Privacy and security

Who handles your data

Adandaa Corp. is the service provider. These apps are used inside a company: your employer decides who can see your work information and how long it is kept. Adandaa Corp. processes that data on their instructions.

What we collect, and nothing more

Who you are

Name, email address or phone number, and the identifier your company gives you. Email is used to sign in; we send no marketing.

Your time entries

Clock-in, clock-out, break start and break end, and the job they belong to.

Location, at four specific moments

When you clock in or out, when a break starts or ends, and when you capture evidence. At no other time. There is no continuous or background tracking, and the app cannot read your location with the screen off: it never asks the system for that permission.

The evidence you capture

Photos, short videos and voice notes you take to document the work, with the time and the location of the moment they were taken.

The device

A device identifier, so we know where each record came from and can revoke access if a phone is lost.

What we do not collect

Your location outside those clock-in and capture moments. We never know where you are off the clock.

Diagnostics, analytics or usage data. There are no third-party tools reporting what you do in the app.

Advertising identifiers. There is no advertising, and we do not combine your data with any other company’s.

Your contacts, browsing history, financial data or any health data.

What it is used for

Only to make the service work: recording your hours, documenting the work done, and letting your company review and approve the day. Location is there to show where the work happened, which is what turns a time entry into proof. It is not used to watch you or to rate your minute-by-minute performance: the worker app shows no productivity comparisons, no data about your coworkers, and sends you nothing outside your shift.

How it is protected

On your phone

Data stored on the device is encrypted with SQLCipher (AES-256). The key lives in the operating system keychain, not in the app.

In transit

All traffic with our servers is encrypted with TLS. Photos and videos are uploaded encrypted to private storage.

On the server

Each company is isolated from the others by row-level security in the database. A query without company context fails, rather than returning another company’s data.

Who can do what

Permissions are checked on the server on every operation, not in the screen. Removing a permission takes effect immediately.

Backups

Daily encrypted backups are kept off the main server, and we regularly verify that they can be restored.

Who it is shared with

We do not sell your data or hand it to anyone for commercial purposes. The only third parties involved are the providers needed to run the service:

File storage

Photos, videos and voice notes are stored in a cloud storage service, encrypted and reachable only through temporary links.

Maps

When showing a job on a map, the app downloads map imagery from OpenStreetMap. They are not told who you are.

The property owner

Your company may share a link with the end client to follow a job’s progress and the photos they choose to share. That link does not show who took each photo, where they were, or anyone’s hours, and your company can revoke it at any time.

Your rights

You can ask for access to the data we hold about you, for it to be corrected or deleted, and object to certain uses. Because this data belongs to your employment relationship, start with your company, who decides about it. If you get no answer, write to us and we will help.

Inside the app you can see all your time entries and export your history at any time, without asking anyone. And if you disagree with some hours, you can dispute them: while a dispute is open, those hours are not settled.

How long it is kept

Time records are kept as long as your company needs them to meet its labor and tax obligations, which in the United States is usually at least three years. Time entries are never modified: a correction is stored as a new record pointing at the original, with the name of whoever made it and why. That is deliberate, and it is what protects both the worker and the company when there is a disagreement.

Minors

These are work tools and are not directed at children. We do not knowingly collect data from minors.

Changes to this policy

If we change what we collect or how we use it, we will update this page and the date above before releasing the app version that does so.

How to reach us

Adandaa Corp. — privacidad@adandaa.com