Legal

Privacy policy

Last updated 23 October 2026

Who this is for

InOut-CheckIn is used by companies to record their staff's attendance, shifts, leave and pay. The company that invites you decides what is recorded about you and is responsible for that data. We store and process it for them, as described here.

What we collect

• Account details: your name, your work email or phone number (whichever you sign in with), and, if your company adds them, your branch, department, role, first day and job details.
• Access requests: when a business owner asks for access, their name, company, email, phone, country, city and how many employees will use the service.
• Check-ins: the time of each check-in, break and check-out, and your phone's location at that moment.
• Location while checked in (field staff only): if your company sets you up as field staff (for example a driver or a salesperson) and you agree in the app, your phone shares its location with your company about once a minute while you're checked in, including when the app is closed. A notification shows on your phone the whole time. Sharing stops when you check out, and never happens outside your working time. We record each position, how accurate it is, the time and your phone's battery level. Staff who aren't field staff are never tracked: their location is only read when they check in.
• Your phone: its make and model, and a fingerprint (a one-way hash) of a random key kept in your phone's secure storage. This is how your account is tied to one phone.
• Camera (QR check-in only): if your company uses QR check-in, the app opens your camera when you check in, only to read the code on the branch's tablet. No photos or video are taken or kept. We record the code with your check-in. Check-in tablets show a code and keep nothing about you.
• Schedules, leave and pay: your shifts, leave requests and, if your company uses payroll, your pay rate and overtime.

How we use it

Only to run the service for your company: to check you in at the right place, show attendance and schedules to the people your company allows, work out pay, send you account emails and shift reminders, and keep the service secure. We do not sell your data or use it for advertising.

Who can see it

People in your company see only what their role allows: for example, only roles with "See pay" can see pay, only the owner and roles with "See locations" can see where field staff are and the routes they took, and a branch manager may only see their own branch. Each company's data is kept apart from every other company's.

We use Google Firebase (Google Cloud) to store data and run the service, Cloudflare to serve this website, and Resend to send account emails. They process data only on our instructions. Maps are drawn with OpenStreetMap: when a manager opens a map, its images are loaded from OpenStreetMap's servers.

How long we keep it

For as long as your company uses InOut-CheckIn. Field staff routes are deleted automatically after 90 days. When a company removes you, your sign-in is deleted; your past attendance and pay records stay with the company, because they are its employment records. When a company closes its account, we delete its data.

Your choices

You can ask your company to correct or remove your details. You can also contact us at support@inoutcheckin.com to see, correct or delete your data, and we will work with your company to do it. You can turn off notifications and location access in your phone's settings, but you won't be able to check in without location. If you're field staff, you choose whether to agree to location sharing; until you do, you can still check in, but your location isn't shared during the day. Checking out always stops it.

Security

Data is sent over encrypted connections. Access rules are enforced on the server, so they hold even if someone modifies the app.

Changes and contact

If we change this policy we will update the date above, and tell company owners about important changes. Questions: support@inoutcheckin.com.