App privacy policy

In short

• The app is used to clock in and out at a work site, check your leave, submit a field report and trigger a lone-worker alert.
• It sends data only to your employer's server (app.chronotrack.fr). Nothing is sent to any third party.
• It contains no advertising, no tracker and no analytics tool.
• Your location is read only while you are using the app, when you clock in or out or raise an alert — never in the background, never continuously.
• Your employer is the controller of this data: access and deletion requests go to them.

Who does what

The app is published by Alban Espeut, sole trader — SIRET 813 638 277 00018, Claira, France — publisher of the ChronoTrack service.

Under the GDPR (Regulation (EU) 2016/679):

• your employer, who gave you the phone and the PIN, is the controller: they decide which sites are tracked, how long data is kept and how it is used;
• the publisher acts as a processor under Article 28: it hosts and maintains the service on the employer's behalf, and does not use this data for its own purposes.

Data processed by the app

Data	When	Why
Precise GPS location (latitude, longitude, accuracy in metres)	On the confirmation screen of a clock-in or clock-out, and when a lone-worker alert is raised	Evidence that the clocking took place at the expected site (perimeter set by the employer), and locating an employee in difficulty
Photos taken with the camera	Only if you attach a photo to a field report	Documenting an incident or issue observed on site
PIN and identity (first name, last name, company)	When you enter your PIN, then if you agree to store it on this phone	Identifying you without an account or a password
Site identifier read from the QR code	On each scan	Knowing which site the clocking belongs to
Timestamp and source of the clocking	On each clocking	Calculating hours worked; the source ("app") distinguishes a clocking made from the app from one made in a browser
Reason for a missing location (permission denied, location turned off, no signal)	When a clocking is recorded without a position	Explaining to the employer why the position is missing, instead of leaving an unexplained clocking

The app does not read your contacts, calendar, messages, files or the list of installed apps. It uses no advertising identifier and does not track your activity outside its own screens.

Android permissions requested

• Location (precise and approximate), foreground only — read while you are using the app. The app does not request background location and does not hold that permission.
• Camera — to read site QR codes and, if you wish, attach photos to a field report.
• Network access — to send clockings to your employer's server.

You may refuse location access: clocking still works, but it is recorded without a position, together with the reason. You can revoke these permissions at any time in the Android settings.

What is kept on the phone

• Stored profile (company, PIN, first and last name): only if you accept the "remember this employee" prompt. It is stored encrypted in the Android Keystore, and deleted as soon as you use "change employee" or uninstall the app.
• Offline queue: if there is no network when you clock, the clocking is kept encrypted on the phone (actual time and position), sent when the network returns, and then erased from the phone.
• Photos: they are not saved to the gallery; they are sent with the report and then forgotten by the app.

Recipients and transfers

Data is sent over HTTPS to your employer's ChronoTrack server only, hosted in France. There it can be seen by the authorised people in your company (administrator, managers, office staff), according to the rights your employer defines.

A lone-worker alert triggers an email, and a text message on the plans that include it, to the contacts designated by your employer; text messages are sent through the provider ClickSend.

No data is sold, rented or used for advertising. The app makes no transfer outside the European Union.

QR code reading relies on Google's barcode scanning module (ML Kit): the image is analysed on the phone, and no image is sent to Google by the app.

Retention

Retention periods are set by your employer as the controller. As a guide, clocking data is kept for as long as needed to monitor working time and meet the related legal obligations, then deleted or archived. Data held on the phone disappears as soon as it is sent (offline queue) or when the app is uninstalled (stored profile).

Your rights

You have the rights of access, rectification, erasure, restriction and objection provided by the GDPR, as well as the right to lodge a complaint with a supervisory authority (in France, the CNIL).

These requests must be addressed to your employer, who decides on this processing. If you do not know who to contact, or if your request goes unanswered, write to contact@chronotrack.fr: the publisher will pass the request on to the relevant controller.

Deleting data

• On the phone: "change employee" erases the stored profile; uninstalling the app removes all local data.
• On the server: deleting an employee account and its history is your employer's responsibility. When a customer company ends its subscription, its data is deleted under the conditions set out in the Terms of Service.

The app does not allow you to create an account, so there is no personal account to delete on the app side.

Security

Traffic is encrypted (HTTPS/TLS). Access to the server is protected by a PIN for employees and by credentials for managers, with a limit on the number of attempts. Data kept on the phone is stored in the app's own encrypted area. The app talks to a single domain: a test app cannot write into production data, and vice versa.

Children

The app is intended for professional use within an employment relationship. It is not aimed at children and does not knowingly collect data about them.

Changes

This policy may change along with the app. The date of the last update appears at the top of this page; significant changes are announced to customer companies.

Contact

Alban Espeut, sole trader — publisher of ChronoTrack — Claira, France — SIRET 813 638 277 00018
contact@chronotrack.fr

See also: Terms of Service.