24me Personal Assistant App - safe to use?

[hallb15]

Has anyone heard of an app called 24me? 

https://www.twentyfour.me/

 

I have a member of staff who wants to synchronise it with the calendar of her school email account, but its asking for access to resources that require admin approval.

[PotNoodleTech]

I am assuming this is on her personal phone?   The app probably wants access to everything - be careful.  

[hallb15]

2 minutes ago, PotNoodleTech said:

I am assuming this is on her personal phone?   The app probably wants access to everything - be careful.  

It is currently on her personal phone, but she wants it to be installed on her school issued iPad as well.

[PotNoodleTech]

3 minutes ago, hallb15 said:

It is currently on her personal phone, but she wants it to be installed on her school issued iPad as well.

 

Better do a DPIA

[paulkerton]

https://www.twentyfour.me/terms_privacy

GDPR - No mentions
EU - No mentions
UK - No mentions

European Union - No mentions

United Kingdom - No mentions

No declaration of where the data is stored either. I wouldn't even bother with a DPIA, it will fail.

[hallb15]

I asked ChatGPT to do a DPIA for me - just as a guide before considering asking our DPO. This is what it came up with:

5. Assessment of Risks to Data Subjects

Risk	Likelihood	Impact	Mitigation
Unauthorized access to personal data	Medium	High	Use of encryption (at rest and in transit), strong authentication, limited data retention.
Data breach via third-party integrations	Medium	High	Conduct third-party risk assessments, limit API permissions, allow user control over integrations.
Inaccurate or outdated data	Low	Medium	User control over content; ability to edit or delete entries.
Misuse of sensitive data (e.g., location, contact details)	Medium	Medium	Informed consent required; granular permission settings in app and mobile OS.

 

 

Based on the privacy statement (thanks @paulkerton I was reading them on the app store when your post came through) and the above its a definite no.