Clockcake Android App 隱私權說明
App Privacy · 2026-11-01 · VAWIDEA Inc.
本頁補充說明 Clockcake Android App 的資料處理方式。
This page supplements the Clockcake privacy policy for the Android app.
帳號與出勤資料 / Account and attendance data
本 App 使用現有公司帳號，不提供註冊或訂閱購買。登入時將 Email、密碼或驗證碼傳送至 Clockcake，並依權限讀取公司、姓名、Email、出勤紀錄與申請資料。管理員可查看團隊狀態與審核申請；權限由伺服器驗證。
This app uses existing company accounts and offers no sign-up or subscription purchases. Sign-in sends your email and password or verification code to Clockcake. The app accesses company, name, email, attendance and request data according to server-verified permissions. Authorized managers can view team attendance and review requests.
前景定位 / Foreground location
只有在你主動打卡，且公司打卡地點設定需要 GPS 範圍驗證時，App 才會說明用途並請求使用期間的精確定位權限。取得的一次位置、準確度及取得時間會隨該次打卡傳送至 Clockcake，供你與公司驗證出勤。App 不在背景追蹤、不記錄移動軌跡、不自動打卡。離開 App 或定位逾時會停止取得位置。
Only when you initiate a punch requiring company GPS area verification does the app explain the purpose and request precise location while in use. A single location fix, accuracy and capture time accompany that punch to Clockcake for attendance verification by you and your company. The app does not track background location, record movement trails or automatically punch. Location requests stop when the app leaves the foreground or times out.
裝置儲存與安全 / Device storage and security
登入憑證使用 Android Keystore 金鑰加密，儲存在 App 私有空間，並停用系統備份；登出清除本機登入憑證。出勤與申請資料只暫存在記憶體。資料僅透過 HTTPS 傳輸，App 不允許明文流量、不將驗證資料傳至其他網域。伺服器會保留打卡與登入 IP 位址、帳號識別資料與必要安全紀錄，用於公司網路規則、帳號安全與防止濫用。
Session credentials are encrypted with an Android Keystore key in private app storage with system backup disabled. Sign-out clears local credentials. Attendance and request data are held in app memory. Data uses HTTPS; cleartext traffic and sending credentials to other origins are disallowed. The server retains punch and sign-in IP addresses, account identifiers and necessary security records for company network rules, account security and abuse prevention.
示範模式、廣告與權限 / Demo, advertising and permissions
「先看看 Clockcake」使用本機示範資料，不連線至出勤 API，也不取得位置。示範打卡與審核不會修改真實資料。App 不含廣告、廣告追蹤或第三方分析 SDK，不要求背景定位、相機、麥克風、聯絡人或通知權限。你可在 Android 設定撤回定位權限；公司要求 GPS 驗證的打卡可能因此無法完成。
Explore Clockcake uses local sample data without contacting the attendance API or accessing location. Demo punches and reviews never change real records. The app has no ads, advertising trackers or third-party analytics SDKs, and requests no background location, camera, microphone, contacts or notification permission. Revoke location in Android Settings; punches requiring company GPS verification may then be unavailable.
資料保存與刪除要求 / Retention and deletion requests
伺服器帳號、出勤與申請資料依完整隱私權政策及公司設定保存；部分出勤紀錄可能依法必須保留。若要查詢、更正、刪除個人資料或帳號，請使用 App「帳號」頁的聯絡入口、聯絡公司管理員，或寄信至 i@clockcake.me，提供帳號 Email 與公司名稱並說明要求。請勿提供密碼或驗證碼。我們將確認身分並告知處理結果及需依法保留的資料。
Server account, attendance and request records follow the full privacy policy and company settings; some attendance records may require statutory retention. To request access, correction, deletion of personal data or account deletion, use the contact entry in the app Account screen, contact your company administrator, or email i@clockcake.me with your account email, company name and request. Do not send passwords or verification codes. We verify identity and explain the outcome and any data requiring legal retention.