Privacy Policy

This Privacy Policy explains how Coam Tracker, LLC ("StoreClock," "we," "us," or "our") collects, uses, and shares information in connection with the StoreClock™ application and website (the "Service"). It covers two groups of people: owners who open a StoreClock account for their business, and workers and managers whom an owner adds to a store. By using the Service, you agree to this Policy.

1. Information We Collect

Owner account information. Your name, email address (your login), phone number, password (stored only in scrambled, one-way form — we cannot read it), business and store names, store addresses, the store's map location if you set the location lock, store hours, your settings, and, if you tell us, how you heard about StoreClock.

Worker and manager information (entered by the owner). Name, job, PIN, mobile phone number (optional), pay type and pay rate, commission percentage, whether the person is a manager, and a manager's username and what that manager is allowed to do. A manager's password is stored only in scrambled, one-way form — nobody, including the owner and us, can read it. Owners and the managers they allow can see these in the app.

Punches. Each clock in and clock out: the time, the store, the worker, and the phone's location at that moment (saved with the punch to confirm the worker was at the store). Whether the phone was on the store's internet, and whether it scanned the store's live barcode, at that moment (two more ways to confirm the worker was at the store; the store's internet address is remembered for this). A code that ties a worker's PIN to one phone. Changes an owner or manager makes to punches are kept in a change log with who made them and when.

Kiosk photos (optional, off by default). If an owner turns on photos for a kiosk tablet, a picture is taken at each clock in or out on that tablet. Photos are deleted automatically after the number of days the owner picks (7, 30, or 90). Photos are never taken on workers' own phones. We do not use facial recognition, face geometry, fingerprints, or any other biometric identifier.

Schedules and requests. Shifts, open shifts, time off, and tips, commission, and bonus lines the owner or a manager enters, and requests such as a manager's sign-in request or a worker's request to use a new phone.

Team messages. The words of each message, the sender's name, the time, which workers it went to, and the store words (such as vendor names and store areas) the owner saves for ready-made messages.

Setting changes. When overtime or the automatic unpaid break setting is changed, a record of what changed, who changed it (their sign-in email), and when.

Face ID and fingerprint sign-in (optional). A worker may choose to clock in with their phone's Face ID, fingerprint, or screen lock instead of a PIN. This uses a "passkey": the phone checks the face or fingerprint itself, and we never receive or store any face, fingerprint, or other biometric data. We store only a public key (a long code that cannot sign in by itself), the store and worker it belongs to, and when it was last used. The owner can remove it at any time with Reset phone.

Phone identifiers. To help stop one person from clocking in for another, we save an anonymous ID for each phone or browser a worker uses (up to five per worker) and note it with each punch.

Payment information. Payment is handled by Stripe. We do not receive or store your full card number. We keep a record of your plan, payment dates, and renewal dates.

Device and technical information. To let workers sign in with only a PIN, a worker's or manager's phone gets a private, anonymous sign-in from our database provider; it contains no name or contact details. To use the Service on their own phone, workers are asked to turn on alerts; we then store a code that lets us send notifications to that phone (owners and managers may turn on alerts too). The notification itself carries no message words — when it arrives, the phone asks our server for the words. A random code that identifies the phone is kept in the phone's browser storage, a cookie, and the phone's local database, so a worker's PIN stays tied to their own phone. We record simple activity, such as the app version in use and when a store was last used.

Error reports. If the app encounters a technical error, it sends a short report (the error message, the app version, the store, whether the user was an owner, manager, or worker, the screen, and the browser type) so we can fix it. Error reports are deleted after about 60 days.

We do not collect Social Security numbers, bank account numbers, or tax forms, and we do not track anyone's location between punches.

2. How We Use Information

We use information to run the time clock; check that a punch is made at the store; add up hours, overtime, and pay; show schedules; send the owner (and managers the owner allows) alerts and report emails the owner turns on; deliver team messages and shift alerts to workers' phones; process payments and manage plans; answer support requests; keep the Service secure and stop misuse; fix problems; and tell owners about changes to the Service or these policies.

We do not sell personal information, we do not use it for advertising, and we do not contact your workers to market anything.

