Privacy Policy

Effective date: 5 November 2026

This policy explains how Worktime Control, including its website and Android application (com.worktimecontrol.app), handles personal information. For privacy questions or requests, contact the Worktime Control operator at arajka.kabashi@gmail.com.

1. Workplace accounts and responsibilities

Worktime Control helps employers and workers manage attendance, schedules, leave and pay calculations. Your employer or company administrator manages your workplace account and decides how workplace records are used. Contact your employer about employment records and their applicable privacy notices. The platform operator processes workplace data to provide the service and handles account security, support and subscription administration.

2. Information we process

Account and profile: name, username, email, phone number, address, profile photo, company, department, role, language preference and authentication credentials, where provided. Passwords and personal kiosk PINs are stored as hashes.
Work records: schedules, actual check-in and check-out times, attendance method, approvals, corrections, working hours, breaks, hourly rates, calculated pay, payment status and related notes.
Leave: requested dates, leave type, balances, approval decisions and optional reasons. Sick-leave records may reveal health-related information. Do not include diagnoses or unnecessary medical details in notes.
Location: when you use GPS verification, location-enabled QR verification or location selection, the service processes coordinates and, where available, accuracy to compare your position with the workplace. Verification methods and outside-zone status may be retained with attendance records and shown to administrators. This is not continuous background location tracking.
Security and technical data: IP address, browser/device information, login times, security events and operational logs.
Subscriptions and support: subscription plan, payment amount, currency, transaction references, payment status, and information you provide when contacting support.

3. Why we use information

We use information to authenticate accounts, record and verify attendance, calculate hours and pay estimates, manage leave, produce reports, process subscriptions, send service and security messages, resolve support requests, prevent misuse and maintain the service. Work records and calculations support employer administration; they do not replace the employer’s payroll or legal obligations.

4. Device permissions and local storage

Location permission supports attendance and workplace-location verification. Camera permission supports QR scanning. A system photo/file picker lets you choose an optional profile image. We do not require access to your contacts or microphone. You can revoke permissions in your device settings; associated features may then be unavailable. The app and website use local storage, session credentials and caches to maintain sign-in, preferences and essential operation. Signing out removes the active session from the interface.

5. Who receives information

Authorized company administrators can access records needed to manage their workforce. Authorized platform staff may access data for operation, security or support. Hosting, backup and email providers process information necessary to deliver the service; security emails may include login time, IP address and device/browser information.

Stripe processes subscription payments under its own privacy policy. The platform stores payment references and status rather than full payment-card details. Maps and address searches use OpenStreetMap services; loading maps or searching an address may disclose your IP address, requested map area or search text to those services. External asset/CDN providers may receive IP address and browser information when their resources load. A QR-image provider, where used, receives the content needed to generate the QR image. These providers handle their services under their own policies.

We do not sell personal information or use it for targeted advertising. We may disclose information when required by applicable law or necessary to protect the service and users.

6. Retention and deletion

Workplace records are retained while needed to provide the service and meet the employer’s applicable employment, accounting or legal requirements. Archiving a worker preserves historical records and does not delete them. Security records, subscription records and backups may be retained for security, recovery and legal purposes. After a valid deletion request, information that is no longer required will be deleted or anonymized; backup copies are removed through their normal rotation. Information subject to a legal retention requirement may remain restricted until that requirement ends.

7. Your choices and requests

Depending on applicable law, you may request access, correction, export or deletion of your information, or object to or restrict certain processing. You may update available profile fields and withdraw device permissions. For workplace records, contact your company administrator. You can also request account deletion or privacy assistance by emailing arajka.kabashi@gmail.com with your account username/email and company name. Do not send your password or PIN. We may verify your identity and coordinate with your employer before acting. Deleting an account does not automatically remove records that must be kept by law.

Request account or data deletion — Worktime Control

You can request deletion of your account and associated data, or deletion of specific data while keeping your account.

Email arajka.kabashi@gmail.com with the subject “Worktime Control data deletion”.
Include your account username/email and company name. State whether you want to delete your account or only specific data, and identify that data. Do not send passwords or PINs.
We will verify your identity, coordinate with the company responsible for workplace records where necessary, and explain the outcome and any retention that applies.

Data eligible for deletion: profile photos, optional contact/profile details, and other account or workplace data no longer needed for service provision or a lawful retention purpose. Account deletion also removes access to the account. A request to delete specific data does not require account deletion.

Data that may be kept: attendance, pay, leave, transaction and audit records where required for employment, accounting, security, dispute handling or other legal obligations. Applicable retention periods depend on the employer’s jurisdiction and the purpose of the record; there is no single worldwide period. We will explain the applicable reason and retention period for any data retained in response to your request. Archiving an employee is not deletion.

Backup copies: deleted data may remain in restricted recovery backups until normal backup rotation removes those copies. If a backup is restored, applicable deletion requests must be reapplied before normal use.

8. Security and international processing

We use HTTPS, access controls and hashed authentication credentials to protect information. No storage or transmission method is completely secure. Hosting and service providers may process information outside your country; privacy requests and questions about applicable transfer safeguards can be directed to the contact above.

9. Children

Worktime Control is a workplace service and is not directed at children under 13. Contact us if you believe a child has provided information without appropriate authorization.

10. Policy updates

We may update this policy when service features or data practices change. The latest version and effective date will be published on this page.

Privacy contact: arajka.kabashi@gmail.com