The workplace app listed on Google Play and shown on your device as Evergreen Connect. It has
also been referred to as Evergreen Platform. Android package
za.co.evergreen.platform.
Effective 1 September 2026. Last updated 1 September 2026.
This policy explains what personal information the Evergreen Connect app collects, why it is
collected, who can see it, how long it is kept, and how you can ask for a copy of it, ask for
it to be corrected, or ask for it to be deleted.
1. Who is responsible for your information
Evergreen Connect is a private workplace app. It is provided to you by
your employer, who issued your account and who decides what information is
recorded in the app and how it is used. Under the Protection of Personal Information Act 4
of 2013 (POPIA), your employer is the responsible party for that
information.
The app is developed, hosted and maintained by Day Dream Digital, trading
as The Development Company ("TDC"), which is also the developer account
under which the app is published on Google Play. TDC acts as an
operator under POPIA: it processes information only on your employer's
instruction and for the purpose of running the app, and it does not use that information for
its own purposes.
If you are unsure who your employer's contact for privacy questions is, you can start with
TDC at info@tdc.co.za and we will direct your request.
2. Who this policy applies to
Accounts are issued by your employer. There is no public sign-up, no
self-registration and no way to create an account yourself. The app cannot be used without
an account issued to you.
The app is intended for people aged 18 and over. It is a tool for
employees at work and is not directed at children.
Your employer's own workplace policies also apply to the records you
create in the app, in the same way they would to a paper record.
3. What information the app collects
3.1 Account and employment details
Recorded by your employer's administrators when your account is created or updated:
Your first name, last name and any nickname you are known by.
Your user code, which is what you sign in with, and your employee number.
Your identity number and date of birth, where your employer records them.
Your cellphone number and email address, where these are recorded.
Your department, cost centre, factory site and group, and the role and permissions that
decide what you can see and do in the app.
Remarks an administrator may add to your record, and disciplinary records where your
employer keeps them in the app, including the description of an incident, who reported it,
any hearing date and its outcome.
Your password, which is stored only as a one-way cryptographic hash and never as readable
text. Nobody, including TDC, can read your password.
3.2 Work records and content you create
Tasks, sub-tasks and approvals assigned to you or by you, including notes and completion
details.
Quality control entries and customer complaints, maintenance and breakdown reports and
repair jobs, dispatch and receiving records, and part, material, product and process
trials.
Training attendance records, including the sessions you attended and the facilitator's
details.
Comments you write and the colleagues you mention using the "@" feature, which subscribes
them to later updates on that record.
An audit log of changes, recording who changed which field on a record and when, together
with the previous and new values.
3.3 Photographs, documents and signatures
Photographs you take or attach as evidence: proof that a task was completed, machine
breakdowns, quality defects, and stock dispatched or received.
A profile photograph, either one you set yourself or one an administrator sets for you.
Handwritten signatures captured on the device for the training attendance register.
Documents uploaded to the app, including company documents and, where your employer uses
the feature, disciplinary documents.
3.4 Device and technical information
A random app installation identifier. When the app is installed it
generates a random identifier for that installation and stores it on the device. This is
not a hardware identifier: it is not your IMEI, not your Android ID and
not an advertising identifier. It exists so that push notifications reach the right
device.
A push notification token issued by Google's Firebase Cloud Messaging
service, together with the identifier that service assigns to the app installation and the
platform name, so that notifications can be delivered to your device.
Information stored on your device by the app, which is limited to your
sign-in session (a signed token valid for up to 30 days, plus your cached profile and
which app features are switched on), the installation identifier above, and one small
display preference for a list filter. The app keeps no other work data on the device.
Technical information sent with every request, such as your network
address and the app and device version, which is used to operate and secure the service,
apply rate limits, and diagnose faults.
What the app does not collect. The app does not collect your location. It
contains no advertising, requests no advertising identifier, and includes no third-party
analytics or crash-reporting software. It does not read your contacts, your messages, your
call history or your files, and it does not access your camera or photo library except at
the moment you choose to attach a photograph.
4. Information about people who do not use the app
The training attendance register can record people who have no app account of their own, for
example contractors or visitors attending a training session. For those people the app may
record a name, identity number, employee number, contact details and a handwritten
signature, entered by the person running the session. If you attended a training session and
want to know what was recorded about you, use the contact details in section
10.
5. Why this information is processed
To operate the app: to sign you in, show you the work assigned to you,
record what you complete, and notify you when something needs your attention.
To manage accounts: to identify you, apply the right role and
permissions, and let administrators keep the user list current.
To keep your employer's operational records: quality, maintenance, stock
movement, trial and training records are business records your employer is required to
keep for operational, quality assurance, health and safety, and legal purposes.
To maintain accountability: the change log records who altered a record,
so corrections can be traced.
To keep the service secure: to detect and prevent unauthorised access,
abuse and technical faults.
The lawful bases relied on are the performance of your employment relationship, your
employer's legitimate interests in running its operations and meeting its obligations, and
compliance with law. The app is not used for marketing and your information is never used to
target advertising.
6. Device permissions the app asks for
Android asks your permission before the app can use the first two of these. You can refuse
or later withdraw either of them in your device settings, and the rest of the app continues
to work.
Camera android.permission.CAMERA
To photograph completed work, machine faults, quality defects and stock movements, and to
take a profile photograph. The app asks at the moment you tap to take a photo, never at
launch.