What we look at. Our administrative tools show account-level information only: owner name, email, and phone; store names; plan and renewal status; number of workers; whether set-up steps are done; and the date a store was last used. They do not show punches, hours, pay rates, pay, PINs, or photos. We look at those records only when an owner asks us for help, to investigate misuse or a security problem, or when the law requires it.

3. Who Can See What

An owner sees everything for their own stores. A manager sees only their own store, and only the parts the owner turns on (for example schedule, team, or reports, with or without pay amounts). A worker sees only their own punches, their own schedule, open shifts at their store, and messages sent to them. A manager allowed to send messages sees the messages sent at their store; the owner sees every message and gets a copy of each manager's message. Stores never see each other's data.

4. Service Providers

We use a small number of providers to run the Service: Supabase (database, logins, and backups), Cloudflare (website hosting and the server that sends alerts and report emails), Stripe (payments — charges show as COAM TRACKER LLC), Resend (email delivery), the U.S. Census Bureau geocoder and Photon/OpenStreetMap (when an owner types a store address, the address text is sent to look up its map location), and Google Fonts (the typeface on our website), and the push services built into phones and browsers (such as Apple, Google, and Mozilla), which deliver the alert to the phone — they receive the phone's alert code but not the message words. Each may use the information only to provide its service to us, and each has its own privacy policy.

5. Legal Requests

Your records are your records; we store them for you. We do not send them to any government agency or third party on our own. If we receive a subpoena, court order, or other lawful request for records about your business, we will provide only what the law requires, limit it to what was asked for, and tell you before or promptly after we respond unless the law or the request forbids it. You can produce your own records at any time using the download and payroll file features in the app.

6. Security

We use encrypted connections (HTTPS), scrambled passwords, and database rules that limit every owner to their own stores and every worker to their own records. Too many incorrect PIN attempts lock that phone out for 15 minutes. No system is perfectly secure, and we cannot promise absolute security. If we learn of a security incident that affects your information, we will investigate promptly and notify affected owners as the law requires.

7. Keeping and Deleting Data

We keep your data while your account exists, including after a plan ends, so you can pay again without losing anything. Team messages are kept until the owner deletes them or deletes the account. When an owner removes a worker, the worker's hours stay in reports so past pay totals stay correct. When an owner chooses "Delete forever" for a former worker, that worker's PIN, pay rate, and phone lock are erased; their past hours stay in the store's reports under their name.

Owners can delete their whole account themselves, at any time, in the app (Menu → Account → Billing → Delete my account), with their password and a typed confirmation. No request to us is needed. This erases the login and all of the account's stores, workers, punches, schedules, and settings from our active systems right away. Copies in our routine backups are removed as those backups age out, within 30 days. Deletion cannot be undone. Before deleting, download any reports and payroll files you need — pay and time records may need to be kept for years under the laws that apply to you. If you cannot sign in, email [email protected] or call (404) 992-8675 and we will confirm who you are before acting.

8. Choices for Workers

We provide the Service to the business you work for, and we handle your information on that business's behalf. If you are a worker and want to see, fix, or remove your information, please ask your employer first; they control it. If you cannot reach them, contact us and we will help where the law allows.

9. Cookies and Phone Storage

The app keeps small notes in your browser's storage to keep you signed in, remember your language, theme, and last store, remember which phone a PIN is locked to (kept in browser storage, a cookie, and the phone's local database so one cleanup does not lock a worker out), remember the store on a phone's home-screen app, remember which messages were already seen, and hold punches made with no signal until they can be sent. We do not use advertising cookies or track you across other websites.

10. Children

StoreClock accounts are for business owners 18 or older. We do not knowingly collect information directly from children under 13. If a business adds a worker under 18, that business is responsible for following the laws that apply to young workers.

11. Changes to This Policy

We may update this Policy. The date and version at the top will change, and we will tell owners about material changes by email or in the app.

12. Contact

Questions about privacy: [email protected] · (404) 992-8675. Coam Tracker, LLC, Georgia, USA.

© 2026 Coam Tracker, LLC. All rights reserved. StoreClock™ and the StoreClock logo are trademarks of Coam Tracker, LLC.