Privacy Policy
Effective September 12, 2026, updated for connecting Gridzu. Waypunch is operated by Chrono Travel LLC ("Waypunch", "we", "us"). This policy explains what we collect, why, and how to get it deleted. Questions: privacy@waypunch.com.
The short version. Waypunch records a worker's location only between a clock-in and a clock-out, and the app says so on screen. Off the clock, nothing is recorded. We never sell your data and we show no ads. Anyone can delete their account from inside the app.
Who we are, and who your employer is
Waypunch is a time-clock service that businesses use with their workers. When you use Waypunch as a worker, your employer (the business that invited you) decides why your hours and locations are recorded and is responsible for telling you about it and for following the employment and privacy laws that apply to it. We process that data on your employer's behalf and under its instructions. Your employer's administrators and managers can see your hours and your locations while you were clocked in.
When you create a business on Waypunch, you are that employer, and this policy also describes what we hold about you as our customer.
What we collect
| Information | When | Why |
|---|---|---|
| Name, email address, password (stored only as a one-way hash) | When an account is created | Sign-in, and showing your name to your employer |
| Name and employee number of a crew member who doesn't use the app | When the business adds them | So their crew lead can clock them in and out, and their hours are theirs |
| Business name | When a business is started | Identifying the business |
| Clock-in and clock-out times | Each time you clock in or out | Your hours: the whole point of a time clock |
| Location (GPS coordinates and accuracy) | Only while you are clocked in: at clock-in, periodically during the shift, and at clock-out | Showing your employer where work happened and who is on the job, and working out the arrivals and mileage below |
| Arrivals at and departures from job sites, time on site, and miles driven between them | Worked out from your locations while you are clocked in. For a crew clocked in by its lead, from the lead's phone | Proof of service for your employer, time spent per job, and mileage reimbursement |
| Who clocked a crew member in or out, the lead's position at the time, and an optional photo of the crew | When a crew lead clocks their crew in or out from their phone | Showing who was there for each person's shift |
| Customer names, addresses, phone numbers and notes the business enters | When the business adds its customers | Planning routes and recognising when work is on site |
| Before and after photos of a job, with the time and your location when each was taken | Only when you choose to add a photo to a stop | Proof of service for your employer and their customer |
| A customer's signature and printed name | When a customer signs on your phone at a visit | Confirming the work was done |
| People a business is selling to (leads): name, contact details, address and notes | When someone at the business adds a lead in Sales | Following up with them and, if they buy, making them a customer |
| Contracts, and for the person who signs one: their name, email, signature, when they signed, whether in person or from a link, and the internet address and browser they signed from | When a business writes up a contract and it is signed | A record the business and its customer can rely on of who agreed to what, and when. Both get a copy. |
| Checklist ticks: which items were ticked, by whom, and when | When you tick an item at a stop | Showing what was done at each visit |
| Time corrections and the reason for them | When a manager corrects a shift | An audit trail of changes to payroll records |
| Device and session details: app version, platform, a sign-in token per device | While signed in | Keeping you signed in on your phone, and signing devices out |
| Security events: sign-in attempts, the IP address they came from, and their outcome | When you sign in or an attempt fails | Detecting attacks on accounts. Kept 90 days. |
| Billing details | When a business subscribes | Charging for the service. Card numbers go straight to Stripe; we never see or store them. |
We do not collect contacts, microphone audio, advertising identifiers or your location while you are clocked out. The app only opens the camera when you tap to add a photo to a stop, and it never reads the other photos on your phone. Photos are made smaller on your phone before they are sent, and the server keeps a fresh copy with none of the original file's hidden details.
How we use it
- To run the service: recording hours and locations for your employer, showing them on maps and reports, noting arrivals at job sites and miles driven, keeping the photos, signatures and checklists from each visit, and keeping you signed in.
- To send email: password reset links, invites, the daily summary for business owners and managers, and proof-of-service records a business sends to its customers.
- To keep accounts safe: rate-limiting sign-in attempts and spotting suspicious activity.
- To bill businesses and send them receipts, through Stripe.
- To answer support requests.
We do not sell personal information, we do not use it for advertising, and we do not share it with data brokers.
Who we share it with
- Your employer and the administrators and managers it appoints, as described above.
- Your employer's customers, when your employer sends them a proof-of-service record for a visit. It shows your name, when you arrived and left, the checklist, the photos from that visit and the customer's signature.
- Hostinger, whose mail servers deliver the emails we send.
- Apps your employer connects, such as Gridzu for payroll, using a key your employer makes and can revoke. They receive your shifts (times, where you clocked in and out, the customers visited and miles driven) and your name, email and employee number. Your full location trail stays in Waypunch. The app can also send us your name, work email and employee number, so your employer doesn't type them twice, and, if your employer turns it on, an hourly labour cost for job costing that only administrators see. It never sends your tax, bank or withholding details. The app can also send the days off it approved for you, so the schedule shows when you're off, and jobs to plan onto your day. When a job is finished, the connected app receives its status, who worked it, the checklist count, any notes the crew left for the office, and the proof-of-service PDF (with its photos and signature) so your employer can invoice the customer.
- Stripe, which processes payments for businesses that subscribe, and card payments a business's customers make to that business through a payment link or on a staff member's phone. That money goes to the business's own Stripe account; Waypunch never sees the card details. Stripe's privacy policy applies to the card details you give it.
- Google, whose Maps service draws the map in our apps. Map tiles are requested from Google, which may receive your device's IP address as part of that request. The addresses a business enters for its customers are sent to Google's Geocoding service to find where they are; your own location is not.
- Google Cloud, which hosts our servers in the United States.
- Authorities, when the law requires it and the request is valid.
Where it lives and how long we keep it
Our servers are in the United States. Data is encrypted in transit. Hours, arrivals at job sites and mileage totals are kept for as long as the business's account exists, because employers are required to keep payroll time records. Photos, signatures and checklists are kept with each visit for as long as the business's account exists, unless the business removes them. Location history (the positions recorded during shifts) is deleted after 400 days unless the business chooses a different period, from 30 days to 10 years. Security events are deleted after 90 days. Backups are kept for 14 days. When a business is closed, all of its data is deleted from our live systems immediately and from backups within 14 days.
Deleting your account
Anyone can delete their own account from the app (Account, then Delete account) or from the web under Settings. Deleting removes your sign-in, email address, devices, permissions and all of your location history right away. Your name and the times you clocked in and out stay with your employer as payroll records, with no locations attached. If you were the only administrator of a business, you can instead close the business, which deletes everything.
You can also email privacy@waypunch.com from the address on your account and we will do it for you.
Your rights
Depending on where you live, you may have the right to see, correct, export or delete the personal information we hold about you, or to object to how it is used. You can see and export your own hours in the app. For anything else, email us. Because your employer decides how your work data is used, we may refer requests about that data to your employer.
Children
Waypunch is for workplaces and is not directed at children under 16. We do not knowingly collect information from them.
Changes
If we change this policy in a meaningful way, we will show the change in the app or email the administrators of each business before it takes effect.
Contact
Chrono Travel LLC, Oregon, USA. Privacy questions: privacy@waypunch.com. General support: support@waypunch.com.