Privacy Policy
Last updated August 17, 2026
The short version
Clocked keeps your timesheet in an account, so it asks you to create one during setup. Your timesheet is stored in a private area of our database that only you can read, and cached on your phone so the app keeps working without a connection. The one exception is the Break Room, which is a shared space: what you post there is published to everyone using Clocked, under your hourly rate rather than your name. There is no analytics, no advertising, no tracking, and no third-party SDK that watches what you do.
What is collected and sent
Clocked saves these to your own private area of our database, so that a new or second device can read them back: your name, email address, job title and employer if you entered them, your profile photo, your jobs and their pay rates, your work sessions, time entries, breaks and clock events, your saved work locations including their coordinates and radius, your time-off requests, and whether your Clocked Pro subscription is active. They are used for one purpose, which is showing you your own timesheet on your own devices. Nothing in that list is shared with anyone else, there is no employer view, and no other person can read your area. What you post in the Break Room is separate and is described below.
What is kept on your phone
The same records are cached on the device by Firestore's own offline store, which is what lets you clock in with no signal and have it arrive later. The cache is not a separate collection of data about you: it is a copy of what is already in your account. Your app settings and preferences are the exception and stay on the phone only.
Who else is involved
Accounts and sync run on Google Firebase (Firebase Authentication and Cloud Firestore), acting as our data processor under Google's Cloud Data Processing Addendum, which commits Google to protections equal to those described here. Google stores this data and does not use it for advertising or for its own purposes. Purchases run through Apple's App Store; Apple tells us only whether a subscription is active. Those are the only two third parties, and there are no others.
Location
Location is used for two things and no others: naming the workplace on a shift you are starting, and detecting that you have arrived at or left a workplace you saved and switched on yourself. Detection uses geofencing, which means iOS tells the app about a boundary crossing rather than the app watching where you are. Clocked never records a location history, never sends your position anywhere, and asks for location only when you first turn one of those features on. Automatic clock in and out can be switched off per workplace, and the app works fully without ever granting location.
Notifications
Notifications are composed on your device: clock events, break reminders, and the confirmation prompt for automatic clock in. There are no push notifications, so nothing about you is sent to a notification server.
The Break Room
The Break Room is a shared, public space inside the app, and it is the only part of Clocked that other people can see. Anything you post or reply there is readable by everyone using Clocked, and should be treated as published. Each post carries your hourly rate, how many stars you have, how many hours you worked that week, whether your clock is running, and an internal account identifier the app uses to check who owns a post and to make blocking work. It does not carry your name, your email address, your employer, your job titles, your shifts, your locations or anything else from your timesheet. Do not post anything you would not want a stranger to read, and do not post anyone's personal information, including your own.
Reports, blocking and moderation
Posts and replies can be reported from the ··· on them. A report records what was reported, who reported it, the reason chosen and any note added, and it is readable only by us. Reported items are hidden from you immediately, and anything reported by enough people is hidden from everybody automatically pending review. You can also block an account, which hides everything it posts from you on every device you sign into; your block list is stored privately in your own area and is never shown to the person blocked. We remove content and terminate accounts that break the rules shown when you join the room. Reports are read within 24 hours: clocked@dheerajkoppu.com.
Children
Clocked is not directed at children under 13 and we do not knowingly collect their information.
Keeping and deleting your data
Your data is kept for as long as your account exists. Profile → Account & Sync → Delete Account permanently deletes your account and everything saved under it, and, for accounts made with Apple or Google, revokes Clocked's access to that sign-in at the same time. Break Room posts are the one exception, and are handled differently on purpose: because other people replied to them, they are not deleted but are unlinked from you, so the words and the rate stay and nothing connects them to your account any more. If you want your posts removed as well, delete them from the room before deleting your account, or ask us and we will. Reports you filed are kept without your account identifier. Deleting an individual entry, job or workplace removes it from your account and from every device signed into it. Signing out stops this device saving anything further and withdraws consent immediately, and Clocked will ask you to sign back in; it does not delete anything. Deleting the app removes the copy cached on that phone, and removes what is in your account too only if you deleted the account first.
Changes and contact
Material changes to this policy will be described in the release notes of the update that carries them. Questions, or a request about your data: clocked@dheerajkoppu.com.