The Work Clock
Privacy Policy
Effective October 6, 2026
The Work Clock provides attendance, scheduling, reporting, workplace-management, and workforce-communication tools to organizations. This policy explains how information is handled when you use our website, web application (including the installed web app), or mobile app for iPhone and Android.
Information we collect
- Account and organization information, including names, email addresses, roles, departments, workplaces, and company settings.
- Attendance and scheduling information, including clock-in and clock-out records, assigned shifts, corrections, approvals, absences, selected workplace details, reports, and related audit history.
- Location information used for workplace verification, field activity, safety, presence checks, and attendance features when those features are enabled and permission is granted. GPS evidence may include coordinates, a resolved address, distance, and accuracy.
- NFC workplace-tag information. When an employee taps a company's NFC tag with the mobile app, the app reads the tag's code and our server checks it against the company's registered tags to confirm presence at that workplace. When the phone also has a location reading, it is kept with the record as information for authorized managers.
- Computer-attendance evidence, including the public IP observed by the server, trusted-browser registration and security status, a management-assigned computer display name, and related approval history. The website does not read the operating-system hostname.
- Task information, including assignments, descriptions, priority, due times, publication state, progress status, and employee progress notes.
- Notes and reminder information, including manager reminders, recipients, schedules, recurrence, snooze, read state, and completion state. Personal Notes are private to the employee account in the product.
- Expense information that you choose to submit, including category, date, amount, currency, description, decision history, and receipt photos or files.
- Messages, documents, images, and files you choose to send or upload, including department or private chat.
- Device, notification-token, security, IP address, app-version, and sanitized diagnostic information needed to operate, protect, and troubleshoot the service.
- Billing contact and usage information when commercial billing is enabled. We do not store full payment-card details.
- Information you send through the contact form on theworkclock.com: name, work email, company name, number of employees, country, and your message.
How we use information
- Provide attendance, scheduling, tasks, reminders, expenses, reporting, chat, notification, account, and support features.
- Verify workplace or computer attendance, synchronize offline actions, enforce company attendance settings, prevent abuse, investigate incidents, and maintain audit trails.
- Deliver scheduled reminders and workflow notifications, record user-requested progress or completion, and present submitted expense evidence to authorized reviewers.
- Answer questions and requests sent through the website contact form.
- Operate, secure, troubleshoot, and improve the service, and resolve production errors.
- Comply with legal obligations and enforce our Terms of Service. We do not sell personal information or use precise location for advertising.
Who can access information
- Your organization controls its workforce records. Employees can access information permitted for their account; authorized owners, administrators, and managers can access information within their company and role scope.
- Personal Notes are available only to the employee account that created them through the product. Manager reminders and their read, snooze, and completion states are available to their recipient and authorized management as required by the workflow.
- Task assignments and progress are visible to the assigned employee and authorized management. Expense requests and receipt attachments are visible to the submitting employee and authorized reviewers within the company scope.
- Attendance evidence, including GPS details, NFC tag confirmations, saved workplace context, public IP, and an approved trusted-computer display name, is available only to users authorized to review the related attendance records.
- We may disclose information when required by law or to protect users, the service, or others.
Service providers
- We use service providers to operate the service: Supabase (database, sign-in, file storage, and server functions), Vercel (hosting of the web application), Bluehost (hosting of the theworkclock.com website and its contact form), Resend (email delivery), Google Firebase Cloud Messaging and the Apple Push Notification service (notifications to the mobile app), and OpenStreetMap services (address search, coordinates, and map display).
- They process information only to provide their services under their own contractual and security terms. Address searches are sent to the mapping service to return coordinates, postal information, and time-zone assistance.
- Information may be processed in countries where our service providers operate, subject to appropriate safeguards.
Retention and deletion
- Organizations retain attendance, scheduling, task, reminder, expense, chat, document, and employment records according to their operational and legal requirements, including payroll, tax, security, and audit obligations.
- A user may clear some chat history from their own view without deleting the organization’s underlying record. Completing, cancelling, or hiding a workflow item does not necessarily delete its audit history.
- Personal Notes can be managed only by the employee account through the available product controls. Infrastructure backups and security records may remain for a limited period after a visible item is removed.
- Resolved production-error records are retained for at least 90 days; unresolved incidents may be retained until they are resolved.
- Users can request deletion of their account through the account-deletion page in the app. To request access to or correction of workforce records, contact your organization administrator. The organization may need to preserve records required for payroll, employment, security, or legal obligations.
Security and choices
- We use role-based access, company isolation, encrypted transport, and access controls designed to protect information. Trusted-browser credentials are stored and compared in protected form. No system can guarantee absolute security.
- Touch ID, Face ID, or Android biometric authentication is handled by the device operating system; The Work Clock does not receive or store fingerprint or facial templates.
- You can control location, camera, photo-library, file, NFC, and notification permissions in device settings. Disabling a permission may prevent the related feature from working.
- An authorized owner or administrator can set employee attendance location verification to Required or Not required. When it is Not required, a clock-in or clock-out does not need GPS permission; other enabled field, safety, or presence features may still request location separately.
- A saved workplace address shown for a non-GPS punch is operational context, not a measured device location. Public IP and trusted-browser evidence are separate from GPS tracking.
- The service is intended for workplace use and is not directed to children.
Changes and contact
- We may update this policy as the service changes. The effective date above will be updated when material revisions are published.
- Questions or privacy and deletion requests may be sent to info@theworkclock.com. Workforce-record requests should also be directed to your employer or organization administrator.