Privacy policy

Catnapp is a workplace app operated by MixItOne Limited. A manager invites you. You take short tests on a phone. The workplace can see those tests.

Catnapp is for people at work who are 18 or older. It is not for children.

On the phone

• Camera, when you scan an invite or photograph an incident. An incident photo is kept with that report.
• Location, only if you allow it on an incident report.
• A device token and an installation id, stored on this phone, not in cloud backup.
• Your preferred name, so the app can greet you.
• Gender and ethnic group you choose after you join, including prefer not to say.
• Tests you take, until they reach the workplace or you sign out.

Signing out on this phone clears the token stored here.

With the workplace

After you join, tests go to the workplace that invited you, at catnapp.app. That includes when you took the test, how you tapped, optional alertness (1–10) if you choose it, the phone’s make, model, and Android version, and other details about how the phone was running during the test. An incident report can include what happened, optional details, a photo, and location. Managers on that workplace can see the report.

The workplace also has the name and optional employee ID the manager entered, an optional date of birth if they know it, and the mobile number they use to send you an invite. Reports use an age band from that date, not the date itself. Gender and ethnic group are not shown to your employer. MixItOne Limited uses them for unnamed group figures. You do not create an email or password in the app. WebSMS sends the invite text.

If you run a workplace account

Managers sign in at catnapp.app with an email and password. We store a password digest, not the password. A sign-in cookie keeps that session.

Who can see it

Managers on that workplace account. MixItOne Limited hosts Catnapp so those managers can use it. Cloudflare delivers the public site and the connection to catnapp.app. WebSMS delivers the invite text.

When the app or site is used, we may keep limited technical logs (such as IP address and time) to keep the service working and secure.

The worker app also sends data to MixItOne’s own replay server, and only over Wi-Fi, so we can see how the app behaved. That includes screenshots of the app, your preferred name, and copies of requests the app makes. Gender, ethnic group, mobile number, and what happened on an incident report are removed from those requests. The location on an incident report is included in those copies. The greeting, the line that names your workplace, the gender and ethnic group answers, the mobile field, an incident photo, and what happened are left out of the screenshots. That server is ours. The data is not sent to a third party.

Catnapp does not sell this data or use it for ads.

How we keep it

The app talks to catnapp.app over HTTPS. Device tokens stay on the phone and are not in cloud backup. On our side, device tokens are stored as a digest, not the token itself.

How long it stays

Tests stay with the workplace until that workplace deletes them. An incident report stays the same way, including its photo and location. Removing a person from Workers unlinks their phones. Their tests and incident reports can remain on the account.

You do not create an account in the app. To unlink a phone, ask the person who invited you, or email[email protected].

Ask

If you have a question, ask the person who invited you, or email[email protected].

MixItOne Limited, Wellington, New Zealand.

We may update this page. The date at the top will change.