Your Privacy Matters
TimeExacto is a workforce timekeeping and collaboration application
provided through your employer. We respect your privacy and explain below what data is collected,
why it is needed, who is responsible for it, and who can see it.
Data Controller
Your employer is the data controller (in Peru, the responsable del tratamiento
and holder of the personal-data bank for employment records). Your employer decides why attendance,
location, photos, messages, and other work data are processed.
TimeExacto (the platform operator) is the data processor (in Peru, the
encargado del tratamiento). We host and operate the software under contract with your employer.
We do not use employee data for advertising or sell it to third parties.
Requests to access, correct, or delete personal data should go first to your employer’s administrator.
TimeExacto will assist the employer. You may also contact us at
timeexacto@gmail.com.
Information We Collect
- Account details: name, username, email, employee identifiers, position, and organization membership provided by your employer.
- Sign-in with Google or Apple: if you choose those options on web or mobile, Google or Apple authenticates you and sends TimeExacto an identity token that includes a unique account identifier and, when they provide it, your name and email. We use that only to sign you in and to match or link the login to your TimeExacto account. We do not post to your Google or Apple account, access your contacts or files there, or use that sign-in for advertising.
- Timekeeping records: clock-in, clock-out, and break times, including the method used (mobile button or QR scan).
- Precise location: a single GPS sample when you clock in and when you clock out (stored on the time record), and live periodic location updates only while you remain clocked in or on an authorized break. Live collection and transmission stop when you clock out. The app does not track your location when you are off duty. See “Background Location Data” below.
- Photos and camera images: photos you choose to take or select for task proof, chat attachments, and QR badge scanning. Camera access is also used for video calls.
- Microphone audio: used in real time for voice and video calls in chat. Call audio is transmitted for the call session and is not stored by us as a permanent recording unless your employer enables a separate recording feature.
- Messages and collaboration content: chat messages, attachments, and related metadata you send through the app.
- Schedules and tasks: assigned shifts, task titles, checklist progress, and related work content.
- Device and app technical data: app version and basic device information needed for security, compatibility, and update checks.
- Biometrics (on device only): optional Face ID / fingerprint unlock uses your device biometric sensors. Biometric templates stay on your device and are not uploaded to our servers.
Background Location Data
Live GPS is collected only while you are clocked in or on an authorized break. It is not always-on, and it is not used to track you after you clock out.
- Android: while you remain on shift, the app may continue to collect and transmit location in the background (including with the screen off) using an on-screen “On shift” notification, if you grant background location permission. When you clock out, that tracking service is stopped.
- iOS: location is collected only while the app is open and in use. TimeExacto does not use iOS background location (no “Always” location permission).
- When you clock out: the app stops the live GPS stream. The server will not accept further live location pings because there is no open time entry. Clock-out still stores one GPS sample on that time record; that is a punch, not ongoing tracking.
- Off duty: the app does not run background GPS and does not send live tracking pings to your employer. If you open a map screen in the app (for example “My location”), your device may show your position locally without uploading live tracking pings.
Permissions the Mobile App May Request
- Location: attendance verification at clock-in and clock-out, and live map for authorized managers while you are clocked in. On Android, background location is optional and used only while on shift. On iOS, location is while-in-use only.
- Camera: QR scanning, task proof photos, and video calls.
- Microphone: voice and video calls.
- Photo library: attaching images in chat or tasks when you choose gallery.
- Notifications: on-shift tracking status and in-app alerts where supported.
- Biometrics: optional quick unlock.
Legal Basis and Consent
Your employer processes this information because it is necessary to provide the timekeeping and workforce
service they contracted, to record attendance and hours, and to meet labor, payroll, and tax legal duties.
Precise location while on shift is used to verify presence at assigned work sites and is not used for advertising.
Device permissions (location, including Android background location; camera; microphone; photos; biometrics)
are granted or refused through your operating system. You can revoke them in device settings. Some features
will not work without the related permission. A clock-in acknowledgment that live location may be visible
to authorized managers during your shift is informed notice; it does not change who the data controller is.
How We Use Your Information
- Record and verify attendance and work hours for your organization
- Confirm you are at an assigned work site when clocking in or out
- Show authorized managers your live position on a map only while you are clocked in or on an authorized break
- Support schedules, tasks, chat, and calls needed for work
- Secure your account and keep the service reliable
- Sign you in with Google or Apple when you choose those buttons
We do not use your data for advertising, cross-app tracking, or sale to data brokers.
