Privacy policy

Last updated 28 October 2026

This policy explains how Clockd (“we”, “us”) collects and uses personal information, in line with the Protection of Personal Information Act, 2013 (POPIA). You can reach us at hello@clockd.co.za or 076 608 7393.

1. Who this covers

• Visitors and early-access sign-ups on clockd.co.za.
• Businesses that use Clockd (our customers) and the people who log in for them: owners, office staff and workers.
• Our customers' clients, whose names, addresses and job details a business records in Clockd.

2. What we collect

• Sign-up details: name, business, mobile number, email, trade, team size and any message you send us.
• Account details: names, usernames, roles and teams. Workers don't need to give an email address.
• Job records: clients, addresses, visit start and close times, notes on work done, materials, travel and COC status.
• Location at start and close of a visit: when a worker taps Start or Close, the phone may share its location once, if the worker allows it. Clockd does not track location in between.
• Technical data: basic logs (such as IP address, browser type and errors) needed to keep the service secure and working.

3. Why we use it

• To contact you about early access or a demo you asked for.
• To run Clockd for our customers: recording jobs, visits and hours so they can invoice their clients.
• To keep accounts secure, fix problems and improve the product.
• To send service messages (for example about your account or billing). We will only send marketing if you agreed to it, and you can opt out any time.

4. Customers' data belongs to them

For job and client records, the business using Clockd is the responsible party, and we process that information on its behalf (as an “operator” under POPIA). Each business can only see its own data. We don't sell personal information, and we don't use customers' client lists for our own marketing.

5. Who we share it with

We use trusted service providers to run Clockd, under agreements that require them to protect the information:

• Supabase (database, logins and file storage), with servers in the United Kingdom (London).
• Vercel (website and app hosting).
• Resend (sending email).

Because some of these servers are outside South Africa, personal information is transferred across borders. We only use providers in countries or under agreements that give a level of protection comparable to POPIA. We will share information with authorities only where the law requires it.

6. How long we keep it

Early-access sign-ups: until you ask us to delete them, or 24 months after our last contact. Customer data: for as long as the business uses Clockd, and then for 90 days so it can be exported, unless the law requires us to keep it longer.

7. Security

Information is encrypted in transit, access is limited by login and role, and each business's data is kept separate at database level. No system is perfectly secure; if a breach affects your personal information, we will tell you and the Information Regulator as POPIA requires.

8. Your rights

You may ask what personal information we hold about you, ask us to correct or delete it, object to how we use it, or withdraw consent. If your information is in Clockd because of a business you deal with, you can also ask that business. Email hello@clockd.co.za. If you're not happy with our answer, you may complain to the Information Regulator (South Africa) at inforegulator.org.za.

9. Information officer

Questions or requests about personal information go to our information officer at hello@clockd.co.za or 076 608 7393.

10. Changes

We may update this policy. The date at the top shows when it last changed, and we'll tell customers about important changes.