Privacy Policy

Effective Date: June 29, 2026

1. Overview

This Privacy Policy explains how Tickr ("Tickr," "we," "us") collects, uses, discloses, and protects personal information through the Tickr time-clock and payroll-support application (the "Service"). It applies to Employers and their Employees ("Users") in Canada and the United States.

Note on roles: in most cases, the Employer is the party that determines why and how Employee personal information is collected through Tickr (acting as controller/business), and Tickr acts as a service provider or processor on the Employer's behalf. Employees should also refer to their Employer's own workplace privacy notices.

2. Information We Collect

• Account information: name, work email, employer/organization, role, and login credentials.
• Time and attendance data: clock-in/out timestamps, shift schedules, breaks, and location of clock-in/out where that feature is enabled.
• Clock Photos: a photograph captured automatically at the moment of clock-in and clock-out, used to verify the identity of the individual clocking in/out.
• Payroll-support data: hourly rate, hours worked, overtime, and related figures generated for payroll purposes. (Tickr does not process bank account or payroll disbursement details unless the Employer connects a third-party payroll integration.)
• Device and usage data: IP address, device type, app version, and log data used for security and troubleshooting.

3. How We Use Information

• To operate the clock-in/out feature and verify identity using Clock Photos.
• To calculate and display hours worked, overtime, and related payroll-support figures for the Employer.
• To maintain accurate attendance records and help detect time-reporting fraud (for example, one employee clocking in for another).
• To provide customer support, maintain security, and improve the Service.
• To comply with legal obligations and enforce our Terms of Service.

We do not sell personal information. We do not use Clock Photos for facial recognition, biometric identification templates, advertising, or any purpose beyond attendance verification, unless we obtain separate, explicit consent for a clearly disclosed additional purpose.

4. Clock Photos Specifically

A photo of an identifiable person is personal information and, depending on how it is processed and the jurisdiction, may be treated as sensitive or biometric information. Accordingly, we:

• limit access to Clock Photos to the relevant Employer's authorized administrators and the Employee whose photo it is;
• retain Clock Photos only as long as necessary for attendance verification and any record-keeping required by employment or payroll law, or per the Employer's configured retention settings;
• rely on the Employer to provide any notice and obtain any consent required before enabling this feature for its workforce, consistent with applicable law (including Canadian privacy law and any applicable U.S. state biometric or workplace-monitoring statutes).

5. How We Share Information

• With the Employer that administers your account — Employees' time, attendance, and Clock Photo data is visible to that Employer's authorized administrators.
• With service providers who host infrastructure, process payments, or provide support, under confidentiality and data-protection obligations.
• With a payroll or HR platform the Employer chooses to connect or integrate.
• If required by law, legal process, or to protect rights, safety, or security.
• In connection with a merger, acquisition, or sale of assets, subject to continued protection under a policy at least as protective as this one.

We do not sell or rent personal information to third parties for their own marketing purposes.

6. Data Retention

We retain time, attendance, payroll-support, and Clock Photo data for as long as the Employer's account is active, and afterward only for the period needed to comply with applicable record-keeping, employment, tax, or payroll laws, or as configured by the Employer — after which it is deleted or anonymized.

7. Data Security

We use administrative, technical, and physical safeguards — such as encryption in transit, access controls, and role-based permissions — designed to protect personal information. No system is completely secure, and we cannot guarantee absolute security.

8. Cross-Border Data

Because Tickr is used in both Canada and the United States, personal information may be stored or processed in either country. Where required by applicable law, we take steps intended to provide an adequate level of protection for personal information transferred across borders.

9. Your Rights

Depending on your location and applicable law — including Canada's PIPEDA and applicable provincial legislation such as Quebec's Law 25, or applicable U.S. state privacy laws — you may have rights to access, correct, or request deletion of your personal information, or to withdraw consent for certain processing. Employees should generally direct these requests to their Employer first, since the Employer typically controls the underlying employment data. Employers or individuals may also contact us directly at support@tickr.ca.

10. Children's Privacy

The Service is intended for use by working-age individuals in an employment context and is not directed to children. We do not knowingly collect personal information from children.

11. Employer Obligations

Employers using photo capture, location tracking, or other monitoring features are responsible for providing Employees with any legally required notice — including, where applicable, notice of electronic monitoring under provincial or state law — and for obtaining any consent necessary before enabling these features.

12. Changes to This Policy

We may update this Privacy Policy from time to time. We will post the updated version with a new Effective Date and, for material changes, provide additional notice as required by applicable law.

13. Contact Us

Questions or requests regarding this Privacy Policy may be directed to: support@tickr.ca.