Clockcake App 隱私權說明
App Privacy · 2026-10-27 · VAWIDEA Inc.
本頁補充說明 Clockcake iOS App 的資料處理方式。
This page supplements the Clockcake privacy policy for the iOS app.
帳號與出勤資料 / Account and attendance data
App 使用你現有的公司帳號，向 Clockcake 傳送登入資料與操作請求，並顯示你的公司、姓名、Email、出勤與申請資料。只有具備管理權限的使用者能查看團隊資料與審核申請。
The app uses your existing company account, sends sign-in information and action requests to Clockcake, and displays your company, name, email, attendance and requests. Team information and request reviews are restricted to authorized administrators.
手動 GPS 打卡 / Manual GPS clock-in
公開版僅在你主動開啟 App 並按下打卡、且公司設定要求 GPS 範圍驗證時，取得一次精確位置。座標隨該次打卡請求傳送到 Clockcake，供你與公司核對出勤。App 不持續定位、不記錄移動軌跡，也不會自動上班或下班打卡。
The public app requests a single precise location only when you actively use the app and initiate a punch that requires your company’s GPS area verification. Coordinates accompany that punch request to Clockcake for attendance verification by you and your company. The app does not continuously access location, record movement trails, or automatically clock you in or out.
權限與舊版測試設定 / Permissions and earlier test settings
App 僅請求使用期間的定位權限，不要求背景定位或通知權限。你可在 iOS 設定撤回定位權限；若公司要求 GPS 驗證，未授權時將無法完成該項打卡。第 10 版起已移除早期 TestFlight 版本的自動抵達與離開提醒；升級開啟 App 後，會停止舊地理圍欄監控並清除舊自動打卡設定與提醒。
The app requests When In Use location permission only, without requesting background location or notification permission. You can revoke location permission in iOS Settings; punches requiring company GPS verification cannot complete without it. Build 10 removes the automatic-arrival and departure-reminder features from earlier TestFlight builds. Opening the upgraded app stops legacy geofence monitoring and clears its automation settings and reminders.
裝置儲存與安全 / Device storage and security
登入憑證儲存在此裝置的 Keychain，不同步到其他裝置。出勤與申請資料只暫存在 App 記憶體；登出會清除登入憑證。資料透過 HTTPS 傳輸。伺服器會保存打卡與登入的 IP 位址及必要安全紀錄，用於公司網路規則驗證、登入安全與防止濫用。App 不含廣告追蹤或第三方分析 SDK。
Session credentials are stored in this device’s Keychain without syncing to other devices. Attendance and request data are held in app memory; sign-out removes session credentials. Data is transmitted using HTTPS. The server retains punch and sign-in IP addresses and necessary security records to enforce company network rules, secure sign-in and prevent abuse. The app contains no advertising trackers or third-party analytics SDKs.
保存、權利與聯絡 / Retention, rights and contact
伺服器上的帳號、出勤與申請資料依 Clockcake 隱私權政策保存，部分紀錄可能因法定保存要求無法立即刪除。如需查詢、更正或提出刪除要求，請聯絡公司管理員或 i@clockcake.me。
Account, attendance and request records on the server are retained under the Clockcake privacy policy; some records may require statutory retention. To request access, correction or deletion, contact your company administrator or i@clockcake.me.