Privacy Policy

We collect the following, and no more than we need to run the service:

• Account information — when you create an account with Apple, Google, or email, we receive your email address and (from Apple/Google, if you allow it) your name. If you use a password, it's handled by our authentication provider; we never see it.
• Your work data — the jobs, shifts, time entries, breaks, pay rates, and earnings you record, along with your app preferences (currency, language, appearance, and similar).
• Subscription information — if you subscribe to Clock In Plus, we receive your subscription status and history from the app store or payment processor. We do not receive or store your full card number.
• Basic usage and diagnostics — anonymous or account-linked events about how the app is used, and error reports, to keep the app working and to improve it.

• To provide the service — store and sync your data across your devices, run your time and earnings calculations, and keep you signed in.
• To manage subscriptions — start, renew, and verify Clock In Plus.
• To support you — respond to your questions and requests.
• To improve and secure Clock In — understand which features are used, fix bugs, and prevent abuse.
• To meet legal obligations — when we're required to.

We do not sell your personal information, we do not show third-party ads, and we do not use your work data for advertising.

Clock In relies on a small set of service providers, and shares only what each needs to do its job:

• Google Firebase — Firebase Authentication (sign-in) and Cloud Firestore (secure storage and sync of your account and work data).
• RevenueCat and Stripe — subscription management and secure checkout for purchases made on the web.
• Apple — subscriptions purchased through the App Store on iOS.
• PostHog, Mixpanel, and Google Analytics for Firebase — product and usage analytics that help us understand how the app is used and improve it.
• Vercel — hosting and web analytics for the web app.

• Access and edit — view and change your data any time from within the app.
• Export — download your timesheets from the app.
• Delete your account — deleting your account removes your data from our active systems (your work data is erased when the account is deleted).
• Unsubscribe — you can opt out of any non-essential emails we send.

We keep your information for as long as your account is active. When you delete your account, your associated work data is removed from our active systems. We may retain limited records where we're required to for legal, security, or accounting reasons.

Your data is encrypted in transit, stored on managed infrastructure (Google Cloud) behind access controls and security rules, and access is limited to what's needed to operate the service. No method of transmission or storage is perfectly secure, but we work to protect your information and to notify you if a breach affecting it occurs.

Clock In is operated from the United States, and your information is processed and stored there by the providers listed above. If you use Clock In from outside the United States, you understand your information will be processed in the U.S.

Clock In isn't directed to children under 13, and we don't knowingly collect personal information from them. If you believe a child has given us information, contact us and we'll remove it.

We may update this policy from time to time. When we make material changes, we'll update the date at the top and, where appropriate, let you know in the app.

Questions about privacy? Email us at clock-in@brogan.io.