Privacy Policy

Information We Collect

Account credentials

The App collects your email address and password to authenticate with the Abilitrac system. Credentials are transmitted securely over HTTPS and are not stored on the device beyond a session token.

Authentication tokens

A session token is stored in encrypted device storage to keep you logged in. It is deleted when you log out.

Location data

When you clock in or out with a client that requires Electronic Visit Verification (EVV), the App captures your GPS location. Location is only collected at the moment of clock-in or clock-out and is not tracked continuously. Location data is sent to the Abilitrac system and is not shared with third parties.

Photos

For EVV-required visits, the App captures a photo using your device camera. Photos are compressed and transmitted to the Abilitrac system. They are not stored on your device after upload and are not shared with third parties.

Biometric data

If you enable biometric login (fingerprint or Face ID), authentication is handled entirely by your device's operating system. Biometric data never leaves your device and is never transmitted to any server.

Error reports

The App may automatically send error reports to the Abilitrac system when crashes or unexpected errors occur. These reports include technical information (error type, stack trace, app version, device platform and OS version) but do not include personal data.

How We Use Your Information

All data collected by the App is used solely to:

• Authenticate you with the Abilitrac system
• Record time-tracking entries
• Fulfill Electronic Visit Verification requirements
• Diagnose and fix technical issues

Data Sharing

We do not sell, rent, or share your personal information with third parties. All data is transmitted only to the Abilitrac system operated by your employer's organization.

Data Storage and Security

• All network communication uses HTTPS encryption
• Authentication tokens are stored in encrypted device storage
• Photos are transmitted and not retained on the device
• Location data is collected only at point-of-use, not continuously

Your Rights

Contact your organization's Abilitrac administrator to request access to, correction of, or deletion of your data.

Changes to This Policy

We may update this policy from time to time. The "Last updated" date at the top will reflect the most recent revision.

Contact

For questions about this privacy policy, contact your organization's Abilitrac administrator or email support@cubicle7.com.