readable so the list shows without unlocking. Every time a password or code is shown or copied, and every use of the recovery phrase, is written to the activity log; the passwords themselves never are. Copied passwords are cleared from the clipboard after 30 seconds.
Notifications. Pop-ups are shown by the computer or phone, so others near the screen, or its lock screen, may see them. They never name patients. Each person can turn off the details in pop-ups, or pop-ups altogether.
Exports (Excel, CSV, bank schedules, PDFs and ZIP files) are not encrypted. Store and send them with care, and delete them when they are no longer needed.
How long data is kept
WorkNest keeps records until someone with the right access removes them. Removed records stay in the activity log's history. Your organization should decide how long to keep each kind of record, in line with the law, and remove what it no longer needs.
People's rights
People whose data your organization keeps may ask it to see, correct or delete their data, or object to how it is used. Your organization answers these requests; WorkNest's search, exports and editing tools help it do so. We cannot answer them, because we do not have the data.
Moving data abroad
WorkNest does not send data out of your devices, so it does not move data to other countries. If you copy backups or exports to a cloud service or a device abroad, that is your organization's choice and responsibility under the NDPA.
Deleting data
Deleting the workspace in Settings removes it from the device. Backup files and exports you saved elsewhere are not deleted; remove them yourself.
Changes
We will update this page when the app changes how it handles data, and change the version number above.