Last updated: 25 September 2026
This policy explains what personal data the Zenus360 Facility Manager app (the “App”) handles, why, and what your rights are. The App is operated by Locohozt (“we”, “us”).
1. Who can use the App
The App is an internal tool for estate management staff. Anyone can download it, but only people who already have an account in the Zenus360 estate web panel can sign in: estate admins created by their estate (Estate Admins screen) and Zenus360 platform staff. There is no registration screen in the App. What you can see and do depends on the role your estate gives you, and a suspended admin cannot sign in.
2. Who is responsible for your data
- Residents’ and estate data. The estate (the management company using Zenus360) is the data controller. We are the data processor: we run the platform and process that data only on the estate’s instructions.
- Your own admin account. Your estate creates your account, decides your role and can suspend or delete it, so your estate is the controller of your account data and we process it on its behalf. We are the controller only of the limited technical data we need to secure and run the platform, such as sign-in tokens and security logs. If you are Zenus360 platform staff, we are the controller of your account data.
Contact: support@zenus360.app
3. Data about you
- Name, email address and phone number (you can sign in with either the email or the phone number)
- Password, stored only as a one-way hash. We cannot read it.
- Your role and permissions, and the estate and branch you belong to
- Sign-in tokens issued to the App
- Records of actions you take (for example, a bill issued or a visit approved), with timestamps, kept for audit
4. Data you enter and manage for your estate
Through the App you can view your estate’s data and add or update it. What you enter is sent to our servers and stored for the estate. You may enter:
- residents: name, email, phone number, address, gender, occupation and relationship to the property
- visitors and shortlet guests: name, email and phone number
- security staff: name, email, phone number and an initial password (stored only as a one-way hash)
- estate contacts and emergency contacts: name, phone number and email
- payments the estate has received: amount and payment channel, recorded against a demand notice
- electricity purchases you make for a property: meter, property and amount
- announcements, complaint comments and complaint status updates
This is the estate’s data, not yours. You see it only as far as your role allows, and only to manage the estate. Enter only what the estate needs, and only for people who have a relationship with the estate.
5. How we use data
- To sign you in and keep your account secure
- To show you, and let you act on, the estate data your role allows
- To keep an audit trail of actions taken on the estate’s behalf
- To provide support when you contact us
- To meet legal obligations
6. On your device
Your sign-in token is kept in your device’s secure storage (Android Keystore / iOS Keychain) and removed when you sign out. The App does not access your location, contacts, camera, microphone, photos or files.
7. What we don’t do
- No advertising
- No selling of personal data
- No analytics or crash-reporting SDKs in the App
- No tracking across other apps or websites
If we add push notifications or crash reporting, we will update this policy before that version is released.
8. Who we share data with
- Your estate, the organisation you work for.
- Service providers we need to run the platform: cloud hosting, email and SMS delivery, payment providers for the estate’s own payments, and the electricity token provider (for vends: meter number and amount). They only get what they need for that task and must protect it.
- Authorities, where the law requires us to disclose it.
9. Security
- All traffic between the App and our servers is encrypted with HTTPS/TLS.
- Passwords are stored as one-way hashes.
- Access is role-based: you see only what your estate’s role for you allows.
- Every App session is revoked when your account is suspended, deleted or your password changes.
10. How long we keep data
Your admin account stays for as long as your estate keeps it active. When it is deleted, we remove your login and profile details. Records of actions taken for the estate, financial records and audit logs are retained for as long as necessary to satisfy audit requirements and comply with applicable law, after which they are deleted or anonymised. See Account & Data Deletion.
11. Your rights
Under the Nigeria Data Protection Act 2023 (NDPA) you have the right to:
- access the personal data we hold about you
- have inaccurate data corrected
- have your data deleted, subject to records we must keep by law
- object to processing
- receive your data in a portable format
To use any of these, email support@zenus360.app from the email address on your account, or ask your estate’s super admin. We may confirm the request with your estate and will reply within 30 days. You can also complain to the Nigeria Data Protection Commission (NDPC).
12. Children
The App is for estate staff and is not directed at anyone under 18.
13. Changes
We may update this policy. The date at the top shows when it last changed. If a change is significant, we will tell you in the App or by email.