Privacy Policy

WorkTracker helps you record the hours you work and what you earn. This policy explains what personal information we hold, why, and the rights you have under South Africa's Protection of Personal Information Act (POPIA).

Who is responsible for your information

The responsible party and Information Officer is Talent Mkhwanazi, 217 Dudley Street, Meyerton, 1960.
Contact: mkhwanazitalent@gmail.com, 065 855 8995.

What we collect

• Account details: your name, cellphone number and email address, and your company name and join code if you use a company account.
• Your password, stored only as a one-way hash that we cannot read.
• Work records: shift start and end times, breaks, notes you add, holiday flags, and any corrections made to them.
• Pay settings: your hourly rate, currency, overtime multipliers and working hours.
• Subscription: your free trial end date and, if you subscribe, your Google Play purchase reference, its status and renewal date. We never see or store your card details. Google handles the payment.
• Security information: sign-in attempts, plus scrambled (hashed) network addresses used to detect abuse.

We do not collect your location, contacts or photos. We do not sell your information or use it for advertising.

Why we use it

• To run your account and calculate your hours and estimated earnings (needed to provide the service you asked for).
• To confirm your cellphone number and reset your password, by SMS.
• To check your subscription with Google Play and give you the access you paid for.
• To share your shifts with a company, only if you choose to join it (your consent).
• To protect accounts and the service from fraud and abuse (our legitimate interest). This includes automatically checking email addresses and sign-in patterns. A person reviews flagged accounts before any account is suspended.

Who can see it

Companies: if you join a company with its join code, its admin can see your name, email address, and the shifts you record while you are a member. They cannot change your shifts, see your cellphone number, or see shifts from before you joined. When you leave, or they remove you, their access ends immediately.

Service providers who act on our instructions: BulkSMS sends our SMS messages and receives your cellphone number for that purpose. Xneelo (Pty) Ltd hosts our servers in South Africa. Cloudflare stores our encrypted backups, which it cannot read. Google processes subscription payments under its own terms. Where a provider is outside South Africa, we rely on safeguards POPIA section 72 allows.

We may also disclose information where the law requires it.

How long we keep it

• Your account and work records: until you delete your account.
• Unused sign-up details: removed within a day of the SMS code expiring.
• Security logs: 180 days.
• A scrambled (hashed) form of your cellphone number, kept after you delete your account so that one number gets one free trial: 2 years.
• Encrypted backups: up to 30 days, after which deleted information is gone from them too.

If you delete your account, a company you belonged to no longer has access to your shifts through WorkTracker. An employer may have its own legal duty to keep attendance records, which is separate from this service, so export what you need first.

Your rights

You can:

• Get a copy of your information: Settings, Your data, Download my data.
• Correct it: edit your profile and shifts in the app. Original shift times are kept alongside corrections as an honest record.
• Delete it: Settings, Your data, Delete my account, or see how to delete your account.
• Withdraw consent to company sharing by leaving the company at any time.
• Object to how we use your information by contacting us.
• Complain to the Information Regulator (South Africa) at inforegulator.org.za.

Security

Traffic is encrypted, passwords are hashed with Argon2, and sign-in attempts are limited. No system is perfectly secure. If a breach puts your information at risk, we will tell you and the Information Regulator as POPIA requires.

Cookies and storage

We use one essential cookie to keep you signed in. Your device also remembers your name, cellphone number and last filter, for the "Welcome back" screen and your convenience. There are no advertising or tracking cookies.

Children

WorkTracker is for people aged 18 and over.

Changes to this policy

We will update the date above when this policy changes, and tell you in the app about significant changes.