Privacy Policy

Effective date: July 24, 2026

OnTime is a workforce and project management application for construction and exterior-finishing contractors. It is used by a company's own staff — managers, foremen, installers, service technicians and drivers — to run job sites: crew check-in, work hours, daily reports, materials, deliveries and quality control.

This policy explains what personal information OnTime collects, why, and what rights you have. We handle personal information in accordance with Canada's Personal Information Protection and Electronic Documents Act (PIPEDA) and applicable provincial legislation (Alberta).

Who controls your data. OnTime is a workplace tool. When your employer deploys OnTime, your employer is the controller of the work-related information in it (hours, reports, assignments, wages) and decides who inside the company can see it. We operate the service on your employer's behalf.

1. Information we collect

Category	What exactly	Why
Account & contact	Full name, work email, phone number, job role, password (stored only as a salted hash), optional profile photo, optional Telegram chat id if you link notifications	Sign-in, permissions, notifying you about your shifts and tasks
Precise location	GPS coordinates at check-in and check-out, plus periodic coordinates while a shift is open and the app is in use	Confirming you are on the job site you checked into (geofence) and closing forgotten shifts. See section 3.
Work records	Check-in/out times, hours worked, daily and weekly reports, assigned projects, materials installed, deliveries, service tasks, quality defects	Payroll, project costing, scheduling, quality tracking
Photos you take or upload	Site progress photos, quality-defect photos, delivery and equipment photos, documents you attach	Evidence of work performed and of defects to be fixed
Employment & pay data	Hourly rate, hours, and the resulting labour cost — visible only to management roles	Payroll and job profitability. Entered by your employer, not by you.
Technical	User id, session token, push-notification token, server access logs (IP, timestamp)	Keeping you signed in, delivering notifications, security and abuse investigation

2. What we do NOT do

We do not sell or rent personal information.
We do not show advertising and we do not share data with advertising networks or data brokers.
We do not use third-party analytics or tracking SDKs. There is no cross-app or cross-site tracking, and OnTime does not use Apple's App Tracking Transparency because it does not track you.
We do not collect your contacts, calendar, microphone audio, health data, or browsing history.

3. Location — exactly how it is used

Location is the most sensitive thing OnTime touches, so we are specific:

Location is read only while you are using the app. OnTime does not request or use background location, and does not track you outside of an open shift.
A coordinate is recorded when you check in and when you check out, and periodically while a shift is open and the app is in the foreground, to verify you are within the job-site radius your employer configured.
Location is used to answer one question — “is this person on the site they checked into?” — and to auto-close shifts someone forgot to end. It is not used to build movement profiles.
You can decline the location permission. Check-in will then rely on the site QR code and your foreman's confirmation instead.

4. Who can see your information

You — your own profile, hours, reports and assignments.
Your foreman and management at your employer — work records for the crews and projects they are responsible for. Wage and cost figures are restricted to management roles.
Subcontractors — only the specific defect list and photos for a job they were given a time-limited link to. They see no personal, payroll or contact data.
Service providers — our hosting provider, and Telegram / Apple / Google solely to deliver push notifications you enabled.
Authorities — only where required by law.

5. Retention

Work records (hours, reports, project history) are business and payroll records: your employer keeps them for as long as employment and tax law requires, typically at least seven years. Location points attached to check-ins are kept with the shift record they belong to. Notification tokens and session tokens are deleted when they expire or when you sign out.

6. Your rights

Access the personal information we hold about you.
Correct information that is wrong.
Request deletion of your account and of data that is not subject to a legal retention obligation — see Delete your account and data.
Withdraw consent for optional processing (for example push notifications, or the location permission) at any time in your device settings.
Complain to the Office of the Privacy Commissioner of Canada if you believe we mishandled your information.

7. Security

All traffic between the app and our servers is encrypted with HTTPS/TLS. Passwords are stored as salted hashes and are never recoverable in plain text. Access inside the app is restricted by role. No system is perfectly secure, but we apply reasonable safeguards and review them.

8. Children

OnTime is a workplace tool intended for people old enough to be legally employed. It is not directed at children and we do not knowingly collect information from anyone under 16.

9. Where data is stored

Data is stored on servers we operate. Data may be processed outside your province or country; where that happens it remains protected by this policy and by contractual safeguards with our hosting provider.

10. Changes

If we change this policy we will update the effective date above and, for material changes, notify you in the app.

11. Contact

Questions, access requests or complaints: support@ontime.management. See also our Terms of Service and Support page.