Privacy Policy
Effective September 12, 2026, updated October 26, 2026 for On my way links, time off requests, review requests, the daily job log and cost codes. Waypunch is operated by Chrono Travel LLC ("Waypunch", "we", "us"). This policy explains what we collect, why, and how to get it deleted. Questions: privacy@waypunch.com.
The short version. Waypunch records a worker's location only between a clock-in and a clock-out, and the app says so on screen. Off the clock, nothing is recorded. We never sell your data and we show no ads. Anyone can delete their account from inside the app.
Who we are, and who your employer is
Waypunch is a time-clock service that businesses use with their workers. When you use Waypunch as a worker, your employer (the business that invited you) decides why your hours and locations are recorded and is responsible for telling you about it and for following the employment and privacy laws that apply to it. We process that data on your employer's behalf and under its instructions. Your employer's administrators and managers can see your hours and your locations while you were clocked in.
When you create a business on Waypunch, you are that employer, and this policy also describes what we hold about you as our customer.
What we collect
| Information | When | Why |
|---|---|---|
| Name, email address, password (stored only as a one-way hash) | When an account is created | Sign-in, and showing your name to your employer |
| Name and employee number of a crew member who doesn't use the app | When the business adds them | So their crew lead can clock them in and out, and their hours are theirs |
| Business name | When a business is started | Identifying the business |
| Clock-in and clock-out times | Each time you clock in or out | Your hours: the whole point of a time clock |
| Location (GPS coordinates and accuracy) | Only while you are clocked in: at clock-in, periodically during the shift, and at clock-out | Showing your employer where work happened and who is on the job, and working out the arrivals and mileage below |
| Arrivals at and departures from job sites, time on site, and miles driven between them | Worked out from your locations while you are clocked in. For a crew clocked in by its lead, from the lead's phone | Proof of service for your employer, time spent per job, and mileage reimbursement |
| Who clocked a crew member in or out, the lead's position at the time, and an optional photo of the crew | When a crew lead clocks their crew in or out from their phone | Showing who was there for each person's shift |
| Customer names, addresses, phone numbers and notes the business enters | When the business adds its customers | Planning routes and recognising when work is on site |
| Before and after photos of a job, with the time and your location when each was taken | Only when you choose to add a photo to a stop | Proof of service for your employer and their customer |
| A customer's signature and printed name | When a customer signs on your phone at a visit | Confirming the work was done |
| People a business is selling to (leads): name, contact details, address and notes | When someone at the business adds a lead in Sales | Following up with them and, if they buy, making them a customer |
| Contracts, and for the person who signs one: their name, email, signature, when they signed, whether in person or from a link, and the internet address and browser they signed from | When a business writes up a contract and it is signed | A record the business and its customer can rely on of who agreed to what, and when. Both get a copy. |
| Checklist ticks: which items were ticked, by whom, and when | When you tick an item at a stop | Showing what was done at each visit |
| Time off you ask for: the days, part of a day if so, the kind (vacation, sick, personal or unpaid), your note, and who approved or declined it, with their note | When you ask for time off in the app | So your manager can answer, and approved days show on the schedule |
| Which task you were working on (cost codes), from when, and hours you type in by task with an optional note | Only if your employer turns on cost codes: when you pick or switch a task, or fill in your day | Showing your employer how the hours were spent, for pricing and job costing. It doesn't change your pay or hours. |
| A daily job log for a job site: what got done and any problems, as you or the office write them, and the weather there that day | Only if your employer turns on the daily job log, when someone writes it | A day's report the office can send to its client |
| Time corrections and the reason for them | When a manager corrects a shift | An audit trail of changes to payroll records |
| Device and session details: app version, platform, a sign-in token per device | While signed in | Keeping you signed in on your phone, and signing devices out |
| Security events: sign-in attempts, the IP address they came from, and their outcome | When you sign in or an attempt fails | Detecting attacks on accounts. Kept 90 days. |
| Billing details | When a business subscribes | Charging for the service. Card numbers go straight to Stripe; we never see or store them. |
We do not collect contacts, microphone audio, advertising identifiers or your location while you are clocked out. The app only opens the camera when you tap to add a photo to a stop, and it never reads the other photos on your phone. Photos are made smaller on your phone before they are sent, and the server keeps a fresh copy with none of the original file's hidden details.
How we use it
- To run the service: recording hours and locations for your employer, showing them on maps and reports, noting arrivals at job sites and miles driven, keeping the photos, signatures and checklists from each visit, and keeping you signed in.
- To send email: password reset links, invites, the daily summary for business owners and managers, time off requests to the managers who answer them and the answer back to you, and proof-of-service records, daily job logs and review requests a business sends to its customers.
- To keep accounts safe: rate-limiting sign-in attempts and spotting suspicious activity.
- To bill businesses and send them receipts, through Stripe.
- To answer support requests.
We do not sell personal information, we do not use it for advertising, and we do not share it with data brokers.
Who we share it with
- Your employer and the administrators and managers it appoints, as described above.
- Your employer's customers, when your employer sends them a proof-of-service record for a visit. It shows your name, when you arrived and left, the checklist, the photos from that visit and the customer's signature. If your employer turns it on, the customer is also emailed automatically a couple of minutes after a visit you shared your way to (On my way) is marked done, with the After photos from that visit and the same record attached. Your employer can choose to show only the business's name instead of yours.
