Privacy Policy
1. Who we are and whose data this is
PinchTime is a workforce app that companies (your employer) use to run attendance, shifts, leave, payroll records, documents and helpdesk. Your employer decides which of your data is entered and why, and is responsible for it under the Digital Personal Data Protection Act, 2023. PinchTime processes that data on your employer's behalf and only to provide the service.
2. What we collect
| Data | When | Why |
|---|---|---|
| Name, employee ID, company code, role, department, designation, joining date, reporting manager | Entered by your company Admin | Your account and company directory |
| Mobile number | Entered by your Admin | OTP sign-in and account security |
| Date of birth, emergency contact | If your company enters them | HR records |
| Precise location | Only at the moment you punch in or out | Confirm attendance is marked from an allowed place |
| Selfie photo | Only at the moment you punch in or out | Confirm the right person marked attendance |
| Device name, platform and an app installation ID | At sign-in and attendance | Detect unknown devices and prevent misuse |
| Attendance, shifts, leave, regularisation and helpdesk requests | When you or your Admin create them | Run the features you use |
| Crash reports: app version, phone model, Android version and the error details (no name, mobile or employee ID) | Automatically, only if the Android app crashes | Find and fix app errors (Firebase Crashlytics) |
| Salary and payslip details, documents and policies | Uploaded or entered by your company | Show you your own payroll records and documents |
Biometric unlock (fingerprint / face) happens entirely on your phone. PinchTime never receives your fingerprint or face data.
We do not sell your data, show ads or use your data for advertising.
3. Who can see it
- You see your own records.
- Your company Admins see records of employees in your company only.
- PinchTime Platform Operators manage company accounts and settings. They access employee data only when needed to support your company.
- Service providers: data is stored and processed on Google Firebase / Google Cloud. SMS codes are sent through Firebase Authentication.
Data of one company is never visible to another company. This is enforced by server-side security rules.
Website analytics and cookies
On this website we use Google Analytics 4 to count visits and see which pages are useful. It is switched on only if you tap "Accept" in the cookie banner. It records pages viewed, approximate location (city level), device and browser type; IP addresses are anonymised. It does not record your name, mobile number or any HR data, and it is not used for ads. You can change your choice any time with Cookie settings. The Android app does not use Google Analytics.
4. Security
Data is encrypted in transit (HTTPS/TLS) and at rest by Google Cloud. Access is checked on the server for every request. Platform Operators sign in with password plus SMS code.
5. How long we keep it
We keep data while your company uses PinchTime and as your employer requires for legal and payroll purposes. When your company closes its account, or asks us to delete data, we delete it unless the law requires us to keep it.
6. Your rights
You can ask to see, correct or delete your personal data, or raise a grievance. Please contact your company Admin first, because your employer controls your HR records. You can also write to us at the contact below and we will help, or forward it to your employer.
7. Permissions on your phone
- Camera — attendance selfie.
- Location — attendance location check, only while you mark attendance.
- Biometric — optional unlock on your own phone.
You can turn these off in phone settings, but attendance marking may then not work.
8. Children
PinchTime is for employees of companies and is not meant for children under 18.
9. Changes
We will update this page when our practices change and show the new date at the top.
10. Contact and grievance officer
Email: support@pinchtime.in