WorkPro is a time clock a business uses to record when its people work and where that work happened. So this is a policy about two relationships, not one — yours with us, and yours with your employer.
Last updated 17 August 2026, for v0.1.
Two parties hold information about you here, and you ask them for different things.
Your employer chooses to use WorkPro, decides who is on the roster, enters your employment details and decides how long records are kept. Corrections and deletions of your work record are theirs to make — their admin is who can actually do it.
Moretti Dev writes the app and runs the servers it syncs to. We do not sell, share, mine or advertise against any of it, and we do not go looking through a business's records except where we must to fix a fault somebody has reported to us.
This is the part worth reading closely, because it is the part that follows you.
When it runs. Only between clocking in and clocking out, and only if you have agreed. Not on your day off, not before your shift, not after you clock out. iOS shows its own indicator the whole time any app uses location, and that indicator is the ground truth — not this page.
What is kept. The coordinates recorded when you clock in and clock out; a trail of where you were during the shift; and the places you stopped for ten minutes or more, with the street address looked up from the coordinates by Apple.
What it is for. Working out which job your hours belong to, showing where a day went, and letting a broken-up day be repaired from what actually happened. Nothing else.
Your employer can switch it off entirely, for everyone, in which case no trail is recorded at all.
Before any trail is recorded you are shown a disclosure and asked to agree by typing your name. Your agreement is stored with the date and the version of the disclosure you saw, so what you actually agreed to stays clear.
Declining costs you nothing. You clock in and out as normal and your hours count in full — only the trail is missing, and stops simply go unattributed for somebody to sort out by hand. You can withdraw in Settings at any time, and revoke location access outright in iOS Settings, which stops it whatever the app believes.
Who you are. Your name and email address, and the address of your profile picture if your sign-in provider supplies one. You sign in with Apple or with Google; WorkPro never sees, receives or stores a password. If you use Hide My Email, we only ever hold Apple's relay address, never your real one.
Your time. When you clock in and out, breaks you take, and any notes on a shift.
Your employment record. Whatever your employer chooses to enter: role, pay rate, employee number, phone number, date of birth, start date and free-text notes. This is the most sensitive material in the app, and it is visible to the people listed below.
No contacts, photos, camera, microphone, health data, browsing history or advertising identifiers. There is no analytics SDK and no advertising SDK in the app. Nothing is sold to anybody, in any form, including in aggregate.
Businesses are sealed off from one another, so nobody at another company sees anything of yours. This is enforced by rules on the server and not merely by what the app chooses to display — an altered copy of the app still cannot read what it is not entitled to.
Time and location records are kept for as long as the business keeps using WorkPro, because they are the evidence behind hours that have been paid — what either side would rely on in a dispute about a wage. An admin can delete a crew member, which removes them from the roster and from every shift.
You can delete your own account from Settings › Delete account in the app. That removes your sign-in and your personal record. Shifts you worked may be kept by your employer as their payroll record; if you want those gone too, their admin can delete them.
On your device, and in Google Firebase (Firestore) in the United States, under the business you belong to.
WorkPro is for people in employment and is not directed at children under 13.
The consent disclosure in the app is versioned. If what is recorded about you changes, you are asked again rather than quietly moved onto new terms.
For anything your employer's admin cannot resolve: support@moretti-dev.com