Privacy Policy
Effective Date: August 31, 2026
Welcome to ClockUp.
ClockUp is an attendance management system designed to help organizations manage employee or member attendance through streamlined clock-in and clock-out workflows, attendance records, and face-based verification.
This Privacy Policy explains how ClockUp ("ClockUp", "we", "us", or "our") handles information in connection with the ClockUp website, applications, demonstrations, and related services.
ClockUp is designed to provide organizations with attendance-management capabilities while following a privacy-conscious approach to handling personal information.
"ClockUp" is the name of the software system and project described in this Privacy Policy; it is not itself a separate legal entity. The Service is developed, owned, and operated by Isaac Yancy Paala, operating under the developer name yncynotdev. Throughout this Privacy Policy, references to "ClockUp," "we," "us," and "our" refer to Isaac Yancy Paala (yncynotdev) as the developer and operator of the Service, unless the context clearly refers only to the software system itself.
1. About ClockUp
ClockUp is an actively developed software system intended to provide practical attendance solutions for organizations.
ClockUp is not merely a personal or experimental project. It is designed and developed with the intention of serving real organizations and their attendance-management needs. Features, infrastructure, integrations, and supported deployment environments may continue to evolve as the system is developed and deployed for different organizations.
ClockUp may be provided as a hosted service, organization-specific deployment, demonstration environment, or other deployment arrangement depending on the organization's requirements.
2. Information We May Collect
Depending on how ClockUp is deployed and used, the system may process information such as:
- Name
- Employee or member identification information
- Attendance dates and times
- Clock-in and clock-out records
- Attendance status
- Organization or department information
- Account information
- Device or browser information
- Technical logs necessary for operating and securing the Service
- Images captured during attendance verification, depending on the deployment configuration
The exact information collected may differ between organizations and deployment environments.
3. Face Detection and Biometric Information
ClockUp may use face detection as part of its attendance-verification process.
ClockUp is designed so that biometric data is not stored as a permanent biometric database for attendance verification.
A camera image may be temporarily processed or transmitted depending on the deployment configuration in order to perform the attendance workflow. The precise handling of images may therefore vary between deployments.
Organizations using ClockUp are responsible for determining the appropriate legal basis, notices, consent requirements, retention periods, and other privacy obligations applicable to their use of face-based attendance verification.
ClockUp should not be understood as providing legal advice regarding biometric or privacy compliance.
4. Attendance Information
Attendance information may include:
- The identity of the person recording attendance
- Date and time of attendance
- Clock-in or clock-out status
- Verification status
- Organization-related information
- Other information required to operate the attendance workflow
This information is generally processed to provide attendance-management functionality to the organization using ClockUp.
The organization operating a ClockUp deployment may determine how attendance information is used, retained, reviewed, and managed.
5. How Information Is Used
Information processed through ClockUp may be used to:
- Record attendance
- Verify attendance attempts
- Reduce attendance fraud such as buddy-punching
- Manage employee or member attendance
- Provide organization-specific workflows
- Maintain and improve the Service
- Diagnose technical problems
- Protect the Service against abuse or unauthorized access
- Comply with applicable legal obligations
We do not intend to use attendance information for purposes unrelated to providing or supporting the Service unless otherwise disclosed or legally required.
6. Data Storage and Infrastructure
ClockUp's storage architecture depends on the deployment configuration.
ClockUp is currently primarily designed around Cloudflare-based infrastructure, which may include services such as Cloudflare Workers, Cloudflare Pages, Cloudflare R2, and related Cloudflare infrastructure.
Certain deployments may also use external databases or other infrastructure depending on the organization's requirements.
Because ClockUp is actively developed, the technologies and infrastructure used to operate the Service may change over time.
The location and processing of information may therefore depend on the infrastructure selected for a particular deployment.
7. Third-Party Services
ClockUp may use third-party services and infrastructure providers to operate, secure, host, or deliver the Service.
These providers may process technical information or other information necessary to provide their services.
Third-party providers operate under their own terms and privacy policies. Their services may also have their own data-storage locations, retention practices, and security measures.
Where appropriate, organizations should review the relevant third-party policies applicable to their deployment.
8. Cookies and Similar Technologies
The ClockUp website may use cookies, local storage, session storage, or similar technologies when necessary to operate the website, maintain sessions, remember preferences, or provide application functionality.
The specific technologies used may vary between the public landing page, demonstration environment, and production deployments.
9. Data Retention
ClockUp does not prescribe a single retention period for all organizations.
Attendance records and related information may be retained according to the organization's operational requirements, configuration, contractual arrangements, or applicable legal obligations.
Organizations using ClockUp are responsible for establishing appropriate retention and deletion policies for the information they manage.
Technical logs and other operational information may be retained for as long as reasonably necessary for security, troubleshooting, service operation, or legal purposes.
10. Data Security
ClockUp is developed with reasonable security practices intended to protect information against unauthorized access, alteration, disclosure, or destruction.
However, no internet-based application or storage system can guarantee absolute security.
Organizations are responsible for maintaining appropriate account security, access controls, device security, and operational procedures when using ClockUp.
11. Organization Responsibilities
When an organization uses ClockUp to process personal information, the organization may determine:
- Which individuals are entered into the system
- What information is collected
- How attendance information is used
- Who can access attendance records
- How long information is retained
- When information should be deleted
Accordingly, the organization operating ClockUp may have additional privacy obligations toward its employees, members, or other users.
ClockUp provides technical functionality but does not replace the organization's responsibility to comply with applicable privacy and data-protection laws.
12. Children's Privacy
ClockUp is primarily intended for organizational attendance-management purposes.
Organizations should not use ClockUp to process information relating to children or minors unless they have established an appropriate lawful basis and safeguards for doing so.
If a deployment is specifically intended for minors, additional privacy and data-protection requirements may apply.
13. Demonstration Environment
ClockUp may provide a publicly accessible demonstration environment.
The demonstration environment is intended for evaluation and demonstration purposes and should not be used to submit real sensitive, confidential, or personal information unless explicitly instructed.
Data submitted to a demonstration environment may be reset, deleted, or modified as part of maintenance or development.
14. International and Infrastructure Limitations
Because ClockUp currently relies heavily on Cloudflare-based infrastructure and other internet-based services, availability and data processing may be affected by infrastructure availability, regional network conditions, third-party service limitations, or deployment restrictions.
Some organizations, countries, regions, or environments may have requirements that are not currently supported by ClockUp.
Organizations should evaluate whether the available ClockUp deployment is appropriate for their own regulatory, contractual, security, and operational requirements.
15. Your Rights
Depending on your jurisdiction and your relationship with the organization using ClockUp, you may have rights concerning your personal information. These may include rights to:
- Request access to personal information
- Request correction of inaccurate information
- Request deletion where applicable
- Object to or restrict certain processing
- Request information about how your data is processed
- Exercise other rights provided by applicable law
If your information is processed through an organization's ClockUp deployment, your first point of contact should generally be the organization responsible for that deployment.
16. Changes to This Privacy Policy
This Privacy Policy may be updated as ClockUp's features, infrastructure, and data practices evolve.
When changes are made, the Effective Date at the top of this document will be updated.
We encourage users and organizations to periodically review this Privacy Policy.
17. Contact
For questions regarding this Privacy Policy or ClockUp's privacy practices, please use the contact information provided on the official ClockUp website.