1. Information We Collect

Account Data: Name, email address, phone number, organization name, and role when you create an account.

Usage Data: Tasks created, time entries, clock-in/out timestamps, app usage patterns, and feature interactions.

Location Data: GPS coordinates are collected while a worker is clocked into a job — for time verification, customer arrival tracking, and the worker's proof of on-site time. On supported plans, location is shared live while clocked in so customers can track arrival. Location is collected only while clocked in and stops the instant the worker clocks out; no location is collected off the clock.

Device Data: Device model, operating system version, app version, and crash reports for troubleshooting.

Photos: Work proof photos uploaded by users, including GPS metadata and timestamps.

2. How We Use Your Information

We use your information to: (a) provide and maintain the Service; (b) process billing and payments; (c) send service-related notifications; (d) improve the Service; (e) prevent fraud and enforce our Terms; (f) respond to support requests.

3. Data Sharing

We do not sell your personal data. We share data only with:

Stripe: Payment processing
Intuit/QuickBooks: Accounting sync (if enabled by your org)
Your organization: Managers and owners can view employee data within their org
Law enforcement: When required by law or valid legal process

4. Data Security

We protect your data with: encrypted storage on mobile devices (EncryptedSharedPreferences), TLS encryption in transit, secure API token authentication, rate limiting, CSRF protection, and regular security audits.

5. Data Retention

We retain your data for as long as your account is active plus 30 days after termination. You may request data export or deletion at any time by contacting us.

6. Your Rights

You have the right to: access your personal data; correct inaccurate data; request deletion of your data; export your data in a standard format; withdraw consent for optional data collection.

7. Cookies

The web dashboard uses session cookies for authentication. We do not use tracking cookies or third-party analytics on the dashboard or portals.

8. Children's Privacy

WorkTrac is not intended for use by individuals under 16 years of age. We do not knowingly collect personal information from children.

9. Changes to This Policy

We may update this Privacy Policy periodically. We will notify you of material changes via email at least 14 days before they take effect.

10. Contact

For privacy-related questions or requests, contact us at support@worktrac.io.