Clock-Me Privacy Policy

Effective Date: March 7, 2026
Last Updated: March 7, 2026
Version: 3.0

1. Introduction

Clock-Me ("the System," "we," "our," or "us") is a time tracking and workforce management platform owned and operated by A & C Service Group. This Privacy Policy explains how we collect, use, store, and protect information when you use our web application and mobile app.

We are committed to protecting your privacy and ensuring transparency about our data practices. This policy applies to all users of Clock-Me, including employees, supervisors, managers, administrators, and clients.

2. Information We Collect

2.1 Account Information

2.2 Time and Attendance Data

2.3 Location Data

We collect location data in the following scenarios:

GPS Snapshot (Punch In/Out)

Foreground Heartbeat (While Punched In)

Purpose: Location data is used solely to verify that punches occur within the designated work area (geofence validation) and to ensure ongoing compliance with attendance policies. This helps ensure accurate time tracking and prevents time fraud.
Note: Meal breaks and rest breaks do NOT require location validation. Employees may take breaks anywhere.

2.4 California Compliance Data

California Employees: For employees working at California locations, we collect additional data to comply with California Labor Code requirements.

2.5 Timecard Attestation Data

When you submit or approve your weekly timecard, we collect:

Attestation Statement: "I certify that this timecard is complete and accurate. I confirm that I have recorded all hours worked and that I have not performed any work before my scheduled start time, after clocking out, or while off the clock during meal or rest breaks. I also confirm that all meal periods and rest breaks have been accurately recorded and provided in accordance with company policy and applicable law. I have not worked any unrecorded or 'off-the-clock' time."

2.6 Device Information

For Web Browsers:

For Mobile App:

Important: We do NOT collect:

2.7 Technical Data

3. How We Use Your Information

3.1 Primary Purposes

Data Type Purpose
Account Information User authentication and access control
Time Records Calculating work hours and payroll
GPS Location (Punch) Verifying punch location within work geofence
GPS Location (Heartbeat) Verifying continued presence during shift (foreground only)
Meal/Rest Break Data California labor law compliance, penalty calculations
Timecard Attestation Legal compliance, payroll accuracy, audit trail
Device Information Fraud prevention (device sharing detection)
Push Token Sending work-related notifications

3.2 California Labor Law Compliance

For employees at California locations, we use collected data to:

3.3 Fraud Prevention (Device Sharing Detection)

To maintain time tracking integrity and prevent "buddy punching" (one employee punching for another), we monitor for device sharing patterns.

How It Works:
  1. When you punch, your device identifier is recorded.
  2. The system checks if the same device was used by a different employee.
  3. A potential violation is flagged ONLY if ALL conditions are met:
    • Same device identifier (Browser ID, Push Token, or Device ID)
    • Same work location
    • Within a 2-hour time window
    • Different user account

4. Data Retention

Data Type Retention Period
Time entries and punch records 7 years (for compliance)
Timecard attestations 7 years (for compliance)
Meal break waivers 7 years (California compliance)
Meal/Rest break records 7 years (California compliance)
Compliance violation records 7 years (California compliance)
Audit logs 2 years
Device identifiers Rolling 2-hour window for fraud detection; 30 days in audit logs
GPS coordinates (punch) Stored with punch records (7 years)
GPS heartbeat data 30 days (for compliance verification)

5. Data Security

We implement industry-standard security measures to protect your information:

Technical Safeguards

What We DON'T Do:

6. Data Sharing

We only share your information in the following circumstances:

6.1 With Your Employer

Your employer (the organization using Clock-Me) has access to:

6.2 Service Providers

We use the following third-party services:

Service Purpose Data Shared
Google Places API Address Autocomplete Inputted address text
Expo Push Notifications Mobile notifications Push tokens only
LocationIQ Reverse geocoding GPS coordinates
Brevo Email notifications Email addresses
Sentry.io Error monitoring Error logs, device info (no personal data)

7. Your Rights

Depending on your jurisdiction, you may have rights regarding access, correction, and deletion of your data.

California Residents

Under the California Consumer Privacy Act (CCPA), you have the right to:

To exercise these rights, please contact your employer's HR department or email us at app@clock-me.com.

8. Cookies and Local Storage

We use local storage for device identification (fraud prevention) and session management. We do not use third-party advertising or tracking cookies.

9. Mobile App Permissions

The Clock-Me mobile app requests the following permissions:

Permission Purpose Required?
Location (GPS) - Foreground Geofence validation during punch; heartbeat while punched in Yes (While Using App)
Push Notifications Receiving work reminders, break notifications Optional
Camera Future feature (not currently used) No
"Always Allow" Location: NOT required. We do not track location when the app is closed or in the background.

10. Children's Privacy

Clock-Me is a workplace application and is not intended for use by individuals under 16 years of age.

11. Changes to This Policy

We may update this Privacy Policy from time to time. Significant changes will be communicated through the app or via email. Continued use of Clock-Me after changes constitutes acceptance of the updated policy.

12. Contact Us

If you have questions about this Privacy Policy, please contact us at:

Email: app@clock-me.com

Terms of Use | Privacy Policy | Data Safety Summary
© 2026 A & C Service Group. All rights reserved.