Privacy Policy

Last updated: November 2, 2026

is run by [Legal business name] in Ontario, Canada. This page explains, in plain words, what information the service holds, why, who can see it, and what you can do about it. Short version: we hold your data to run your time clock, we don't sell it, and we don't track you around the web.

1. Who this covers

Account owners and managers: the people who sign up and run the office.
Employees: the crew whose punches are recorded. The employer adds them. If you are an employee with a question about your records, ask your employer first; they control the account.

2. What we hold

Information	Why
Owner's name, email, password (stored scrambled, never readable)	To log you in and send account emails
Shop name, province, time zone, logo, settings	To run your time clock the way you set it
Employees' names, colours, optional email, optional notes	To show who is punching in and prepare hours sheets
Pay rates (if the employer enters them)	To estimate gross wages for the employer
Employee PINs (stored scrambled, never readable)	So nobody punches for someone else
Punch times, lunches, edits and who made them	This is the time record itself
Tablet name and connection address, login connection address and browser type	Security: to spot stolen tablets and unusual logins, and for the optional "shop Wi-Fi only" lock
Emails you send us (support, quotes)	To answer you

We do not collect location, photos, fingerprints or anything from employees' own phones. Tablets only record a punch when someone taps their name.

3. Who can see it

Your shop only. Every record is tagged with your account, and the service only ever shows an account its own records. One business can never see another's.
Owners and managers on your account see everything in your office. Employees see only their own hours on the tablet, never pay rates or anyone else's details.
Us: a small number of our staff can access data to fix problems or when you ask for help. We do not browse customer data otherwise.
Service providers that run the service for us: Cloudflare (hosting, database and security), Resend (sending emails), and Stripe (card payments, once available: we never see your full card number). They may process data outside Canada, including in the United States, under their own privacy commitments.
Nobody else. We don't sell or rent data, and we don't share it with advertisers. We would only disclose data if the law required it.

4. Cookies and storage

We use one cookie to keep you logged in to the office, one on the tablet so it stays connected to your shop, and the browser's own storage for your theme choice and for punches saved while the internet is down. No advertising or tracking cookies, no analytics scripts from other companies.

5. Emails

We send emails needed to run your account: confirming your address, password resets, alerts you turn on, receipts and important notices. Product news is sent only if you ticked the optional box, and every such email has an unsubscribe link.

6. How long we keep it

While your account is open: as long as you keep it. Employers in Canada generally need time records for about 3 years.
After an account closes: 90 days, so you can still download your records; we email you before deleting. Backups age out after that.
Security logs (login and punch attempts): up to 1 year.

7. How we protect it

Everything travels over encrypted connections (HTTPS). Passwords and PINs are stored scrambled with modern methods, so even we can't read them. Each business's data is separated by design and tested for it. Logins and PIN attempts are rate-limited. The service runs on Cloudflare's infrastructure with its security protections. No system is perfect; if we ever learn of a breach that affects you, we will tell you promptly and report it as the law requires.

8. Your rights

You can see, correct and download the information in your account from the office at any time. You can ask us to delete your account. Employees can ask their employer for their records; the employer can print or download an hours sheet for any person and dates. If you have a question or complaint about privacy, write to . You can also contact the Office of the Privacy Commissioner of Canada.

9. Children

The service is for businesses. It is not directed at children, and owners must be adults.

10. Changes

If we change this policy in a way that matters, we will email account owners before the change takes effect and update the date at the top.

11. Contact

[Legal business name] (privacy contact)
[Mailing address]