개인정보 처리방침Privacy Policy

ONTIME (“the Service”) is a business-to-business attendance app used by workplaces to record employee check-in and check-out, calculate working hours and estimate pay. The Service has no consumer sign-up: an employee account is created by an administrator at the workplace that employs them.

There are two user roles:

• Worker — sees only their own attendance records, schedule, hourly rate and estimated pay.
• Business administrator — manages the employees, branches, attendance and payroll summaries of their own workplace.

Operator: Valo digital (operator: NAM IRINA) (South Korea)
Contact: valo.digital6988@gmail.com

Privacy questions and requests for access, correction or deletion are received at that address; we confirm receipt and reply with the outcome.

• A business administrator creates the account by entering the employee’s name and email address, and the Service issues a 6-digit activation code.
• The employee enters that code in the app and chooses their own password. We do not store the password in readable form.
• There is no public self-service registration.

The Service processes only the following:

• Account data — email address, full name, role (worker or administrator), account identifier, organization and branch identifiers, account activation data.
• Employment terms — assigned branch, expected start and end of shift, hourly rate and overtime hourly rate.
• Attendance data — check-in and check-out times, shift status, worked minutes, attendance history for a selected period.
• Payroll calculations — regular and overtime minutes and the estimated pay derived from them.
• Location data — the precise GPS coordinates (latitude and longitude) captured at the moment of a check-in or check-out, and the branch coordinates and radius an administrator sets when configuring a branch. See section 5.

• The device location is read once, at the moment the employee presses check-in or check-out. There is no continuous tracking and no background location collection.
• The app requests foreground (“while using the app”) location permission only. It never requests background location permission.
• The captured coordinates are sent with the check-in or check-out request. The server compares them against the branch radius configured by the administrator and decides whether the check-in is accepted; that decision is made on the server.
• A business administrator sets a branch’s coordinates and permitted radius (geofence) when creating or editing the branch, optionally using the current device location as the branch point.
• Without location permission the attendance feature cannot be used. Permission can be withdrawn at any time in the device settings.

• Creating, authenticating and maintaining accounts
• Recording attendance and calculating working time
• Verifying that a check-in or check-out happened within the configured branch radius
• Calculating pay from working time and producing attendance and payroll reports
• Handling user enquiries and requests
• Keeping the Service secure, diagnosing faults, and meeting legal obligations

We do not use personal data for advertising, marketing, profiling or behavioural analysis, and we do not sell it.

• An employee’s attendance and payroll data is visible to the administrators of the workplace that employs them. This is inherent to the Service; the workplace processes that data as the employer.
• Branch map screens use the operating system’s map component (Google Maps on Android, Apple Maps on iOS). Coordinates displayed on the map are passed to that map provider and are subject to the provider’s own terms and privacy policy.
• When an administrator searches for a branch address, the text they type is passed to the operating system’s address lookup (geocoding) function so that it can be converted into coordinates. The provider of that function depends on the device and its platform services, and the processing is subject to that provider’s own terms and privacy policy. We do not store the text that was typed — only the coordinates and radius the administrator confirms.
• We do not otherwise sell personal data or disclose it for marketing purposes.
• We may disclose personal data where required by law, or where necessary to meet a legal obligation, protect rights, or protect the safety of users or the public, within the limits the applicable law allows.

• Account data — kept for the duration of the account relationship, and for up to 24 months after closure to resolve any post-termination issues or disputes.
• Support correspondence — up to 24 months from receipt.
• Server logs — up to 24 months for security monitoring and troubleshooting.
• Attendance and payroll records — kept for as long as required by applicable labour, accounting, tax or contractual obligations. This period can apply independently of an account deletion request.
• Check-in location coordinates — deleted or anonymized once they are no longer needed for the presence check, unless a separate legal basis requires keeping them.

When a retention period ends, the data is deleted or anonymized without undue delay. Residual copies in backups are removed on the operator’s ordinary backup cycle and are not used before then for anything other than recovery, security or legal compliance.

• All traffic between the app and the server is encrypted with HTTPS.
• The login token is held in the device’s secure storage (iOS Keychain / Android Keystore) and is erased on logout or when the session is rejected.
• Passwords are not stored in readable form.
• No method of transmission over the internet or of electronic storage is completely secure, so absolute security cannot be guaranteed.

You may request access to, correction of, deletion of, or restriction of processing of your personal data. Send the request to valo.digital6988@gmail.com; we process it after verifying your identity.

You can request account deletion yourself using the form on a separate page, which also lists what is deleted and what must be retained by law.

Request account deletion →

The Service is not directed to anyone under the age of 16 and we do not knowingly collect personal data from them. If we learn that we hold such data, we delete it without undue delay.

Personal data is processed on servers operated by the operator and its processors, which may be located outside your country of residence. Where that happens, we apply the safeguards required by applicable law.

If this policy changes, the new version is published on this page and the effective date is updated. We announce material changes by email or in-app notice before they take effect.