How your information is kept

This page is generated from the app's live settings, not from a list of promises.

What's stored

Your name, username, email and phone number; which job you clocked in and out of, and when; a note if you added one; and the GPS position your phone reported at the moment you clocked in or out (with its accuracy). Edits to time entries keep a history of who changed what.

What isn't stored

No bank details, no tax IDs, no continuous location tracking — position is captured only at the two moments you press the button, never in between. Nothing is sold or shared with anyone outside Beyond Payroll.

Who can see it

You can see your own timesheet. Admins can see everyone's timesheets, including clock in/out locations, and can edit entries — each edit is recorded with their name.

What's protecting it right now

• Connections are encrypted (HTTPS).
• Passwords are stored with Argon2 hashing and must be at least 12 characters. After 5 failed sign-ins an address is paused for an hour.
• Admin accounts are password-only at the moment.
• Sessions end after 12 hours.
• Accounts exist by invitation only; there is no public sign-up or "forgot password" form.
• Country geofence: on (this is housekeeping against scanners, not a lock).

What you can do

Fix your details under "your name" in the menu. Turn on two-factor sign-in there too. If you leave, an admin deactivates your account: you can no longer sign in, and your past hours stay in the company's books.

No app is unbreakable, and it would be a poor sign if this page claimed otherwise.