Privacy Policy

Who we are

Boncks is a mobile time-tracking service for small field service teams. This Privacy Policy describes what data we collect, why, and what your rights are.

Information we collect

• Account data: name, email, phone number, hourly rate, and role (admin, manager, employee).
• Time entries: clock in / clock out timestamps, notes, and any edits.
• Clock in / out GPS coordinates: latitude and longitude captured from your device at the moment you clock in and clock out. These coordinates are permanently stamped on the time entry so admins can verify you were on site.
• Live location while on shift: when you are clocked in, your device shares its current latitude, longitude, and accuracy with your company's admins approximately every 15 seconds (or sooner if you move more than ~25 meters). Live tracking starts at clock in and stops at clock out. The live record is deleted immediately on clock out and is not retained as historical data — only your clock in/out coordinates are kept. Boncks uses the browser Wake Lock API to prevent your screen from sleeping while clocked in, which keeps GPS active; no additional personal data is collected by the wake lock.
• Push notification tokens: if you allow push notifications, we store a device token so we can deliver alerts about new work orders and team assignments. Tokens are deleted when you revoke notification permission or uninstall the app. We do not use push tokens for advertising.
• Service worker & offline caching: Boncks may cache application assets on your device via a service worker for faster loading and basic offline functionality. No personal data is stored in the cache.
• Billing data: company name, subscription status, and PayPal subscription identifiers. We do not store payment card numbers — those are handled by PayPal.
• Device & technical data: IP address, user agent, and basic logs needed to operate the service and prevent abuse.

How we use it

• To provide the time-tracking service to you and your team.
• To verify that clock in/out happened from a legitimate location (your employer's policy may require this).
• To process subscription payments through PayPal.
• To send transactional emails (welcome, employee invites, support replies, billing notifications). Marketing emails are not sent without explicit opt-in.
• To detect and prevent fraud, abuse, or security incidents.

Sharing & processors

We use trusted third-party processors to operate the service: Supabase (database & authentication), PayPal (payments), transactional email infrastructure (email delivery), and mapping providers for displaying clock locations to admins. We do not sell your data to anyone.

Tenant isolation

Each company's data is isolated using row-level security policies. Employees and admins of one company cannot view data belonging to another company.

Location tracking & consent

• Live location is only visible to admins and managers of your own company, enforced by row-level security on our database.
• Location capture requires browser permission. You can revoke that permission at any time from your device or browser settings, which will stop sharing immediately (your employer may then require you to confirm your location manually).
• Boncks does not access your location when you are not clocked in. Live tracking strictly starts at clock in and ends at clock out.
• Live location data is used solely to show your team's current position on the admin map. It is never sold, shared with third parties, or used for advertising or profiling.

Retention

We retain time-entry data for as long as your account is active so you can run historical reports. After account deletion, data is retained for up to 30 days then permanently removed, except where we are legally required to retain it longer.

Your rights

Depending on where you live (e.g. EU/UK GDPR, California CCPA), you have rights to access, correct, export, or delete your personal data, and to object to certain processing. Contact us at contact@boncks.com to exercise any of these rights.

Cookies

We use a minimum of cookies / local storage entries to keep you signed in. We do not use third-party advertising cookies.

Children

Boncks is not intended for use by children under 16. We do not knowingly collect data from anyone under that age.

Changes

We may update this Policy from time to time. Material changes will be announced in-app or by email.

Contact

Questions or data requests? Visit our contact page or email contact@boncks.com.