Privacy Policy

1. Who we are

Clock Us In is a staff time-tracking application offered by Commanda Pay Inc. Our website is clockusin.com. Our mailing address is 5211 Macleod Tr SW, #108 80111, Calgary, Alberta T2H 0J3, Canada.

2. Data the App collects

Stored locally on the manager’s device (via Apple SwiftData / SQLite — never transmitted to our servers):

• Employee profiles: full name, email address, phone number, role, PIN, manager status, and shift preferences.
• Shift records: clock-in time, clock-out time, break start and end times, break duration, shift status, location name, and any manual adjustment reasons.
• Scheduled shifts: employee name, role, location, scheduled start and end times, optional notes, and repeat patterns.
• Work location records: location name, address, designated Wi-Fi SSID, QR secret key, and expected shift hours.
• QR token records: rotating secret used to generate the scannable QR code, refreshed on a configurable interval.

Device features used:

• Camera: Used solely to scan the manager’s QR code for clocking in and out. The image is processed on-device and is not stored or transmitted.
• Location / Wi-Fi (network name only): The app reads the name of the Wi-Fi network the device is connected to (via CoreLocation’s requestWhenInUseAuthorization) to detect when a staff member is at the venue and send a clock-in reminder. No GPS coordinates are collected, stored, or transmitted. The Wi-Fi network name is never sent to our servers.
• Notifications (optional): Used to deliver clock-in reminders when a staff member connects to the venue Wi-Fi. Notification permission is requested only if reminders are enabled.

No analytics, crash-reporting, or advertising SDKs are included in this app.

3. Data the Website collects

• Contact and support form submissions: Name, email, phone (optional), message, and consent choices are forwarded to our CRM (HubSpot).
• reCAPTCHA: Forms use Google reCAPTCHA v3 to detect automated submissions. Google’s reCAPTCHA privacy policy applies: https://policies.google.com/privacy.
• Cookies / analytics: We do not use tracking cookies or analytics on this website.

4. How we use data

• App data is used solely to operate the staff time-tracking features on your device.
• Website form data is used to respond to your enquiry or support request.
• We do not sell personal data to third parties.

5. Legal basis for processing

• Consent: form submissions include explicit consent checkboxes; location and notification permissions are requested with in-app explanations before any access.
• Legitimate interest: responding to support requests.

6. Data sharing

• HubSpot (CRM): contact and support form submissions. HubSpot privacy policy: https://legal.hubspot.com/privacy-policy.
• Google (reCAPTCHA): form submissions include reCAPTCHA token verification.
• We do not share app shift, employee, or schedule data with any third party.

7. Data retention

• App data is retained on your device until you delete the app or clear app data.
• Website form data is retained in HubSpot per HubSpot’s retention policy.

8. Your rights

You may request access to, correction of, or deletion of your personal data by contacting [email protected].

9. Children’s privacy

Clock Us In is not directed at children under 13. We do not knowingly collect data from children.

10. Security

App data is protected by iOS’s sandboxed storage. Website form data is transmitted over HTTPS.

11. Changes to this policy

We will update the "Last updated" date when this policy changes.

12. Contact

Email: [email protected] | Website: clockusin.com | Mailing address: 5211 Macleod Tr SW, #108 80111, Calgary, Alberta T2H 0J3, Canada.