Tapp privacy policy
Tapp is a clock-in and clock-out app that companies use to record their employees' working hours. This policy explains what data Tapp collects, why, who can see it, how long it is kept and how you can have it deleted.
Who is responsible for your data
Tapp is provided to companies (your employer). Your employer decides who is invited to Tapp and uses the records to run payroll. We operate the Tapp service and store the data on your employer's behalf. Questions about your employment records can go to your employer; questions about Tapp itself can go to us at [email protected].
What we collect
- Account details: your name and email address, and your company's name. Company admins provide these when they sign up on tappclock.com; employees join through an email invitation from their admin. Your password is stored by our authentication provider in hashed form and is never visible to us or your employer.
- Precise location: your device's GPS position, captured only at the moment you clock in or clock out, to confirm you are at your worksite. Tapp does not track your location at any other time or in the background.
- Work records: clock-in and clock-out times, break times, the worksite address, any note you add to a clock-in, and any edits your admin makes to your records (with their reason).
- Device information: a push notification token and your device model, so Tapp can send clock-out and break reminders. You can turn reminders off in Settings or in your phone's notification settings.
- App update information: when the app checks for updates, our update provider receives your device's operating system and an anonymous update identifier.
Tapp does not use advertising, does not track you across other apps or websites, and does not sell your data.
How we use it
- To sign you in and keep your account secure.
- To record your working time and check that clock-ins happen at the worksite.
- To show your hours to you and to your company's admins, and to let admins export timesheets for payroll.
- To send reminders, invitations, password resets and support emails.
Who can see it
- You: your own clock-ins, breaks and hours.
- Your company's admins: your name, email, work records and the locations recorded when you clocked in and out. Admins can export timesheets as CSV files.
- Other companies: never. Each company's data is kept separate.
Service providers
We use the following providers to run Tapp. They process data only to provide their service to us:
- Supabase — database, sign-in and file storage.
- Expo — push notification delivery and app updates.
- Apple and Google — delivering push notifications to your device, and converting the worksite address you enter into map coordinates (this uses your phone's built-in location service).
- Resend — sending invitation, password reset and support emails.
- Cloudflare — hosting tappclock.com and forwarding email sent to our support address.
The tappclock.com website loads fonts from Google and page styling from a public content network, which receive your browser's IP address as part of serving those files. The website does not use analytics or advertising cookies.
These providers may process data outside your country. We only use providers that protect data to a standard consistent with this policy.
How long we keep it
- Your account details are kept while your account is active.
- Work records are kept while your company uses Tapp, because employers are generally required to keep payroll records.
- When you delete your account, see what is deleted and what is kept.
- When a company closes its Tapp account, all of its data — every employee account and all work records — is deleted.
- Timesheet CSV files an admin has already exported are kept as part of your employer's payroll records and include the email address you had at the time of export.
Deleting your account
Employees can delete their account in the app under Settings → Delete account. Company admins can request that their whole company be closed under Settings → Close company account. Full details, including how to request deletion without the app, are on our account deletion page.
When you delete your account we remove your login, email address, phone number, push notification tokens and the GPS locations recorded at your clock-ins and clock-outs. Your name and your clock-in, clock-out and break times stay with your employer as payroll records.
Your choices and rights
- Location: Tapp asks for location permission only while you are using the app. Without it you can still see your history and settings, but you can't clock in, because clock-ins must be checked against the worksite.
- Notifications: optional; turn them off at any time.
- Access and correction: you can see your own records in the app. Ask your admin to correct a time entry, or email us to request a copy of your data or a correction.
Security
Data is sent over encrypted connections. Access is restricted so that each user sees only their own company's data, and only admins can see other employees' records. Passwords are stored hashed.
Children
Tapp is a workplace tool and is not intended for children.
Changes to this policy
If we change this policy we will update this page and the effective date above. For significant changes we will let company admins know by email.
Contact
Email [email protected] with any privacy question or request.