Privacy Policy for Timestat (formerly Attendly)

Last Updated: October 31, 2026

At Timestat (formerly Attendly), your privacy is of utmost importance to us. This Privacy Policy outlines how Timestat collects, uses, and protects your information.

Information We Collect

Timestat (formerly Attendly) collects minimal personal information necessary for the provision of our services. The primary information we require from you are your login credentials (e.g., email address and password, or other authentication tokens) to secure your account and provide access to the Timestat platform.

Location Data

We collect your precise location data (latitude and longitude) when you use the clock-in and clock-out features within the application. This data is used to:

Verify your proximity to designated office locations for attendance purposes.
Record the location from which you clock in and out. This location is stored as a Google Maps URL in your attendance records, accessible by your employer/administrator.

This location data is essential for the core functionality of our attendance tracking system. We do not share your precise location data with third parties for advertising or other purposes beyond the scope of providing and improving our attendance services to your employer.

Face and Fingerprint Data

If your employer uses Timestat attendance terminals (kiosks), the terminal can recognise you by your face or, where it has a fingerprint reader, your fingerprint. This is biometric data, and we treat it as sensitive personal data. We collect it only for employers who choose to use these features.

Enrolment: when your employer enrols you, we create a face template from your photo, and a fingerprint template if you enrol a finger. A template is a set of numbers worked out from your face or finger. It is not a picture.
Where it is kept: templates are stored in your employer's Timestat account and on your employer's terminals, so you can be recognised even when a terminal is offline.
When you clock in or out: the terminal takes a photo and compares your face or fingerprint with the enrolled templates. The photo is saved with the attendance record, together with the time and the terminal's location, and your employer can see it.
Faces that are not recognised: the terminal may keep the photo so an administrator can say who it was. These photos are private to your employer's administrators, deleted once reviewed, and deleted automatically after 14 days.
Offline: while a terminal has no internet connection, it keeps clock records encrypted on the device until it can send them.
Processing: face and fingerprint matching runs on the terminal and on our own servers. We do not send biometric data to third-party recognition services.

Biometric data is used only to record attendance. It is never used for advertising, never sold, and never used to identify you anywhere other than your employer's attendance system.

Your employer decides whether to use biometric attendance and is responsible for telling you about it and having a lawful basis, such as your consent, under the Nigeria Data Protection Act 2023 or other law that applies. Your employer's administrators can delete your face and fingerprint data at any time. To see, correct, or delete your data, ask your employer, or contact us at the address below.

How We Use Your Information

The information we collect is used solely for the purpose of providing and improving the Timestat service (formerly Attendly), including:

To authenticate your access to the platform.
To record attendance, including recognising you at an attendance terminal by your face or fingerprint where your employer uses this feature.
To manage your account and provide customer support.
To ensure the security and integrity of our services.
To communicate with you regarding service updates, security alerts, and administrative messages.

Timestat does NOT use your personal data for advertising, marketing, or any other commercial purposes unrelated to the core functionality of the Timestat service. We do not sell, rent, or share your personal information with third parties for their marketing purposes.

Data Security

We implement a variety of security measures to maintain the safety of your personal information when you enter, submit, or access your personal information. We use industry-standard practices to protect your data from unauthorized access, alteration, disclosure, or destruction.

Changes to This Privacy Policy

Timestat (formerly Attendly) may update this Privacy Policy from time to time. We will notify you of any changes by posting the new Privacy Policy on this page. You are advised to review this Privacy Policy periodically for any changes.

Contact Us

If you have any questions about this Privacy Policy, please contact us at support@timestat.workstat.io or through the appropriate channels provided within the Timestat application or website (formerly Attendly).