Privacy Policy

Clocked In (“the app,” “we,” “us”) is designed to be private by default. This policy explains what the app does — and, more importantly, does not do — with your information.

1. Information we collect

Your work data — including shifts, jobs, pay rates, goals, earnings, notes, and saved work locations — is stored locally on your device. That content is not included in product analytics. The only free-form text sent to us is a bug report or feature request that you explicitly submit as described below.

Data you create and that stays on your device:

• Work sessions (clock-in/clock-out times, durations, breaks)
• Jobs and their pay rates
• Goals, streaks, achievements, and in-app rewards
• Work locations you choose to save (see Location below)
• App preferences and settings

This data is held in the app’s local storage and in a shared app group used by the Clocked In widgets and, if you use it, the companion Apple Watch app. It is synchronized between your iPhone and Apple Watch directly via Apple’s on-device connectivity, not through us.

Feedback you choose to submit

Settings includes forms for reporting a bug or requesting a feature. If you submit one, the message, feedback category, app version, build number, and platform are sent to and stored in our private Supabase feedback service. This happens independently of the optional analytics setting and does not enable an analytics SDK.

For abuse prevention, the service processes the connecting IP address and a random installation identifier. It stores only keyed hashes of those identifiers, never the raw IP or raw installation identifier, and does not attach the hashes to the submitted message. Recent submission times and the random identifier are also stored in the iOS Keychain on your device. Please do not include passwords, pay details, names, or other sensitive information in feedback.

Optional analytics

If you turn on Settings → Privacy & Analytics → Share Anonymous Analytics, the app uses PostHog to send events about which screens and features are used, such as completing onboarding, opening a screen, starting or stopping a timer, or interacting with the Pro upgrade screen.

Events may include product interactions and other usage data, app version, device/OS information, build channel, broad duration categories, timer origin, and free/Pro entitlement state. PostHog assigns an anonymous device identifier so events from one installation can be understood as a sequence. We do not associate it with an account, email address, or name, and PostHog person profiles are disabled.

Analytics never include pay rates, earnings or other monetary amounts, exact clock times, job names, notes, goal names or amounts, product prices, precise location, saved work-location coordinates, or free-form text. Session replay, automatic interaction capture, automatic screen capture, surveys, and push-notification capture are disabled.

AppsFlyer starts only after both the same explicit analytics consent and Apple’s App Tracking Transparency authorization. When both are allowed, AppsFlyer may receive the advertising device identifier (IDFA), a pseudonymous installation identifier, device/app data, product interactions, and network IP information that may derive coarse city or region. It uses this information to measure which external advertising campaigns lead to installs, sessions, onboarding completion, and the first completed shift. AppsFlyer partner sharing and IDFV collection are disabled.

RevenueCat receives a pseudonymous user identifier and purchase history for analytics only. It does not control products, purchases, restores, entitlements, or paywalls.

You can turn analytics off at any time to stop future SDK activity. You can separately revoke Tracking permission in Settings → Privacy & Security → Tracking. AppsFlyer remains stopped unless both permissions are enabled. Changing either choice does not retroactively delete data already transmitted.

Provider privacy policies: Supabase, PostHog, AppsFlyer, and RevenueCat.

2. Location

If you enable automatic clock-in/clock-out, Clocked In uses your device’s location to detect when you arrive at or leave a work location you have saved.

• Saved work coordinates and CoreLocation readings are used only on your device to trigger automatic clock-in and clock-out. They are never transmitted to us or an analytics provider, and we do not store a history of your movements. If you separately enable analytics, network IP data may reveal an approximate city or region; that is not the saved work location or a CoreLocation reading.
• Location features are optional. The app works fully without them, and you can grant, limit, or revoke location access at any time in Settings → Privacy & Security → Location Services → Clocked In.
• “Always” location permission, if granted, is used solely so the app can detect your arrival/departure in the background for automatic tracking. It is not used for any other purpose.

3. Purchases

Clocked In offers an optional “Pro” upgrade (monthly subscription, yearly subscription, or one-time lifetime purchase) through Apple’s In-App Purchase system.

• All payments are processed by Apple, not by us. We never see or receive your payment card details, billing address, or Apple ID.
• Apple StoreKit remains responsible for products, purchases, restores, transaction completion, and deciding whether Pro is unlocked. If optional analytics are enabled, RevenueCat observes pseudonymous purchase history for analytics only.
• Subscriptions, billing, and renewals are governed by Apple’s terms. Manage or cancel anytime in Settings → Apple ID → Subscriptions. Apple’s privacy policy applies to payment processing: https://www.apple.com/legal/privacy/

4. What we do NOT do

• We do not send your work records or financial details to analytics providers.
• We do not enable session replay, automatic interaction tracking, or crash recording in PostHog.
• We do not show advertising in the app. If you allow both analytics and Apple’s Tracking permission, AppsFlyer may use IDFA for advertising attribution; partner sharing remains disabled.
• We do not collect IDFV.
• We do not require an account, email, or sign-in.
• We do not sell or rent your information to anyone.

5. Device backups

Because your data is stored on your device, it may be included in your standard device backups (for example, iCloud Backup or an encrypted computer backup) if you have those enabled. Those backups are controlled by you and by Apple under Apple’s privacy policy — they are not created or accessed by us.

6. Data retention and deletion

You are in control of your data at all times.

• You can edit or delete individual sessions, jobs, and other entries within the app (some editing features require Pro).
• Deleting the app removes its database and preferences from your device. iOS may retain the device-only Keychain entry used for feedback abuse prevention after uninstalling the app.
• Turning off analytics stops future collection. Previously collected pseudonymous analytics are retained according to each provider’s retention and privacy processes; changing consent does not delete data already transmitted.
• For access or deletion questions about information already processed by an analytics provider, contact us below. We will handle the request using the provider’s applicable privacy process.
• Submitted feedback is stored privately in Supabase. Each accepted submission triggers removal of up to 100 feedback messages older than 365 days. Turning off analytics does not affect feedback you already chose to submit.

7. Children’s privacy

Clocked In is not directed to children under 13 and is intended for a general audience of working-age users. We do not knowingly collect personal information from children.

8. Changes to this policy

If the app’s data practices change in a future update — for example, if optional iCloud sync or data export is added — we will update this policy and revise the “Last updated” date above before that functionality is released. Continued use of the app after an update constitutes acceptance of the revised policy.

9. Contact

If you have questions about this privacy policy or the app’s data practices, contact us at:

ideasforgrowth@ideasforgrowth.dev
Developer: ISAAC FAJARDO