Privacy Policy

Last updated: April 2026

1. What This Application Does

TimeTracker is an internal workforce management tool used to record employee clock-in/clock-out times, day off entries, and generate timesheet reports for payroll purposes.

2. Data We Collect

Data Type	When Collected	Required?
Employee name	On every use	Yes
Clock in/out timestamps	On each clock event	Yes
Timezone	Automatically on each event	Yes
GPS coordinates (lat/lng)	Only at clock in/out, only if enabled	No (opt-in)
Comments	When manually entered	No
Device info (user agent)	On GPS consent acceptance	Only with GPS

3. GPS Location Data

Location data is collected only when you explicitly enable the "Send Location (GPS)" toggle in Settings. When enabled:

Coordinates are captured only at the moment of clock-in and clock-out events
There is no continuous or background tracking
You may disable GPS at any time — the toggle is in Settings
Previously collected location data remains stored per retention policy

4. How We Use Your Data

Payroll processing: Clock times and durations are used to calculate hours worked
Location verification: GPS data (if enabled) helps verify shift location for timesheet accuracy
Audit trail: Shift edits are logged for compliance and dispute resolution
Reports: Aggregated data is used for workforce management dashboards

We do not sell, share, or disclose your data to third parties. Data is accessible only to authorized supervisors and administrators within the organization.

5. Data Storage & Security

Data is stored in a secure cloud database (Supabase) with encryption at rest and in transit
API access requires authentication via Bearer token or API key
Local data on your device is stored in the browser's localStorage
Admin dashboard access requires additional role-based authorization

6. Data Retention

Time and attendance records are retained for 6 years in compliance with New York Labor Law and New Jersey record-keeping requirements. Records are not automatically deleted.

7. Your Rights

Disable GPS tracking at any time via the Settings toggle
View your own shift history and reports within the app
Request access to your personal data from your supervisor or administrator
Request correction of inaccurate time entries (subject to approval workflow)

8. California Residents (CCPA/CPRA)

If you are a California resident, GPS coordinates are classified as "sensitive personal information." You have the right to limit the use of this data. To exercise this right, disable the GPS toggle or contact your administrator.

9. Changes to This Policy

We may update this policy as needed. Material changes will be communicated through the application.

10. Contact

For questions about this policy or your data, contact your direct supervisor or the system administrator.