Last updated:
This Privacy Policy explains how Clockly ("Clockly", "we", "us", or "our"), an attendance and time-tracking application operated by Nakamura Tech Solutions, collects, uses, shares, and protects information when you use our mobile apps and related services (the "Service"). By using Clockly, you agree to the practices described here.
Clockly is typically used through an employer or organization ("Company") that administers a Clockly workspace. In most cases your Company is the controller of your personal data and determines which features (such as location capture or selfie verification) are enabled. Nakamura Tech Solutions acts as a processor, handling data on the Company's behalf to deliver the Service. If you have questions about how your employer uses Clockly, please contact your employer directly.
When an account is created, we collect your name, email address, and the role and Company you are associated with. You may optionally add a profile photo (avatar).
We record the date and time of your clock-in and clock-out events, time correction requests and approvals, and related timesheet data. This is the core purpose of the Service.
Where your Company enables location check-in, we collect your device's precise GPS location at the moment you clock in or out. Clockly does not track your location continuously or in the background — location is captured only during a clock event. You will be asked to grant location permission, and you can decline or revoke it in your device settings (though this may prevent location-based clock-ins where your Company requires them).
Where your Company enables selfie verification, we capture a photo using your device's front camera at clock-in to confirm attendance. Camera access is used only to take this photo and, if you choose, to set a profile avatar. You will be asked to grant camera permission.
If you choose to set a profile avatar, we access the photo you select from your device. We only access the specific image you pick.
Subscriptions and in-app purchases are processed through RevenueCat and the Apple App Store or Google Play. We receive subscription status and transaction identifiers needed to manage your plan. We do not receive or store your full payment card details — those are handled by Apple or Google.
To keep the app reliable we collect crash reports and diagnostic data through Firebase Crashlytics (such as device model, operating system version, app version, and the technical state at the time of a crash). We also use a device push token through Firebase Cloud Messaging to deliver notifications.
Authentication tokens are stored securely on your device using the platform's secure storage (Keychain on iOS, Keystore on Android). Non-sensitive preferences such as your theme choice are stored locally as well.
We do not sell your personal data, and we do not use it for third-party advertising or profiling.
We share data only as needed to run the Service:
We retain personal data for as long as your account is active and as needed to provide the Service, and thereafter as required for legal, accounting, or legitimate business purposes. Attendance records are typically retained according to your Company's policies and applicable employment and record-keeping laws. When data is no longer needed, we delete or anonymize it.
We protect data in transit and at rest using industry-standard encryption, enforce row-level security so each Company can access only its own data, and store sensitive credentials in your device's secure storage. No system is perfectly secure, but we work to protect your information against unauthorized access, alteration, and disclosure.
Depending on where you live, you may have the right to access, correct, export, or delete your personal data, and to object to or restrict certain processing. Because your employer often controls your data, please direct such requests to your Company first; we will support them in fulfilling valid requests. You can also contact us at the address below. You may manage location, camera, photo, and notification permissions at any time in your device settings.
If you are in the Philippines, we handle personal data in accordance with the Data Privacy Act of 2012 (Republic Act No. 10173) and its implementing rules. You have the rights afforded under that Act, including the rights to be informed, to access, to rectify, to erase or block, to data portability, to object to processing, and to lodge a complaint with the National Privacy Commission (NPC). You may contact us using the details below to exercise these rights, or reach the NPC at privacy.gov.ph.
Clockly is intended for use by employees and is not directed to children. We do not knowingly collect personal data from anyone under the age of 16. If you believe a child has provided us data, please contact us so we can remove it.
Our service providers may process and store data in countries other than your own. Where we transfer personal data internationally, we take steps to ensure it receives an adequate level of protection consistent with applicable law.
We may update this Privacy Policy from time to time. When we make material changes, we will update the "Last updated" date above and, where appropriate, notify you through the app. Your continued use of the Service after changes take effect constitutes acceptance of the updated policy.
If you have questions about this Privacy Policy or our data practices, contact Nakamura Tech Solutions at support@nakamuratechsolutions.com.