SimplePay Privacy Policy

Last updated: June 25, 2026 · Provided by Simple Source

SimplePay is a workforce time-clock app. Employees sign in, clock in and out of approved work sites, take breaks, and review their timesheets and pay stubs. This policy explains what information the app handles, how it is used, and what is shared.

Who we are and our role

SimplePay is published by Simple Source. The app is provided to you by your employer, who decides what data is collected and why. In privacy terms, your employer is the data controller and Simple Source acts as a data processor, operating the time-clock and payroll-viewing service on your employer's behalf.

This means questions about your personal employment data — what is recorded, how long it is kept, and how to access or correct it — are ultimately answered by your employer. You can also contact us using the details at the end of this policy.

Information we process

To provide the service, the app handles the following information:

• Account credentials — the username and password you use to sign in.
• Employee profile — your name, employee number, department, job, and assigned pay rate, as provided by your employer's system.
• Time records — clock in/out punches, breaks, lunches, and job transfers.
• Timesheets — the shifts and hours for your pay period.
• Pay stub data — earnings, deductions, benefit balances, and bank payment details. Bank account numbers are masked (only the last few digits are shown).
• Company information — your organization's name and address, used to label the app and configure the connection to your employer's server.

Location data

When you clock in or out, the app reads your device's location to confirm you are within a work-site boundary (a "geofence") that your employer has approved.

• Location is used only on your device to perform this check.
• Your location is not transmitted to or stored by our servers. Clock events sent to your employer's system contain only your employee, job, and department identifiers; the server records the punch time itself.
• Location is never used for tracking, profiling, or advertising.
• The app requests "while in use" location permission. If you decline, the geofence check cannot run.

Biometrics (Face ID, Touch ID, fingerprint)

You may optionally enable biometric sign-in for convenience. This is handled entirely by your device's operating system as a way to unlock your saved login. Simple Source never receives, stores, or transmits any biometric data — the app only learns whether the device confirmed your identity.

Camera

During first-time setup, the app can use the camera to scan a setup QR code that contains your company name and server address. No photos or video are stored, and nothing from the camera is transmitted.

How information is used

The information above is used solely to operate the service, specifically to:

• Sign you in and keep your session authenticated.
• Confirm you are at an approved site when you clock in or out.
• Record your time punches with your employer's system.
• Display your timesheets, pay stubs, and benefit balances.

We do not use your information for advertising, we do not build user profiles, and we do not sell personal data.

Data storage and security

• Your saved credentials are stored encrypted on your device.
• Sign-in tokens are short-lived and held only in memory during use.
• Data is sent to your employer's configured server over an encrypted (HTTPS) connection.
• Timesheet and pay stub details are fetched on demand and are generally not retained on the device after you leave the screen.

Sharing and third parties

The app communicates with a limited set of services:

• Your employer's backend — the system of record for your account, time, and payroll data, controlled by your employer.
• Google Maps (on Android) — used to display work-site boundaries on a map.
• OpenStreetMap Nominatim — used by administrators to look up an address when defining a work-site geofence. Only the address text is sent; your sign-in credentials and session token are never shared with this service.

The app contains no analytics, tracking, or advertising software, and we do not sell or rent your personal information to anyone.

Data retention

Information stored on your device (such as your saved login) is removed when you sign out or uninstall the app. Time, timesheet, and payroll records held in your employer's system are retained according to your employer's policies and applicable law.

Your rights

Because your employer controls your employment data, please direct requests to access, correct, or delete that information to your employer. For questions about how the SimplePay app itself handles data, you can contact Simple Source using the details below.

Use by minors

SimplePay is a workplace tool used by employees of the organizations that deploy it. It is not directed at the general public or marketed to children. Where an employer lawfully employs minors, those employees may use the app to record their time, and any personal data is handled the same way as for any other employee and under the direction of their employer. We do not knowingly collect information from anyone who is not an employee using the app for work.

Changes to this policy

We may update this policy from time to time. When we do, we will revise the "Last updated" date at the top of this page. Significant changes may also be communicated through your employer.

Contact us

If you have questions about this policy or how SimplePay handles your data, contact us at:

Simple Source
Email: privacy@simplesrc.com
[Company legal name and mailing address]