Privacy Policy

Last updated: 31 October 2026

WP-TimeKeeper is time tracking for companies: the web app, the iPhone and iPad app and the server are developed and operated by Waterproof digital media design GmbH. We process personal data in accordance with the Swiss Federal Act on Data Protection (FADP).

Controller and roles

Waterproof digital media design GmbH
Eggenrain 16
5444 Künten
Schweiz / Switzerland
thomas@waterproof.li

The company (employer) that uses WP-TimeKeeper is responsible for its employees' working time, employment and absence data. We process this data on its behalf and only to provide the service. We are responsible for operating the service, the accounts and security.

Data we process

Account: name, e-mail address, language and password (stored only as a secure hash).
Employment: company, role (employee or manager), canton, workload, weekly hours, holiday days, start and end of employment and – optionally – the year of birth (only for the holiday entitlement under 20).
Working time: date, start, end, breaks, notes, assigned customer and a running timer.
Absences: type (e.g. holidays, sickness, accident, military service), period, note and status. Diagnoses or medical certificates are not recorded.
Company data: the company's customers (name, address, contact, hourly rate), company closures, public holidays and settings.
Technical data: sign-in sessions (IP address, browser or device name, times), failed sign-ins (deleted after 2 days) and a log of changes within a company (who changed which time, absence or setting and when).

Who sees the data

Employees see and change only their own data. Managers of a company see the data of all employees of that company. A company's data is never visible to other companies. We access data only as far as needed for operation, security or support.

Cookies in the web app

The web app only sets technically necessary cookies: the sign-in session and a security token. They are deleted when you sign out and expire after 12 hours at the latest (2 hours without activity). There are no analytics, tracking or advertising services and no third-party content.

iPhone and iPad app

After signing in, the app receives an access token that is stored only in this device's keychain (valid for one year, 90 days without use). If you protect the app with Face ID, Touch ID or the device passcode, the operating system checks it – we receive no biometric data. The reminder for a running timer is a notification scheduled only on the device. We store the device name of the sign-in so that sign-ins can be recognised and ended. The app contains no ads, no tracking and no analytics.

E-mails

We only send e-mails needed for the account – invitations and links to set a new password. They are sent through our e-mail provider. For support we store recipient, subject, time and result, and delete them after 12 months.

Location and disclosure

The server is operated by us in Switzerland; all connections are encrypted (HTTPS). We do not sell data and do not pass it on to third parties unless required by law. If a company exports data (e.g. as a CSV or Excel file), it is responsible for its further use.

Retention and deletion

Data is kept as long as the company uses WP-TimeKeeper. Under Swiss labour law, employers generally have to keep working time records for five years; employees who leave are therefore deactivated, not deleted immediately. When a company is deleted, all its data is removed from the server at once. Backups are overwritten after 30 days. Signing out of the app deletes the access token on the device.

Your rights

You can request information about your data, have incorrect data corrected and – unless it must be kept – deleted. For working time and employment data, please contact your employer first; in all other cases contact us (address above). You can also lodge a complaint with the Swiss Federal Data Protection and Information Commissioner (FDPIC).

Changes

We update this policy when the service changes. The version published here applies.