Clock-Clockby Deve-loops

Privacy policy

Last updated 28 September 2026

Clock-Clock is an attendance app for companies. Employees clock in and out on their phone, and managers see hours, schedules and leave. It is made by Deve-loops, Batroun, Lebanon. This policy explains what the app collects, why, and what you can do about it.

Who is responsible

The company that invited you to Clock-Clock, your employer, decides how its attendance records are used and is responsible for them. Deve-loops runs the app and stores the data on your employer's behalf. For questions about your own records, ask your employer first. For anything about the app itself, email [email protected].

What we collect

• Account: your name, email address and password (kept only in scrambled form by our sign-in provider), and, if your employer adds them, an employee number, phone number, role and department.
• Location: your GPS position, how accurate it is, and whether a fake-location app was detected. It is taken only when you clock in, clock out, or start or end a break. The app never tracks your location in the background.
• Camera: only if your employer puts a Clock-Clock code up at your work site. The camera then reads that code when you clock in or out. No photo is taken, nothing is stored, and no image leaves your phone.
• Phone: its model, operating system and app version, and a random code the app creates, so your account can be used on one registered phone only.
• Attendance: your clock-in, clock-out and break times, your shifts, your leave requests and the decisions on them, and a log of changes managers make to records.
• Pay, if your employer uses payroll: your pay rate or salary, whether you have a non-working spouse and how many children you have (both only affect your income tax exemption), and each period's payslip — hours, gross pay, social security and tax deductions, and net pay. Only your employer's admins can see this. Employees and supervisors can also see their own payslips in the app.
• Notifications: a notification token from Google Firebase, so your phone can receive messages such as a leave decision or the end of your break.

How it is used

• To record your working hours and breaks for your employer.
• To confirm you were at your work site when you clocked in or out.
• To stop anyone else clocking in for you, by tying your account to your phone.
• To manage schedules and leave, and to notify you about them.

Who can see it

Admins and managers at your employer can see your records, except pay, which only admins see. A department supervisor sees only the people in their own department. Other employees cannot see your data. After you delete your account, the records kept can be seen by your employer's admins and managers only. Deve-loops looks at it only to keep the service running or when you ask for help.

Service providers

• Supabase: database and sign-in, on servers in Frankfurt, Germany.
• Google Firebase Cloud Messaging: delivers notifications to phones.
• Google Firebase Crashlytics: tells us when the app breaks on a phone, so it can be fixed. A report holds the phone model, the Android or iOS version, and where in our code the fault happened. It carries your employee id so two reports from the same phone can be recognised as one problem. It carries no name, no email address, no location and nothing you have typed, and it is only ever sent when something has gone wrong — there is no tracking or analytics of any kind.
• Cloudflare: hosts the website and the dashboard.
• Google Maps and MapTiler: map images in the location editor, where an admin places a work site.
• OpenStreetMap: when an admin searches the location editor's map for an address or a place, what they type and the country chosen are sent to OpenStreetMap's search (Nominatim) to find it. Nothing about employees is sent.
• Google Fonts: the dashboard, in a browser only, may request one fallback typeface from fonts.gstatic.com if a name contains letters our own typefaces do not carry — Arabic, for example. The typefaces themselves are inside the app and are never downloaded. The phone app makes no such request at all.

We do not sell personal data, show ads, or use analytics or tracking tools.

How long it is kept

Account details are kept while your account exists. When you delete your account, your login, email address, phone number, registered phone and notifications are deleted. Deleting an account never deletes attendance, leave or payroll records: your employer keeps the records of your working time, leave and pay, with your name and employee number, marked "Account deleted", for as long as it needs them for payroll and legal obligations: employers must keep records of employment dates, days worked and wages. Older versions of the app said the name would be removed; an account deleted from one of them, or before this policy changed, is kept under "Deleted user", without a name.

A company's records are deleted only when the company is closed, which is its own decision: its owner closes a company nobody else has ever been in from the web dashboard, and any other company is closed through [email protected] after its records are exported. The one exception is a company its only person set up and never used - no attendance, leave or payroll record at all - which is removed when that person deletes their account. Notifications are deleted after 30 days.

Security

Data is encrypted in transit. Each company's records are kept apart from every other company's, and every clock-in is checked on our server, not only in the app.

Your choices

• See your hours and leave in the app, under History and Leave.
• Ask your employer to correct a record.
• Turn off location permission at any time. Clocking in will not work until it is back on.
• Delete your account from inside the app. See how to delete your account.

Children

Clock-Clock is made for employees and is not meant for anyone under 16.

Changes

If this policy changes, this page will show the new date.