Privacy Policy
Last updated: May 23, 2026
1. Who we are
HelloTime is time tracking software operated by Meru Fintech. We are the data controller of the personal data you provide.
2. What we collect
Account information, tracked time, optional activity levels, optional screenshots, billing data, and usage metadata. We never sell your data.
If your employer enables HelloTime Attend (mobile clock-in), we additionally process face-template embeddings and GPS coordinates captured at clock-in / clock-out — see Section 2a below for the biometric & location notice.
2a. Biometric information notice (BIPA / state biometric laws)
Where HelloTime Attend is enabled, we collect a numeric face-template embedding from a selfie taken at clock-in for the sole purpose of verifying employee identity and preventing buddy-punching. This is a "biometric identifier" under the Illinois Biometric Information Privacy Act ("BIPA"), Texas CUBI, Washington H.B. 1493, and similar state laws.
- Purpose: attendance verification only. Embeddings are never used to identify you in any other context, sold, or shared with third parties.
- Raw selfie: not retained. Only the numeric template is stored.
- Storage: encrypted at rest; access restricted to your employer's attendance admins.
- Retention: for the duration of employment plus any period required by wage-and-hour record-keeping law (in the US, typically 3 years under the FLSA); deleted within 90 days of account closure or on a verified deletion request.
- Your rights: you may request access, correction, or deletion of your biometric template at any time by writing to [email protected].
- Consent: employers using HelloTime Attend are contractually required to obtain written employee consent before enabling face check-in.
3. How we use it
To deliver time tracking, online timesheets, payroll and invoicing features, to improve the product, to bill customers, and to comply with legal obligations.
4. Your rights (GDPR / CCPA)
You can access, correct, export or delete your data at any time from your account settings, or by writing to [email protected].
5. Data retention
We keep tracked time and timesheet data for as long as your account is active. Closed accounts are purged 90 days after deletion request.