Privacy Policy

Effective Date: October 29, 2026

1. Overview

This Privacy Policy explains how APlannet Solutions ("APlannet Solutions," "Tickr," "we," "us"), the operator of Tickr, collects, uses, discloses, and protects personal information through the Tickr time-clock and payroll-support application (the "Service"). It applies to Employers and their Employees ("Users") in Canada and the United States.

Note on roles: in most cases, the Employer is the party that determines why and how Employee personal information is collected through Tickr (acting as controller/business), and Tickr acts as a service provider or processor on the Employer's behalf. Employees should also refer to their Employer's own workplace privacy notices.

2. Information We Collect

• Account information: name, work email, employer/organization, role, and login credentials.
• Employee profile information: name, phone number, email address, date of birth, home address, hire date, employee number, department, pay rate, and a personal identification number (PIN) used to clock in. This information is entered by the Employer, or by the Employee when they register or complete their profile at a clock-in station.
• Passkeys: if the Employer enables fingerprint or face sign-in, a passkey is created on the Employee's device. Tickr stores only the passkey's public security key. Fingerprints and face scans never leave the device and are never sent to or stored by Tickr.
• Time and attendance data: clock-in/out timestamps, breaks, shift schedules, the Employer location where each clock-in/out took place, and the IP address of the device used. Tickr does not collect GPS or other precise location data.
• Clock Photos: where the Employer enables the feature, a photograph captured automatically at the moment of clock-in and clock-out, used to verify the identity of the individual clocking in/out.
• Leave and staff records: sick-day allocations and usage, statutory holiday records, and notes the Employer records about Employees.
• Communications: the content of messages and notices sent between the Employer and Employees through the Service, including by email or text message, and automated reminders such as forgotten clock-out alerts.
• Payroll-support data: hourly rate, hours worked, and related figures generated for payroll purposes. (Tickr does not process bank account or payroll disbursement details unless the Employer connects a third-party payroll integration.)
• Billing information: the Employer's organization name, billing contact email, subscription status, and billing history, plus a count of Employees who clocked in during each billing period, used to calculate fees. Payment card details are collected and stored by our payment processor, Stripe, and are not stored on Tickr's servers.
• Device and usage data: IP address, device type, app version, and log data used for security and troubleshooting.

3. How We Use Information

• To operate the clock-in/out feature and verify identity using Clock Photos.
• To calculate and display hours worked and related payroll-support figures for the Employer.
• To maintain accurate attendance records and help detect time-reporting fraud (for example, one employee clocking in for another).
• To provide customer support, maintain security, and improve the Service.
• To comply with legal obligations and enforce our Terms of Service.

We do not sell personal information. We do not use Clock Photos for facial recognition, biometric identification templates, advertising, or any purpose beyond attendance verification, unless we obtain separate, explicit consent for a clearly disclosed additional purpose.

4. Clock Photos Specifically

A photo of an identifiable person is personal information and, depending on how it is processed and the jurisdiction, may be treated as sensitive or biometric information. Accordingly, we:

• limit access to Clock Photos to the relevant Employer's authorized administrators, serving them only through temporary, expiring links;
• retain Clock Photos only as long as necessary for attendance verification and any record-keeping required by employment or payroll law, or per the Employer's configured retention settings;
• rely on the Employer to provide any notice and obtain any consent required before enabling this feature for its workforce, consistent with applicable law (including Canadian privacy law and any applicable U.S. state biometric or workplace-monitoring statutes).

5. How We Share Information

• With the Employer that administers your account — Employees' time, attendance, and Clock Photo data is visible to that Employer's authorized administrators.
• With service providers who host infrastructure, process payments, or provide support, under confidentiality and data-protection obligations. Payments are processed by Stripe, which receives the Employer's billing details and payment information; Stripe's handling of that information is governed by its own privacy policy.
• With text-message providers (Twilio or Telnyx), if the Employer enables text-message notifications. These providers receive the recipient's phone number and the message content in order to deliver the message.
• With a payroll or HR platform the Employer chooses to connect or integrate.
• If required by law, legal process, or to protect rights, safety, or security.
• In connection with a merger, acquisition, or sale of assets, subject to continued protection under a policy at least as protective as this one.

We do not sell or rent personal information to third parties for their own marketing purposes.

6. Data Retention

We retain the Employer's data, including Employee information, time and attendance records, and Clock Photos, for as long as the Employer's account is active. Clock Photos may be deleted sooner, according to the retention period the Employer sets in the Service.

An account closes when its subscription ends or the account is deactivated. We keep the data for 90 days after closure, so the Employer can reopen the account or export its records. After 90 days, we permanently delete the Employer's data, including Employee information, time and attendance records, Clock Photos, messages, and the accounts of administrators who do not belong to another organization. Employers are responsible for exporting, before that date, any records they are required to keep under employment, payroll, or tax law.

Some information is kept after deletion: billing records, such as invoices and payment history, are retained by our payment processor, Stripe, as required for accounting and tax purposes, and deleted data may remain in server backups for a limited period until those backups are replaced.

7. Data Security

We use administrative, technical, and physical safeguards — such as encryption in transit, access controls, and role-based permissions — designed to protect personal information. No system is completely secure, and we cannot guarantee absolute security.

8. Cross-Border Data

Because Tickr is used in both Canada and the United States, personal information may be stored or processed in either country. Where required by applicable law, we take steps intended to provide an adequate level of protection for personal information transferred across borders.

9. Your Rights

Depending on your location and applicable law — including Canada's PIPEDA and applicable provincial legislation such as Quebec's Law 25, or applicable U.S. state privacy laws — you may have rights to access, correct, or request deletion of your personal information, or to withdraw consent for certain processing. Employees should generally direct these requests to their Employer first, since the Employer typically controls the underlying employment data. Employers or individuals may also contact us directly at support@tickr.ca.

10. Children's Privacy

The Service is intended for use by working-age individuals in an employment context and is not directed to children. We do not knowingly collect personal information from children.

11. Employer Obligations

Employers using photo capture, network restrictions on clock-in, or other monitoring features are responsible for providing Employees with any legally required notice — including, where applicable, notice of electronic monitoring under provincial or state law — and for obtaining any consent necessary before enabling these features.

12. Changes to This Policy

We may update this Privacy Policy from time to time. We will post the updated version with a new Effective Date and, for material changes, provide additional notice as required by applicable law.

13. Privacy Officer and Contact

APlannet Solutions has designated a Privacy Officer who is responsible for our compliance with this Privacy Policy and applicable privacy law:

Privacy Officer
APlannet Solutions
support@tickr.ca

Questions, requests, and complaints regarding this Privacy Policy or our handling of personal information may be directed to the Privacy Officer.

14. Complaints to a Regulator

If you are not satisfied with our response, you may contact the Office of the Privacy Commissioner of Canada (priv.gc.ca) or the Office of the Information and Privacy Commissioner for British Columbia (oipc.bc.ca). Residents of other provinces or states may also contact the privacy regulator where they live.