- Your employer's customers, in a daily job log, if your employer sends one. It shows the job site, what got done and any problems, the weather, the visits that day and any notes the crew left, the photos from those visits, and who was on site with their arrival and leaving times and hours there. Your employer can choose to show only how many people were there instead of names.
- Your employer's customers, in a review request, if your employer turns them on. A couple of hours after a visit is marked done, the customer is emailed once asking them to review the business, with a link to the business's review page (usually Google). It names the visit and, unless your employer chooses otherwise, the first name of who came. A customer is asked at most once every 90 days, and never again if they use the link in the email to say no, or if the business marks them "don't ask".
- A customer you're heading to, if you tap On my way. If your employer turns on On my way links, you can tap On my way on one of today's visits while you're clocked in. Only you can start it, never your employer. The customer is emailed a private link to a web page showing your first name and last initial (or "Your technician", if your employer chooses), your approximate position on a map (to about 11 meters), and a rough arrival time. Your position appears only once you're about 400 meters from where you tapped, so where you started (your home, or the previous customer) never shows. When you arrive, the page stops showing your position and just says you've arrived. The link stops working for good when the visit is marked done or skipped, when you clock out, leave the site or head to another visit, or after 4 hours, and you can stop sharing at any time. Your phone shows a banner the whole time you're being shared. The customer's page never shows your trail, where you've been, or anything after the visit.
- Your employer's clients, if your employer shares a job site with them. An employer can give a client a link showing who from the crew is at that client's site: your first name and last initial (or just a headcount, if your employer chooses), when you arrived, and the hours spent there. It shows only that one site, only from the day the link was made, and never where you are before or after, or any map or coordinates. "On site now" appears only while your phone is reporting from the site. If you're in a crew clocked in by its lead, you appear with the lead's crew. Your schedule tells you when a client can see a site, and your employer can stop the link at any time.
- Hostinger, whose mail servers deliver the emails we send.
- Apps your employer connects, such as Gridzu for payroll, using a key your employer makes and can revoke. They receive your shifts (times, where you clocked in and out, the customers visited and miles driven) and your name, email and employee number. Your full location trail stays in Waypunch. The app can also send us your name, work email and employee number, so your employer doesn't type them twice, and, if your employer turns it on, an hourly labour cost for job costing that only administrators see. It never sends your tax, bank or withholding details. The app can also send the days off it approved for you, so the schedule shows when you're off, and jobs to plan onto your day. When a job is finished, the connected app receives its status, who worked it, the checklist count, any notes the crew left for the office, the day's job log for that site if your employer uses it (what got done, problems and the weather), and the proof-of-service PDF (with its photos and signature) so your employer can invoice the customer.
- Stripe, which processes payments for businesses that subscribe, and card payments a business's customers make to that business through a payment link or on a staff member's phone. That money goes to the business's own Stripe account; Waypunch never sees the card details. Stripe's privacy policy applies to the card details you give it.
- Google, whose Maps service draws the map in our apps. Map tiles are requested from Google, which may receive your device's IP address as part of that request. The addresses a business enters for its customers are sent to Google's Geocoding service to find where they are; your own location is not. The map on an On my way page is drawn by Google Maps in the customer's browser, so Google receives the area being shown and the customer's IP address. Arrival times are worked out on our own servers; your location is not sent to Google to do it.
- The US National Weather Service (api.weather.gov), for the weather in a daily job log. Only the job site's map position, rounded to about 10 meters, is sent; never a name, an address or anyone's location.
- Google Cloud, which hosts our servers in the United States.
- Authorities, when the law requires it and the request is valid.
Where it lives and how long we keep it
Our servers are in the United States. Data is encrypted in transit. Hours, arrivals at job sites and mileage totals are kept for as long as the business's account exists, because employers are required to keep payroll time records. Photos, signatures and checklists are kept with each visit for as long as the business's account exists, unless the business removes them. Location history (the positions recorded during shifts) is deleted after 400 days unless the business chooses a different period, from 30 days to 10 years. On my way: your position on a trip is cleared as soon as the trip ends; the email address a link was sent to is deleted after 90 days; the record that a trip happened (times, which visit) is deleted after 400 days. Security events are deleted after 90 days. Backups are kept for 14 days. When a business is closed, all of its data is deleted from our live systems immediately and from backups within 14 days.
Deleting your account
Anyone can delete their own account from the app (Account, then Delete account) or from the web under Settings. Deleting removes your sign-in, email address, devices, permissions and all of your location history right away. Your name and the times you clocked in and out stay with your employer as payroll records, with no locations attached. If you were the only administrator of a business, you can instead close the business, which deletes everything.
You can also email privacy@waypunch.com from the address on your account and we will do it for you.
Your rights
Depending on where you live, you may have the right to see, correct, export or delete the personal information we hold about you, or to object to how it is used. You can see and export your own hours in the app. For anything else, email us. Because your employer decides how your work data is used, we may refer requests about that data to your employer.
Children
Waypunch is for workplaces and is not directed at children under 16. We do not knowingly collect information from them.
Changes
If we change this policy in a meaningful way, we will show the change in the app or email the administrators of each business before it takes effect.
Contact
Chrono Travel LLC, Oregon, USA. Privacy questions: privacy@waypunch.com. General support: support@waypunch.com.