Privacy policy

Effective 2026. How Werktyd (“we”) handles personal information of business users and website visitors. Worker biometric data is covered in the workplace privacy notice.

What we collect

Account details you provide (your name, business email and company information) and basic technical logs needed to run and secure the service.

Why we use it

To provide the time-and-attendance service, bill it, keep it secure and support you. We do not sell your data or use it for third-party advertising.

Worker biometric data

When a worker chooses face clock-in, the enrolment capture is discarded after processing and is not stored by Werktyd; enrolment produces a numeric face template. Face clock-ins that cannot be verified automatically are different: the photograph taken at that moment is kept on our server as proof and shown to the worker’s manager to accept or reject. It is deleted on that decision, and in any case automatically after the review window named in the workplace privacy notice. Workers may use a PIN instead, at no penalty. The template is purged after the configured dispute buffer when the worker leaves. Time records are kept for the period the law requires (BCEA, 3 years).

Where it is processed

On secure servers in Germany (EU), recognised as providing adequate protection under POPIA section 72.

Cookies

A single session cookie keeps you signed in. No third-party tracking cookies.

Security

Encryption in transit, access control and audit logging. The identifying worker fields — SA ID number, phone number and pay — are AES-256-GCM encrypted at rest. Numeric face templates are not encrypted at rest, because a template has to stay a plain numeric array for the face comparison to work at all; they are protected instead by access control, role separation and audit logging. Worker names and worker numbers, and your own account name and sign-in email, are likewise stored unencrypted and protected by access control and audit logging.

Your rights

You may access, correct or delete your account data—email privacy@werktyd.co.za. You may complain to the Information Regulator (South Africa).