Notifications android.permission.POST_NOTIFICATIONS
To alert you when work is assigned to you, when an approval needs your review, or when a
colleague mentions you, and to open the relevant screen when you tap the alert.
Internet and network state android.permission.INTERNET,
android.permission.ACCESS_NETWORK_STATE
To communicate with the server and to tell you when you have no connection. These are
granted at installation and are not something you are prompted about.
Attaching a photo you already took needs no permission. When you choose
an existing photograph, the app opens the Android photo picker, which is part of your
device rather than part of this app. You select the images you want and only those are
handed over. The app has no permission to read your photo library and cannot browse it.
7. Who your information is disclosed to
Your information is not sold, and it is not given to anyone to use for their own
purposes.
There is no advertising in the app and no data is shared for advertising or marketing.
Within the app itself, your information is visible to:
Your employer's authorised administrators, who manage accounts and can
see the records the app holds.
Colleagues, to the extent their role allows. Work records are shared
records: a task shows who it is assigned to, a comment shows who wrote it, and a record
you create shows your name against it.
To run the service, TDC uses a small number of service providers who process information
only on our instruction, only to provide their service to us, and who are not permitted to
use it for their own purposes:
Microsoft Azure, which hosts the application, the database and the stored
photographs, documents and signatures, and holds the encryption keys and credentials the
service uses.
Google Firebase Cloud Messaging, which delivers push notifications to
your device. The notification title and text and the delivery token pass through this
service.
Information may be processed outside South Africa. These are international
service providers, so some processing and storage happens on infrastructure outside the
country. Where that occurs it is done under the providers' contractual terms, which require
a level of protection comparable to that required by POPIA, and only for the purposes
described in this policy.
Information may also be disclosed where the law requires it, or where it is necessary to
establish, exercise or defend a legal claim.
8. How your information is protected
Encrypted in transit. All communication between the app and the server
uses HTTPS. Plain-HTTP requests are redirected to HTTPS, and browsers are instructed to
use HTTPS for this site from then on.
Passwords are hashed. Passwords are stored using the bcrypt algorithm and
cannot be read or recovered by anyone, including TDC.
Access is enforced on the server. Your role and your ownership of a
record are checked on the server for every request, not just hidden in the app, so the
interface cannot be bypassed to reach data you are not entitled to.
Photographs and documents are not publicly addressable. They are
retrieved through short-lived, expiring links issued only to an authorised signed-in user.
Your session is not copied off your device. Android automatic backup is
switched off for this app, so your sign-in session is not copied to your Google account or
restored onto another device.
The service is rate limited and sets standard browser security headers,
to limit abuse and misuse.
No system can be guaranteed completely secure. If a breach occurs that is likely to harm
you, your employer, as the responsible party, is required to notify you and the Information
Regulator in line with POPIA.
9. How long information is kept
Records are kept for as long as your employer needs them for the operational, quality,
health and safety, and legal purposes described in section 5, and for as
long as the law requires.
Please be aware of what deactivating an account does and does not do.
When an account is deactivated it can no longer sign in and no longer appears in the app.
The work records that account created, and the change log entries recording edits made to
records, are retained, because they form part of your employer's
operational and audit history and other records depend on them. The change log also
retains the previous values of fields that were changed. Deactivation is therefore a
withdrawal of access, not an erasure of history.
The one item that is genuinely deleted straight away is the push notification token for a
device, which is removed when you sign out of that device or when it stops being valid.
Erasure of a record beyond that is possible, but it is decided by your employer, since these
are your employer's business records. Section 10 explains how
to ask.
10. Asking for access, correction or deletion of your information
The app has no self-service delete button, because the records it holds belong to your
employer's operational history rather than to a personal account. You can still ask for your
information to be provided, corrected or deleted, by either of these routes.
Ask your administrator. Speak to your supervisor or to whoever
administers Evergreen Connect at your site. They can correct your details, deactivate your
account so it can no longer be used, and escalate a request to erase records.
Or write to us. Email info@tdc.co.za
with the subject line "Evergreen Connect data request". Tell us your name, the site you
work at, and what you would like done. We will acknowledge your request, pass it to your
employer where the decision is theirs to make, and respond within a reasonable period and
in any event as required by POPIA.
Where a record cannot be erased because your employer is required to keep it, we will tell
you that and explain the reason rather than leaving the request unanswered.
11. Your rights
Under POPIA you have the right to:
be told what personal information about you is held, and to be given a copy of it;
have information that is inaccurate, misleading or out of date corrected;
ask for information to be deleted or destroyed where it is no longer needed for a lawful
purpose;
object, on reasonable grounds, to the processing of your information; and
complain to the Information Regulator of South Africa if you believe your information has
been handled unlawfully.
Exercising any of these rights is free and will not disadvantage you.
12. Children
The app is intended for people aged 18 and over. It is not directed at children, and
accounts are issued only by an employer to a person working at one of its sites. If you
believe an account has been issued to a child, contact us at
info@tdc.co.za.
13. Changes to this policy
If this policy changes, the updated version will be published at this address and the "Last
updated" date at the top will change. Where a change materially affects how your information
is handled, your employer will be informed so that it can tell affected staff.
14. Contact us
For any question about this policy or about how Evergreen Connect handles personal
information, email info@tdc.co.za.
For questions about the records your employer keeps about you, contact your employer's
administrator or human resources department directly, since those records are theirs.