Privacy policy
Last updated: October 8, 2026
Carpincho HR is an attendance tracking system for companies. Employees clock in from the app on their phone, and the company manages it from a web dashboard. This page explains what data is processed, why, and who can see it.
- Location is taken only at the moment of clocking in or out. The app does not track anyone during the day and does not use location in the background.
- Fingerprints and faces are checked by the phone. We never receive or store them.
- The camera is used only to read the work site's QR code. No photos are stored.
- Your data is seen by your company and by you. We don't use it for anything else.
- Punch coordinates are deleted after 12 months.
- We don't sell data or show ads.
1. Who is responsible
The company that uses Carpincho HR (your employer) decides what data it enters and how it uses it: it is the controller of that data. Carpincho HR is a service by CARPINCHO, run by S. Cetrangolo, based in Buenos Aires, Argentina (“we”), which processes the data on the company's behalf to provide the service.
For any question about your data, you can ask your employer or write to us at [email protected].
2. What data is processed
Data entered by your company
First and last name, ID number (your username for the app), employee number, department, email and phone if entered, your assigned schedule and the sites where you can clock in.
Punches
Type (in or out), date and time (server time), method (app, QR or code), how you confirmed your identity (biometrics or the phone's PIN, as reported by the app), and the result (valid, flagged or rejected) with its reason. When clocking in or out, your location at that moment is recorded: latitude, longitude, accuracy, whether the phone's system marked it as mocked, and the distance to the work site.
Requests
The absences, time off and punch corrections you request, with the reason you write, and your company's answer.
Your phone
An installation identifier generated by the app, the device model, operating system, app version, and whether biometrics are set up. Each time you open the app, a check is run and its result is reported: whether location and notification permissions are granted, whether location is on and precise, whether GPS responded and its approximate accuracy, and whether you are on Wi-Fi or mobile data. This check does not send coordinates. If you allow notifications, we store the token the system uses to deliver them. On iPhone, an Apple key (App Attest) that confirms the app is the original.
Activity log
Sign-ins, changes, manual punches and approvals are logged with date, time and IP address, for security and so that every correction is documented.
Dashboard admins
Username, email if entered, and a log of their actions.
3. What is not processed
- Fingerprints, faces or any other biometric data. The phone's operating system does the check and the app only receives “confirmed” or “not confirmed”.
- Your location outside the moment of clocking in or out. There is no tracking and no background use.
- Photos or videos. The camera is only used to read the QR code.
- Contacts, files or any other content on your phone.
4. Why it is used
To record attendance; calculate hours worked, overtime, late arrivals and absences; check that each punch is made at the work site and by the right person; manage requests; send notifications and reminders; provide support; and keep the service secure. We don't use the data for advertising and we don't sell it.
5. Who can see it
- Your company. Dashboard admins see your data, your punches (including the location of each punch), your hours and your requests.
- You. You see your punches, hours and requests in the app.
- Us. We don't access employee data unless the company asks us for help; when that happens, it is logged. To run the service we see general figures (number of employees, app usage, types of phones), without names or locations.
6. Who it is shared with
Only with the providers we need to run the service: the hosting provider for the server and database; Expo, Apple and Google, to deliver notifications (they receive the device token and the notification text); and the mail server for emails. The dashboard shows OpenStreetMap maps. We don't share data with anyone else unless required by law.
7. How long it is kept
Punch coordinates are deleted automatically after 12 months; the punch record remains. Other data is kept while your company uses the service. If the company stops using it, data is kept until it asks for deletion. If the company deactivates you, your history remains available to it.
8. Security
All traffic is encrypted (HTTPS). Passwords are stored hashed and the app session is kept in the phone's secure storage. Each account is tied to a single phone, sign-in attempts are rate-limited, each company's data is kept separate, and the change log cannot be deleted.
9. App permissions
- Location, while using the app: to check that you clock in at the work site.
- Camera: to read the site's QR code.
- Face ID or fingerprint: to confirm it's you when clocking in.
- Notifications: for alerts and clock-in reminders.
10. Your rights and how to request deletion
You have the right to access, correct, update and request deletion of your data, free of charge. Since your data is managed by your company, the fastest way is to ask your employer. You can also write to [email protected] with your name, ID number and company name: we will coordinate with your employer and get back to you. Note that your company may be legally required to keep attendance records.
We answer access requests within 10 calendar days and correction, update or deletion requests within 5 business days, as set out in Argentine Law 25,326. If you are in Argentina, you can also contact the Agency for Access to Public Information (AAIP), the data protection authority, at argentina.gob.ar/aaip.
11. If you work outside Argentina
Your data may be stored on servers outside your country. If the EU General Data Protection Regulation applies to you, you also have the rights to restriction, portability and objection, and you can file a complaint with your local supervisory authority. In that case, the legal basis is your employment relationship and your company's legitimate interest in recording attendance.
12. Children
Carpincho HR is a workplace tool and is not directed at children.
13. Changes
If we change this policy, we update the date above. If the change is significant, we notify the companies using the service.