Cerqa privacy policy

Your employer is the data controller: they decide which data is processed and why. Cerqa is the processor: we process the data on their instructions and on their behalf.

In practice this means access, rectification and erasure requests go to your employer, and Cerqa cannot delete a company's records on its own, not even at the request of the person they describe.

This list is exhaustive. The app collects nothing else.

• Latitude and longitude: only when you clock in or out, and only if you granted the location permission. If you deny it, the punch is still recorded, without coordinates.
• Clocking method: NFC, GPS or manual.
• First name, last name, email, phone, job title and department: the app only reads them. Your employer creates them from the web dashboard; the app does not create accounts.
• Chat messages, their attachments and reactions.
• Form and survey responses.
• Support tickets and their messages.
• Absence requests and shift swap requests.
• Task status.
• Notification token and phone platform.
• Chosen language: Spanish, English or German.
• Documents you upload.

We say this explicitly because people usually assume otherwise:

• No diagnostics or analytics data. There is no Sentry, no Crashlytics and no third-party SDK.
• No advertising identifier.
• No access to your contacts, health data, financial data or browsing history.
• No advertising.
• No tracking across apps or across websites.
• We do not sell data and we do not share it with data brokers.

Supabase: hosting and database. Everything listed above lives there.

Expo and then Apple (APNs) or Google (FCM): they deliver push notifications. The notification carries readable text, for example "Your shift on Tuesday 19 August, 09:00–17:00 has been cancelled". That means the day and time of a shift, and the fact that you work for that company, pass through those services. It is not advertising or tracking, but it is a real disclosure and we prefer to state it rather than hide it. If you turn notifications off, nothing is sent.

Google: only if you sign in with your Google account. It is optional and serves only to access an account your employer already created.

The app includes an assistant called CERQAI that answers questions about your work: your shifts, your hours, your absences and the content of the documents your company uploads to the knowledge base. To answer, your question and the relevant document fragments are sent to an artificial intelligence service that generates the reply. That service processes the text only to answer you; it is not used to train models or for advertising.

Your CERQAI conversation history is stored only on your phone, not on our servers. If you uninstall the app or clear its data, the history goes with it.

Time and absence records are not erased on request: they are employment records your employer is required by law to keep, including after you leave. In Spain, RD-ley 8/2019 sets four years. GDPR allows this in Article 17(3)(b), which exempts processing necessary to comply with a legal obligation.

The rest of your personal data is deleted when your account deletion is processed. The account deletion page lists exactly what is erased and how to ask for it.

You can ask for access to your data, its rectification, its erasure, restriction of processing and portability. Those requests go to your employer, who decides. If you write to us, we pass the request to whoever administers your account.

If you believe your data is not being handled properly, you can complain to a data protection authority: in Spain, the Agencia Española de Protección de Datos (AEPD, www.aepd.es); in Germany, the federal authority (BfDI) or your state authority. If you live elsewhere, to your country's supervisory authority.

Write to us at privacidad@cerqa.de.