Privacy Policy

Effective 27 July 2026 · Last updated 27 July 2026

This policy explains what personal data Wrenta processes, why, who can see it, how long we keep it, and the rights you have over it.

1What we collect

Depending on what your organization enables, Wrenta processes:

• Account & profile — name, email address, phone number, department, job title and profile photo, entered by you or your organization’s administrators.
• Employment records (where enabled) — personnel number, start/probation/contract dates, qualification notes, and, only where your organization’s process requires it, a social-security number. These are visible only to authorized administrators, not to co-workers.
• Time & schedule — clock-in/out timestamps, breaks, assigned shifts and schedule changes, used to calculate worked hours and timesheets.
• Location at clock-in — see §3.
• Absence & leave — vacation and sick-leave requests (dates, type) and any documents you choose to attach (e.g. a doctor’s note).
• Documents — files you or your organization upload to your employee profile (e.g. contracts, certificates).
• Messages — chat messages and announcements sent within the app.
• Device & diagnostics — a push-notification token, and crash/diagnostic reports (via Firebase Crashlytics) to keep the app stable.

2Why we process it & legal basis

We do not use your data for advertising, and we do not sell it.

3Location data

When you clock in or out, the app captures your device location once, at that moment, to confirm you are at an authorized work location. We do not track your location in the background or between clock events. Location logs are retained for a limited period (default 90 days) and then automatically deleted. You control the operating-system location permission and can revoke it at any time in your device settings.

4Biometric authentication

If you enable Face ID / Touch ID / fingerprint unlock for clock-in, that check is performed entirely by your device’s operating system. Your biometric data never leaves your device and is never sent to or stored by us — we only receive a yes/no confirmation that the device authenticated you.

5Who can see your data

Your data is visible only within your employing organization — never shared with other organizations that use Wrenta, and never sold. Within your organization, visibility follows role: managers and administrators see the employee records needed to run scheduling and payroll; co-workers see only what’s needed for shift coordination (for example, names on a shared schedule).

6Service providers (processors)

We use a small set of vetted providers to run the service. They process data only on our instructions:

Keep this list current. If you add or change providers, update this table — GDPR expects an accurate picture of who processes personal data.

7International data transfers

Some of our providers process data on servers in the United States. Where data leaves the European Economic Area, it is protected by appropriate safeguards — in particular the European Commission’s Standard Contractual Clauses — so that it receives an equivalent level of protection. You can request details of these safeguards using the contact below.

8How long we keep it

We keep your data for as long as your account is active, plus any retention period required by employment or tax law in your organization’s jurisdiction. GPS location logs are purged automatically after a limited period (default 90 days) regardless of account status. When an account is deleted (see §10) we anonymize the personal data; some records (e.g. hours worked) may be retained in de-identified form where required for legal or tax compliance.

9Your rights

Subject to applicable law, you have the right to: access your data; correct inaccurate data; request erasure; export a copy (data portability); object to or restrict certain processing; and withdraw consent where processing is based on it. You also have the right to lodge a complaint with your local data-protection supervisory authority.

Because your employer is the controller, please direct requests to your organization’s administrator first; you can also reach us at support@wrenta.co and we will assist the controller in responding.

10Deleting your account

You can delete your account and export your data at any time from Profile → Privacy in the app. Deletion anonymizes your personal data as described in §8. If you cannot access the app, email support@wrenta.co from your registered address and we will process the request. Step-by-step instructions are also available at wrenta.co/delete-account.

11Security

Data is encrypted in transit (HTTPS/TLS). Access is restricted by role and protected by authentication. We use reputable infrastructure providers and apply reasonable technical and organizational measures to protect your data; no method of transmission or storage is ever completely secure, but we work to keep the risk low.

12Children

Wrenta is a workplace tool intended for use by employees. It is not directed to children and we do not knowingly collect data from anyone under the age at which they can lawfully be employed in their jurisdiction.

13Changes to this policy

We may update this policy from time to time. When we do, we will change the “Last updated” date above and, for material changes, provide a more prominent notice.

14Contact

For privacy questions or to exercise your rights: support@wrenta.co. For data your employer controls, contact your organization’s administrator.