Privacy Policy
All Payroll Clock by Lennox Digital Labs LLC
Effective when version 1.0.0 is released · Lennox Digital
All Payroll Clock is a time clock for employees of companies that use All Payroll. This policy explains what the app collects, where it goes and how to delete it. Your employer also has its own obligations to you as the employer; ask them for their notice about workplace monitoring and record keeping.
The short version
- The app reads your location only at the moment you punch (clock in, clock out, start or end a break). It never tracks you during your shift, on breaks or after work, and it can't get location in the background.
- Your punches go to your employer, through All Payroll, so they can pay you. We don't sell your data, and we don't use it for advertising.
- You can see exactly what was sent with each punch in the app (Settings → What your employer sees).
What the app collects, and why
With each punch (sent to your employer):
- The punch type (clock in, clock out, break start, break end) and the time from your phone's clock.
- One location reading taken when you tapped the button: latitude, longitude, how accurate it was, and whether Android reported it as a simulated ("mock") location. If location is off or not allowed, the punch is saved without it and flagged for your manager.
- The job site and job code you picked, and how far you were from the job site.
- Flags that help your manager review the punch: outside the job site, low accuracy, no location, mock location, a jump too far to travel between punches, an old reading, or a phone clock that's off.
- A photo, only if your employer turns photos on. You see the camera each time. Photos are stored as pictures; they're never used for face recognition or matched against anything.
- Device details: phone model, operating system, app version, and a random id this app creates for this install. Not your phone number, hardware id or advertising id.
Change requests: when you ask to change, add or remove a punch, the request and your reason go to your employer, and their decision comes back to you.
From your employer: your name, your company's name, your pay schedule, job sites, job codes and your employer's time-clock rules. This is what the app needs to show your hours.
Only on your phone, never sent: the hourly rate you type in for the pay estimate, your theme choice, and the queue of punches waiting to be sent while you're offline.
Your Lennox Digital account: to use the time clock you sign in with a free Lennox Digital account. We store your email address and an account id (Supabase Auth). The account doesn't hold your punches; it proves it's you when your phone sends them. You can delete it in Settings → Account → Delete account.
Where it goes
- Your employer sees your punches, locations, photos (if on), flags, hours and change requests in All Payroll, to run payroll and review time records.
- Our service provider: punches are sent over HTTPS to our backend hosted on Supabase (database and server functions), which stores them for your employer. Supabase processes the data only to provide that service to us.
- Nobody else. We don't sell or rent your data, don't share it with advertisers or data brokers, and don't use it to train AI. There are no ads and no analytics or tracking SDKs in the app.
How long it's kept
Your employer is required by law to keep time records (at least 2 years under the US Fair Labor Standards Act, and longer in some states), so punches and their locations are kept for your employer for as long as they're required to keep them. Photos are kept for a shorter time unless they're attached to a disputed punch. On your phone, data stays until you delete it or remove the app.
Your choices
- Location permission: you can choose "Only this time", "While using the app" or "Don't allow" in Android's prompt, and change it any time in Android settings. Without it, punches still save, flagged "No location".
- Delete what's on your phone: Settings → Delete everything on this phone. Punches already sent stay with your employer.
- Leave your employer: Settings → Leave this employer (after all punches are sent).
- Get a copy: Settings → Export my punches (CSV).
- Ask us to delete or access server data: email support@lennoxdigitallabs.com. Where your employer must keep time records by law, we'll tell you what we can't delete and why, and point you to your employer.
- California residents: you have the right to know, correct and delete your personal information and to limit the use of sensitive personal information (precise location). We only use precise location to record punches for your employer. Contact us at the email below; we won't discriminate against you for using these rights.
Children
The app is for employees. It isn't designed for children and we don't knowingly collect data from children under 13.
Security
Data is encrypted in transit (HTTPS). On the server, each employer can only read its own employees' records, and each phone can only send punches for the employee it was invited as.
Changes
If what the app collects changes, we'll update this policy and the in-app notice, and ask you to read the notice again.
Contact
Lennox Digital · support@lennoxdigitallabs.com · https://www.lennoxdigitallabs.com/apps/all-payroll-clock/