Privacy

This policy describes how IDClock (https://idclock.app) handles personal data on the website, the employee app, and the admin WebApp. IDClock is the controller; email hello@idclock.app (English) or hola@idclock.app (Spanish). The legal entity and DPO will be published here once they are formalized.

Employee app data. To clock in, the app uses the email of the account the administrator invites and an install identifier generated on the phone; it is wiped on uninstall or on clearing the app’s data, and it is not the IMEI. Each punch records the date, the time, and the device that recorded it. The camera is used only to read the device’s QR code: it decodes the image in memory and does not save photos or video. The app carries no tracking or advertising SDK, and does not share data with ad networks. We do not use biometric data: no fingerprint, face, or voice.

Admin WebApp data. It holds administrator and supervisor accounts (name, work email) and the data the subscribing company uploads for its employees: name, email, shift, and punches. The punch archive is the base of the certified work-hours record and is kept for as long as the labor law that applies to that company requires. The subscribing company is the controller of its workers’ data; IDClock processes it to provide attendance, reports, and, if configured, payroll export.

Marketing and demo data. The website form (currently HubSpot) collects name, work email, company, optional phone, approximate team size, and a message. We use it to reply, prepare a demo, and, if you subscribe, provision the service. We do not sell those lists. The landing uses minimal technical cookies or storage to serve the page and the form.

Processors. We use Firebase (Google) for sign-in and for the app and WebApp to run; the backend runs on AWS; the website and the panels are hosted on Cloudflare; payments are processed at the checkout provider (for example Stripe), which does not share the full card number with us. These tools may sit outside your country; we use them as processors for those functions.

Your rights. You may access, rectify, erase, restrict, or object to the processing, and complain to your data-protection authority. To exercise those rights, email hello@idclock.app and identify the company and the email or account you used. This page will be updated with a postal address, corporate phone, and DPO once they exist.