Privacy Policy

Atteny ("we", "us") provides workforce management software to businesses. This policy explains what personal data we process when you use the Atteny mobile app and web dashboard, and the choices you have. Atteny is made available to you by your employer, who decides what information to collect about you; for most data we act as a processor on your employer's behalf.

Information we collect

Account and identity: your name, email address and, optionally, your phone number, used to create and secure your account through our authentication provider.

Profile details: information you or your employer add, such as preferred name, date of birth, home address, emergency contact and, where your employer requires it, identification or work-permit documents and bank or payment details. Sensitive fields such as bank details are encrypted.

Work data: your shifts, schedules, time entries, availability, leave and related records.

Location: when you clock in or out, we use your device's location at that moment to confirm you are at the work site. We only access location while you are actively using the app. We never track your location in the background.

Photos: if you choose to set a profile picture, we access only the photo you select from your library.

Device and usage: a push-notification token so we can send shift and approval alerts, plus basic technical information needed to run the service. If your employer turns on device binding, we also record a one-way cryptographic fingerprint of the phone you use, so we can tell whether a later clock-in comes from the same phone. We do not store your device's identifier itself, and the fingerprint cannot be reversed back into it or matched against any other company using Atteny. Your employer's administrators can see the name of the device and when it was registered, and can release it.

How we use your data

We use your data to authenticate you, show your schedule and timesheets, process clock-ins, send operational notifications and provide the features your employer has enabled. We do not sell your personal data, and we do not use it for cross-app advertising or tracking.

Legal bases

Where the GDPR applies, we process your data to perform the contract with your employer, to meet legal obligations such as employment and payroll record-keeping, and on the basis of our legitimate interest in operating and securing the service.

Sharing

We share data only with the providers that help us run Atteny, under agreements requiring them to protect it: our authentication provider (Clerk), our hosting and database provider (Convex), our email delivery provider (Resend), our error-monitoring provider (Sentry, hosted in the EU) and the Apple and Google push-notification services. We also share data with your employer, who controls your account. We may disclose data where required by law.

Cookies

The Atteny web dashboard sets only the cookies it needs to keep you signed in securely, placed by our authentication provider (Clerk). They are strictly necessary for the service to work, so they are not something you can switch off while using the dashboard. Signing out removes them. We set no advertising cookies, and we use no analytics or tracking cookies on our website or in the app.

Data retention

We keep your data while your account is active and for as long as your employer must retain it by law (for example, payroll and tax records). When you delete your account, your personal data is erased within 30 days, except records that must be retained by law, which are kept in anonymized form.

Your rights

Depending on where you live, you may have the right to access, correct, export, restrict or delete your personal data. You can delete your account at any time from inside the app (Settings → Delete account); this revokes your access immediately and erases your personal data within 30 days. To request a copy of your data, or for any other request, email support@atteny.com and we will respond within 30 days. Because your employer decides what is collected about you, some requests are theirs to answer and we will tell you when that is the case.

Security

We use commercially reasonable technical and organizational measures to protect your data, including encryption of sensitive fields and access controls scoped to your organization. However, no method of transmission or storage is ever completely secure. While we make every effort to safeguard your information, in the unlikely event of data loss, corruption or a security breach we cannot be held financially liable for any resulting damages, to the maximum extent permitted by law. See our Terms of Service for the full limitation of liability.

International transfers

Your data may be processed in countries other than your own. Where required, we rely on appropriate safeguards for those transfers.

Children

Atteny is intended for use by employees and is not directed at children under 16.

Changes

We may update this policy from time to time and will revise the date above when we do.

Contact

Questions about this policy or your data? Email support@atteny.com.