App permissions
Last updated:
The WFSuite app asks only for the permissions it needs to record your working time. You can refuse or revoke each of them at any time in your phone's settings; this page explains what each one is for and what happens without it.
Location
Android: precise and approximate location · iOS: location while using the app
- When: only at the moment you clock in, clock out, start or end a break — and only while the app is open. The app never reads your location in the background.
- Why: your employer can require punches to be made at the workplace; your position is compared with the workplace area.
- What is sent: the coordinates and their accuracy, attached to that single punch.
- Without it: the punch is sent without a position; if your employer requires the location check, the punch may be refused.
Camera
Android and iOS: camera
- When: when you scan your QR badge to sign in, when you scan a QR code at the workplace or in one of its zones to record a punch, and when your employer asks for a photo at clock-in.
- What is sent: the content of the scanned code and, only when required, the photo, attached to that punch. The photo is taken with the front camera, is never saved to your gallery and is deleted from the phone as soon as it is uploaded.
- Scanner: codes are read on the phone by Google ML Kit, which sends Google only technical diagnostics — never the images or the content of the codes (see the privacy policy).
- Without it: you can still sign in with your username and password, but punches that require a QR code or a photo can't be completed.
Internet
Needed to talk to the WFSuite servers. Without a connection, punches are kept on the phone and sent automatically when the connection comes back.
Motion sensors
The app uses the accelerometer for a subtle 3D tilt effect on some screens. It needs no permission, works only on the phone, and nothing is recorded or sent.
Storage on the phone
In its own private storage the app keeps only your sign-in tokens (in the encrypted Android Keystore / iOS Keychain), your language and theme, and punches waiting to be sent. It does not read your files, photos or contacts. Signing out removes the sign-in tokens; uninstalling the app removes everything it stored.
What the app does not ask for
Background location, microphone, contacts, photo library, calendar, Bluetooth, the advertising identifier or tracking across other apps. Notifications are shown inside the app; it does not ask for permission to send push notifications.
Changing a permission
- Android: Settings → Apps → WFSuite → Permissions.
- iOS: Settings → WFSuite.
How the data is used is explained in the privacy policy.