Last updated: 4 November 2026
This policy explains what the Workotime mobile application (com.workotime.workotime)
collects, why, and what rights you have over that data.
Workotime is workplace software. It is provided to you by your employer, who decides what is enabled and who can see your records. Under data-protection law your employer is the data controller; Workotime Technologies operates the app and its servers as the data processor on their instructions.
Publisher: Workotime Technologies, 37 Export House, Block C, Ekta Nagar, Bareilly, Uttar Pradesh 243122, India Contact: contact@workotime.com
Your name, employee ID, work email, mobile number, department, designation, shift and joining date. This comes from your employer's records, not from you.
Punch in/out times, breaks, late arrivals and the reasons you give for them, leave applications and approvals, on-duty and forgot-punch requests, and payslip data.
Background tracking only runs while a session is active, and Android shows a permanent notification the whole time it is running. If you do not see that notification, your location is not being recorded in the background. Starting and stopping a session is a deliberate action.
We also store the client locations you check in and out of, and the distance between you and them.
If your employer uses face attendance:
Face templates are stored on your employer's Workotime server and cached on the device for offline matching. This is biometric data and is treated as sensitive.
Device model and Android version, a push-notification (FCM) token, app version, and error logs. Release builds of the app do not write diagnostic logs to the device.
Proof photos for forgot-punch, on-duty and leave requests, and your profile photo.
| Purpose | Data used |
|---|---|
| Record attendance and calculate pay | Identity, attendance, punches |
| Confirm you were at an authorised location | Location |
| Verify it is really you punching in | Face template, liveness, photos |
| Show your employer field visits and routes | Background location, client check-ins |
| Manage leave, approvals and payslips | Identity, leave, payroll |
| Send you notifications | FCM token |
| Keep the service secure and working | Device data, error logs |
We do not use your data for advertising, and we do not sell it or share it with data brokers.
Each employer's data is kept logically separated from every other employer's.
No system is perfectly secure, but we take these measures seriously and review them.
Because your employer controls retention, ask them first. We will act on their instruction and can advise on it.
You may ask to:
Start with your employer — they control your record. If they cannot help, or you want to raise something with us directly, write to contact@workotime.com and we will respond within 30 days.
You can also revoke Android permissions at any time in Settings → Apps → Workotime → Permissions. Revoking location or camera access will stop the corresponding features from working, and you should tell your employer if you do, since it may affect how your attendance is recorded.
Face recognition is optional and requires your explicit consent before enrolment.
Workotime is for employed adults. We do not knowingly collect data from anyone under 18.
Data is stored on servers in India. Where it is accessed from elsewhere, we require equivalent protection.
For the data an employer puts into Workotime, the employer decides how it is used. Workotime Technologies acts as their processor and handles it on their instructions, only to provide the service. We do not sell it or use it for advertising. We keep it confidential and use appropriate security measures, including encrypted connections and separation of each employer's data from every other employer's. We use trusted service providers (such as hosting, notifications and messaging) only as needed to run the service, and they are bound to keep the data confidential.
Legal requests. We disclose customer data to authorities only when the law requires it. Where the law allows, we tell the customer before we disclose, so they can respond, and we push back on any request that is too broad or not properly made.
Security incidents. If we discover loss, theft or unauthorised access affecting a customer's data, we will notify that customer within 72 hours of discovering it, unless the law prevents us, and we will help them investigate and put it right.
When the contract ends. After a customer's contract ends, we give them 30 days to export their data. We delete it securely at 90 days. We may keep records that the law requires us to keep, such as billing and tax records.
If we change this policy materially we will update the date above and notify you in the app or through your employer. Continuing to use Workotime after a change means you accept the updated policy.
Workotime Technologies 37 Export House, Block C, Ekta Nagar, Bareilly, Uttar Pradesh 243122, India contact@workotime.com
For a data-protection request, put "Privacy request" in the subject line.
Complaints about how your personal data is handled can be sent to our Grievance Officer: Shivesh Jaiswal, Workotime Technologies, 37 Export House, Block C, Ekta Nagar, Bareilly, Uttar Pradesh 243122, India — info@workotime.com (subject line: "Grievance"). We acknowledge complaints promptly and resolve them within one month.