The Work Clock provides attendance, scheduling, reporting, workplace-management, and workforce-communication tools. This policy explains how information is handled when you use our website, web application, or native mobile application.

1. Information we collect

• Account and company information, including names, email addresses, roles, departments, workplaces, and company settings.
• Attendance and scheduling information, including clock-in/out records, shifts, corrections, approvals, absences, reports, and audit history.
• Location information used to verify workplace attendance or field activity when the feature is enabled and device permission is granted.
• Messages, documents, images, and files that users choose to submit through the service.
• Device identifiers, notification tokens, security events, IP address, app version, and limited diagnostic information needed to operate and protect the service.
• Billing contact and usage information when commercial billing is enabled. We do not store full payment-card details.

2. How we use information

• Provide attendance, scheduling, reporting, communication, notification, support, and account features.
• Verify workplace activity, synchronize offline actions, prevent misuse, investigate incidents, and maintain audit trails.
• Operate, secure, troubleshoot, and improve the service.
• Comply with legal obligations and enforce our Terms of Service.

We do not sell personal information or use precise location for advertising.

3. Location and biometric authentication

Location is requested only for features that require workplace or field verification. Accuracy depends on the device, network, and local conditions. Touch ID, Face ID, or Android biometric authentication is handled by the device operating system; The Work Clock does not receive or store fingerprint or facial templates.

4. Service providers

We use service providers such as Supabase, Vercel, Expo, email and notification providers, and OpenStreetMap-based address services to operate the product. They process only the information needed to provide their services under their own contractual and security terms. Address searches may be sent to the mapping provider to return coordinates, postal information, and time-zone assistance.

5. Organization access and responsibility

Your employer or organization controls its workforce records. Employees can access information permitted for their account. Authorized owners, administrators, and managers can access information within their company and role scope. Contact your organization first regarding workplace records, corrections, or employment-related retention.

6. Retention, correction, and deletion

Organizations may retain attendance, payroll-supporting, scheduling, document, communication, security, and audit records as required for operational, employment, tax, or legal obligations. Users may request access, correction, or deletion through their organization administrator or through the in-app account-deletion flow. Some records may be retained where required by law, security, fraud prevention, dispute handling, or legitimate audit requirements.

Privacy and deletion requests may also be sent to reports@theworkclock.com.

7. Security and user choices

We use role-based access, company isolation, encrypted transport, and technical and administrative safeguards. No system can guarantee absolute security. You can control location and notification permissions in device settings; disabling a permission may prevent the related feature from working.

8. International use and children

Information may be processed in countries where our service providers operate, subject to appropriate safeguards. The service is intended for workplace use and is not directed to children.

9. Changes and contact

We may update this policy as the service changes. The effective date will be updated when material revisions are published. Questions may be sent to reports@theworkclock.com.