Information we collect
Account and employment information
Employers or their administrators provide employee names, email or login identifiers, company membership, roles and account status. ClockCore also uses account identifiers, schedules, job-site assignments, and applicable overtime and payroll settings.
Timekeeping and location information
ClockCore records clock-ins, clock-outs, shifts, meal breaks, travel and other shift activities, corrections, attendance exceptions, manager reviews and approvals, and payroll-related hours and allocations.
During relevant foreground timekeeping actions, ClockCore may collect precise latitude and longitude, location accuracy, and evidence used to compare the location with an assigned job site or geofence. Location evidence may be associated with punches, transfers, and meal activity. For meal breaks, the app may also record a best-effort address from the device's reverse-geocoding service when available. ClockCore does not currently perform continuous or background location tracking. Location is collected when an employee performs relevant app actions.
Photos and face verification
Where face verification applies, ClockCore receives an enrollment selfie and selfies for applicable punches or transfers. It records verification status and results, including face detection, similarity or quality information as applicable. A manager-approved face-verification exemption may be available.
Device, communications, and payroll information
ClockCore uses trusted-device identifiers and secret or verifier information, platform and device labels, device approval or revocation status, authentication and session information, and push notification tokens. It stores announcements and employee review acknowledgements, documents and their recipients, and notification delivery records.
ClockCore also handles payroll totals, employee and payroll-item mappings, approvals, and related records. Where an employer configures QuickBooks Desktop, the service handles connection information and the payroll or time entries needed for that integration.
Diagnostics
Operational logs, errors, and job-status records help us run, protect, and troubleshoot the service. ClockCore does not currently include a dedicated advertising, behavioral analytics, or crash-reporting SDK.
How information is used
We use this information to authenticate users, validate trusted devices, verify attendance and timekeeping actions, confirm job-site and geofence requirements, perform face verification where applicable, and provide schedules, announcements, documents, and notifications. We also use it to calculate and export payroll information, support manager review, prevent security abuse or fraud, operate the service, and investigate problems. We do not use ClockCore information for advertising or behavioral profiling.
Face verification and biometric image retention
Where face verification is enabled, an employee knowingly provides an enrollment selfie. ClockCore may capture a selfie during applicable punches and transfers. Image data may be processed by AWS Rekognition to detect or compare faces; ClockCore stores verification results and related audit metadata. The current implementation does not create a Rekognition face collection or permanent face template. A manager-approved verification exemption may be used where available. Biometric information is not sold or leased.
Current image-retention rules make images eligible for deletion as follows:
- Unreferenced enrollment and punch images: 24 hours after reservation.
- Expired enrollment validation images: 24 hours after validation expiry.
- Revoked enrollment images: 7 days after revocation.
- Verified punch images: 30 days after verification is completed.
- Review, mismatch, or error punch images: 7 days after the associated verification case is closed.
An active enrollment image may remain while that enrollment is active. Unresolved review cases, legal or security holds, and safeguards that prevent unsafe deletion may delay removal. When eligible images are deleted, certain derived face measurements and raw verification-job errors are also purged. Ordinary timekeeping and audit records may remain independently of image deletion.
Advertising and tracking
ClockCore does not currently use an advertising SDK, collect Apple's advertising identifier (IDFA), or track people across apps for advertising. We do not sell personal information for advertising. Service infrastructure may receive technical request information needed to deliver the product.
Data security
ClockCore uses access controls, company separation, private storage, authenticated and authorized workflows, trusted-device protections, and retention and deletion safeguards. No system can guarantee absolute security.
Data retention
Retention varies by data type and operational or legal need. Biometric images follow the eligibility rules described above. Payroll, timekeeping, security, and audit records may be retained as needed for employment, payroll, dispute resolution, contractual, or legal recordkeeping. We do not apply a single fixed retention period to all such records.
Account deletion and privacy requests
An authenticated employee can initiate an account deletion request in the ClockCore app under Account & Privacy. Requests are processed within 30 days under our current operational policy; submission does not automatically delete the account. An employee may cancel a request before processing begins. The account remains active while a request is pending unless it is otherwise restricted.
After completion, confirmation will be sent to the account email. Some payroll, timekeeping, security, or audit records may need to be retained. Deleting an account is distinct from retaining historical records for legitimate recordkeeping. For help with a request, contact support@clockcore.app.
Employers and organizations
ClockCore is used by employers and organizations. Their administrators determine many workforce settings and provide employee, job-site, and schedule information. Employees should also contact their employer about employment-record issues where appropriate.
Children
ClockCore is a workforce application and is not directed to children.
Changes to this policy
We may update this policy as the service changes. When we do, we will revise the effective date shown above.
Contact
CR1MSON Industries LLC
support@clockcore.app