Three documents, three different readers.

If you use ClockIn Dock at work

Staff and managers sign in under the Terms of Service. They are short and they are served where you can read them before you agree — the whole point of a consent line on a sign-in screen is that the documents can be read first, without an account.

• Your account is yours alone: no sharing a code, no clocking in for anyone else.
• Your attendance record is a business record. Decisions recorded against you are made by a named person, carry a reason where one is required, and are kept in an audit trail you can ask to see.
• A dock, a chip or a network failing never means you lose pay for time worked. There is always a manual route.
• Nothing in them reduces your statutory employment rights, including your right to be paid for time you worked.
• They carry a date, and your acceptance is recorded against the version you were shown. Signing in after a change is how the new version is accepted — the sign-in screen links both documents so you can read them first — and a material change is announced through the notice board or your manager rather than only moving the date. It is not a pop-up, so if you stay signed in you may not see a revision until you next sign in.

Read the Terms of Service →
Acceptable use · Staff privacy notice · Support

If you are buying ClockIn Dock for your venues

Your agreement is the customer terms, issued with your order form. The order form carries the things that differ per customer — the plan and price for each site, the hardware on lease, the warranty terms — and the customer terms carry the rest. The shape of it:

• Monthly, per venue, no minimum term unless something else is expressly agreed in writing.
• Cancel at any time — no notice period, no tie-in. You are refunded the unused portion of the billing period you have already paid for.
• The locker is leased, never sold. It stays our property throughout and comes back to us when the subscription ends. Loss and damage beyond fair wear and tear are charged at the reasonable repair or replacement cost — there is no fixed penalty fee.
• Bank transfer, invoiced monthly. There is no card processing connected to the system today, and no card details are held anywhere in it.
• You decide about your staff, not us. ClockIn Dock supplies records and technical checks; it makes no employment decisions, and a location result must never by itself decide someone's pay or discipline.

Your staff's data

Two roles, and the distinction matters. For your workforce data — attendance, shifts, location evidence — you are the data controller and we are the processor, acting on your instructions. A Data Processing Agreement — the Article 28 terms — is completed with you and forms part of the agreement you sign. For our own records — your contact details, billing, support correspondence, security logs — we are the controller.

• Employee data is never sold, never used for advertising, and never used to train AI models.
• Every third party that touches personal data in the running service is recorded in a subprocessor register. It names each one, what it receives and where it sits, and it carries the date it was last checked. Ask for it.
• Before you roll it out, your staff need to be told what it does. The privacy notice and the DPIA exist so you are not writing that yourself.

Company privacy policy · What the app reads

Found a security problem?

We would rather hear about it. The disclosure policy sets out what to send, what we do with it, and the safe-harbour expectations for researchers — including the one that matters most here: this system pays real people, so please do not alter an attendance or pay record to prove a point.

Vulnerability disclosure policy →