Your Data.
Security Built for Trust.
Strong security protecting your attendance data. Transparent. Encrypted. Privacy-first.
Data Encryption
Encryption helps protect data in transit and at rest
GDPR-Aligned Privacy
Privacy practices designed around GDPR principles
Backup & Reliability
Review our documented data protection and service practices
Security commitment: Timenox uses layered security controls, encryption, access controls, and privacy-focused attendance verification practices. We explain our approach transparently so customers can evaluate how their data is handled.
How We Protect Your Data
Encryption in Transit and at Rest
Data transmitted between your devices and our servers is protected using TLS encryption. Data at rest is encrypted using industry-standard encryption algorithms, with encrypted backups and access controls protecting stored attendance records.
- TLS encryption for data in transit
- Industry-standard encryption for stored data
- Encrypted database backups
Device-Based Security
Every employee device is registered and verified. We create a secure device fingerprint designed to block unauthorized check-ins even if someone has access to your company QR code, so that only registered devices can mark attendance. As with any device-identification technology, this is not infallible — see our Terms of Service for its limitations.
- Secure device registration and fingerprinting
- Instant device removal for lost or stolen phones
- Audit logs for all device additions and removals
Role-Based Access Control
Employees can only view their own attendance records. Managers see only their team's data. Administrators have full access with detailed audit trails. You control who sees what, with granular permission management.
- Hierarchical permission system
- Audit records for supported administrative actions
- Account authentication and access controls
Secure Infrastructure
Your data is hosted on cloud infrastructure with a 99.9% uptime target, with automated backups and redundant storage. We never sell your data or share it with advertisers. Data is shared only with the limited set of infrastructure and payment sub-processors needed to run the Service — see the Privacy Policy and Data Processing Agreement for the full sub-processor list and backup practices.
- Cloud infrastructure and backup safeguards
- Automated backups
- Security practices designed to support responsible data handling
Privacy-First Design
No Biometric Data Collection
Unlike fingerprint or facial recognition systems, Timenox doesn't collect or store any biometric data. We verify identity through device ownership and location, not physical characteristics. This means no permanent biological data storage and no risk of biometric data breaches.
GDPR-Aligned Privacy Practices
Timenox is designed to be aligned with GDPR principles and global privacy best practices. We do not claim blanket compliance with every jurisdiction's law. Our privacy documentation explains data roles, processing practices, data subject rights, and our approach to customer compliance obligations.
Data Retention Control
Available data retention and export options depend on the features enabled for your account. Contact Timenox if your organization has specific retention, deletion, or export requirements.
No Advertising or Data Monetization
We never sell, rent, or share your data with advertisers, and we don't monetize your data. Data is used to provide the attendance tracking service you signed up for. As described in our Privacy Policy, limited data is shared with infrastructure and payment sub-processors strictly to operate the Service, and with legal authorities where required by law.
Questions About Security?
We're transparent about our security practices and happy to answer your questions.