Privacy policy

Petruț Duguțin (TimeCash) · NIF [NIF] · Calle Isaac Albéniz 5 A, 22530 Fraga (Huesca), España · soporte@timecash.eu

• Contact and pilot programme form: we process the data you send us (name, business, email, telephone number if provided, workforce size, interest and message) to respond to your request and, if you ask us to, manage your participation in the pilot programme. Legal basis: your consent and taking pre-contractual steps at your request (Articles 6(1)(a) and 6(1)(b) GDPR). Retention: for as long as necessary to address the request and, at most, 2 years from the last contact, unless you become a customer.
• Form submissions are handled through a form provider that forwards the request to us by email. It may process data outside the European Economic Area with the safeguards provided for in the GDPR (standard contractual clauses or the EU–US Data Privacy Framework).
• Language preference: we save your chosen language in your browser's local storage. See the cookie policy.
• We do not use the website for advertising or carry out profiling.

• Working time records (hours, breaks, notes, rate, workplaces): these are stored on your phone. They only leave the device if you enable cloud backup or link to a business.
• Account and backup (optional): if you sign in, your email address and records are copied to our servers so that you can recover them on another device. Legal basis: performance of the service you request (Article 6(1)(b)).
• Linking to a business (optional): if you enter a business's code, your working time records are shared with that business.
• Location: in automatic mode, arrival at and departure from the workplace are detected on your phone; the start and end times are saved in the record, and the business receives the times, not your position on the map. In stopwatch mode and for manual entries, only if you turn on «Attach location to record», the record includes the point where it was saved. You may disable location permission at any time; manual and stopwatch modes continue to work.
• Push notifications: if you allow them, we store a technical device identifier to deliver them.
• Advertising: the free version displays Google AdMob adverts. In the EU, your consent is requested through Google's consent form and, on iPhone, through App Tracking Transparency. You may change your choice in Settings → Privacy.
• We do not collect identity documents, bank details, contacts, photos, microphone data, call history or SMS messages. We do not sell data.

• When a business uses TimeCash Business, the business is the controller of its workforce's data and TimeCash acts as a processor (Article 28 GDPR), following its instructions. The data processing agreement is available to business customers.
• Data processed on behalf of the business: identification and contact details in the worker's profile (name, department, role, status), working time records and their correction history, requests, notifications sent and their delivery status, and platform users' access data.
• Purpose: the daily recording of working time required by Article 34.9 of the Estatuto de los Trabajadores and the management of working time.
• Retention: records are retained for 5 years (the law requires at least 4) and are then deleted, starting with the oldest. The business may download its data at any time.
• No biometric systems are used.

We do not disclose data to third parties unless legally required to do so. We use providers acting as processors: cloud infrastructure and databases, website hosting, notification delivery (Firebase Cloud Messaging and Apple Push Notification service), in-app advertising (Google AdMob), maps (Google Maps), app distribution (Apple App Store and Google Play) and the web form provider. Where any of these processes data outside the European Economic Area, GDPR safeguards apply.

All communication with our servers is encrypted (HTTPS). Cloud data are protected by row-level access control: each user sees only their own data and each business sees only its workforce's data, according to the permissions it assigns. Sensitive changes are logged.

You may exercise your rights of access, rectification, erasure, objection, restriction of processing and portability by writing to soporte@timecash.eu. From the app, you may export your records (PDF/CSV) and delete data from the device (Settings → Privacy). If your data are processed by a business through TimeCash Business, you should also contact your business, which is the controller. We respond within a maximum of one month. If you consider that we have not dealt with your request properly, you may lodge a complaint with the Agencia Española de Protección de Datos (www.aepd.es).

The application and website are not intended for persons under 16 years of age.

We will update this policy when necessary. The date of the last update appears above.