Privacy Policy

2.1 Location Data

We use precise location to show assigned workplaces, provide directions, verify attendance and support enabled workplace reminders and automatic clock-in:

• With background location enabled, arrival monitoring can operate before clock-in, including when the app is closed or not in use, for enabled workplace reminders and automatic clock-in
• A visible indicator is displayed in the App whenever location tracking is active
• Continuous session tracking stops when you clock out; background arrival monitoring may remain enabled for reminders and automatic clock-in. This does not make your location visible to your employer while you are clocked out
• Automatic session closure follows the applicable shift end or configured safety limit, rather than a universal 12-hour rule
• Location history recorded while clocked in may be uploaded when connectivity returns, including after clock-out. This does not include your location while clocked out
• Only while you are clocked in, precise location samples are recorded for attendance verification and location history that the employer you select in the app can review. Your employer cannot see your location while you are clocked out. Previously recorded clocked-in history remains available under the retention policy. Tracking may pause away from the workplace and resume on return
• You can review your timesheets in the app and manage location access in device settings. Disabling access may prevent location-dependent attendance features from working

2.2 Photographs

We collect a profile photo during account setup and clock-in selfies for employer-required identity verification:

• A clock-in selfie is required when your selected employer’s attendance policy requires photo verification
• Photos are used for profile identification and attendance verification by the employer you select in the app
• Photos are securely stored with encryption
• Photos are never used for facial recognition training

2.3 Time and Attendance Data

We collect records of your work hours, including:

• Clock-in and clock-out timestamps
• Duration of work sessions
• Work site assignments
• This data is used for timesheet generation and payroll processing

2.4 Device Information

We may collect certain device information to ensure proper App functionality:

• Device type and operating system version
• Unique device identifiers
• App version
• Push notification tokens (if notifications are enabled)

2.5 Biometric Authentication Data

If you enable Face ID or Touch ID for app authentication:

• Biometric data is processed entirely on your device by your operating system
• We NEVER receive, store, or have access to your actual biometric data
• We only receive a confirmation of successful authentication

2.6 Personal Contact Information

We collect and store personal contact information provided during account registration and profile setup:

• Full name
• Address
• Email address
• Phone number
• This information is used for account identification, communication, and employment verification purposes

4.1 Your Employer

Your work data, including attendance records, clock-in photos and location history recorded only while clocked in, is shared only with the employer you select within the app for that work, not with your other employers. Each employer can access only their associated work records. Changing your selected employer does not transfer previous work records to the new employer or remove the previous employer’s access to their existing records, subject to the applicable retention policy. OnSyte uses hosting and storage providers to run the service and store this data, as described in section 4.2; legal disclosures are covered by section 4.3. Employers have their own privacy obligations.

4.2 Hosting and Storage

OnSyte uses hosting and storage providers to run the service and store your data, including work records and uploaded photos. This supports the operation of the app; your work data is not sold or shared for marketing or advertising purposes.

4.3 Legal Requirements

We may disclose your information if required by law, court order, or government regulation, or if we believe disclosure is necessary to protect our rights, your safety, or the safety of others.

7.1 General Rights

• Access: Request a copy of the personal information we hold about you
• Correction: Request correction of inaccurate or incomplete information
• Deletion: Request deletion of your personal information, subject to legal retention requirements
• Portability: Request your data in a portable format
• Withdraw Consent: Withdraw your consent at any time (note: this may affect your ability to use the App)

7.2 European Economic Area (EEA) Residents - GDPR Rights

If you are located in the EEA, you have additional rights under the General Data Protection Regulation (GDPR):

• Right to restrict processing of your personal data
• Right to object to processing based on legitimate interests
• Right to lodge a complaint with your local data protection authority

Our legal basis for processing your data under GDPR includes: performance of your employment contract, compliance with legal obligations, and legitimate interests of your employer in workforce management.

7.3 California Residents - CCPA Rights

If you are a California resident, you have rights under the California Consumer Privacy Act (CCPA):

• Right to know what personal information is collected, used, and shared
• Right to delete personal information
• Right to opt-out of sale of personal information (we do not sell your data)
• Right to non-discrimination for exercising your rights

7.4 Exercising Your Rights

To exercise any of these rights, please contact us using the information provided in Section 11 below, or contact your employer directly. We will respond to your request within the timeframe required by applicable law.