We do not use advertising identifiers (IDFA / AAID) for tracking.
Who Can See Your Data
Your attendance records, task activity, chat content within your organization, and live location while clocked in
are visible to authorized administrators, managers, and timekeepers in your employer organization
through web and mobile admin tools. We do not sell your personal data.
Third-Party Services Used to Operate the App
To provide maps, location search, call connectivity, and optional Google or Apple sign-in, the app may contact infrastructure providers such as:
- OpenStreetMap tile servers and Nominatim geocoding (map display and place search)
- Public STUN servers used for WebRTC call connectivity (for example Google STUN), which may see network connection metadata such as IP address during call setup
- Google Sign-In and Sign in with Apple, when you use those buttons. Google or Apple authenticates you on their screens and sends us a token so we can verify your identity. Their own privacy policies apply to that sign-in process.
These providers are used only to operate features you use (maps, calls, and optional Google or Apple sign-in). They are not used for advertising.
Data Sharing
Your information is processed for workforce management within your employer organization and by service providers
that host or operate the TimeExacto platform under contract. We do not sell or rent your personal information.
Data Transfers and Technology Providers
Depending on your employer’s deployment, TimeExacto servers and related hosting may be located outside Peru.
Map and call providers (OpenStreetMap / Nominatim and public STUN servers) and Google or Apple (when you sign in with them)
may also process sign-in, connection, or map data outside Peru solely to run those features. Transfers are made to operate the service your employer contracted,
not for advertising. Your employer is responsible for the deployment region they choose.
Data Retention
- Live map pings: accepted only while an open shift exists (clocked in or on break). They are not used to track you off duty.
- Clock-in and clock-out coordinates: kept with the attendance record.
- Attendance records, photos, messages, schedules, and tasks: retained for the employment relationship and thereafter as your employer requires for payroll, labor, and tax law. Periods vary by organization.
- When employment ends: your employer must request account deactivation and deletion. TimeExacto processes that instruction. Some records may be kept if a legal obligation requires it.
Contact your employer administrator for organization-specific retention practices.
Data Deletion and Correction
To correct or delete personal data, contact your employer’s administrator first. They are responsible for
handling the request. If needed, email timeexacto@gmail.com and we will
route the request to the employer and assist. TimeExacto does not delete a company’s employment records
on an individual employee request alone without the employer’s instruction, except where law requires it.
User Rights (Peru)
If you are in Peru, you have rights under Ley N.° 29733 (Personal Data Protection Law) and its regulations,
including the rights to access, rectify, update, cancel or delete, object to processing, and revoke optional consents
(for example device permissions). Exercise these rights with your employer as data controller. TimeExacto will
assist the employer. These rights are in addition to any rights you have under other applicable laws.
Security
- Encrypted connections (HTTPS / TLS) for data in transit
- Authenticated access controls so only authorized users can view records
- Secure storage of sign-in tokens on the device
Security Incidents
If we become aware of a data breach, loss, or unauthorized access affecting TimeExacto systems, we investigate,
contain the incident, and notify your employer without undue delay. Your employer is responsible for notifying
affected workers and, where required, the competent Peruvian authority. You may also contact us at
timeexacto@gmail.com.
Your Choices
- You can deny or revoke location, camera, microphone, photos, or notification permissions in device settings. Some features (clock-in, calls, attachments) will not work without the related permission.
- Photo and gallery uploads are initiated by you.
- Optional biometric unlock can be turned off in the app or device settings.
- To correct or delete personal data held for employment purposes, contact your employer’s administrator.
Minors
TimeExacto is intended for workers authorized by an employer organization. It is not designed to collect
information from minors and is not directed to children.
Changes
We may update this Privacy Policy from time to time. The “Last updated” date at the top will change when we do.
Continued use of the service after updates means you acknowledge the revised policy.
Contact Us
Website: www.timeexacto.com
Phone: +1 (671) 480-7161
Email: timeexacto@gmail.com
Public policy URL for store listings: /Privacy on your TimeExacto deployment (for example https://app.timeexacto.com/Privacy).