Privacy Policy

• Account information. Your name and work email address, from your company staff account. You sign in with an email address and a password issued by the company; the password is stored only as a salted hash, never in plain text. We no longer use Google Sign-In.
• Location (geofence time clock). If you enable it, the app uses your device location — including in the background — to clock you in and out automatically as you arrive at and leave company stores and offices. It records the site and the time of each arrival and departure. It does not record or upload a continuous trail of your movements between sites. You can turn this off at any time in the app’s Settings or in iOS Settings; turning it off disables automatic clock-in/out.
• Motion & fitness (optional). If you enable the timekeeping integrity check, the app uses the device’s motion sensors to summarize whether your device was stationary during a shift (to detect a device left behind while clocked in). Only a summary is sent — never a continuous movement trail.
• Camera and photos. If you take or attach a photo, file, or signature for a form or checklist, it is uploaded to the company’s servers and linked to your submission. The camera and your photo library are used only when you choose to add an attachment.
• Form submissions. The answers you enter, plus your name, email, store, and role. If a specific form is set to record location, your device location is also captured at the moment you submit that form.
• Microphone and voice (AI assistant). If your account has the assistant’s voice feature and you use it, the app records the audio you speak while you are actively holding a voice turn. That audio is sent to OpenAI to be transcribed (see “Third parties we send data to” below). We do not keep the audio recording on our servers; the resulting text transcript is saved with your account.
• AI assistant messages. The messages you type to the in-app assistant, and the company data the assistant retrieves to answer you, are sent to Anthropic or OpenAI, depending on which service is configured and available (see below). Your conversations are stored on the company’s servers with your account.
• Work information. Your work hours, time-off requests, tasks, and related operational data used to run timekeeping, payroll, scheduling, and internal reporting.
• Push notifications. If you allow notifications, Apple issues a device token that we store so we can send you work alerts. You can turn notifications off in the app’s Settings or in iOS Settings.

These are the outside companies the app sends information to, and what each one receives. We do not control how these providers handle data beyond what their own terms and privacy policies say, and we make no claim on their behalf — please read their policies if that matters to you.

• OpenAI (voice and, when selected, AI assistant) — when you speak to the assistant, the audio recording of your voice is sent to OpenAI to convert your speech to text, and the assistant’s written reply is sent to OpenAI to generate the spoken audio you hear back. This audio processing happens only when you use the voice feature. For Chat and the text-processing part of Voice, iHishmeh may also send your messages and the company records used to answer them to OpenAI’s API to generate a reply when OpenAI is configured as the assistant provider or is used because the other provider is unavailable. See OpenAI’s privacy policy.
• Anthropic (AI assistant and other AI-assisted features) — when Anthropic is the configured and available assistant provider, the messages you send to the assistant and the company records it looks up to answer them are sent to Anthropic’s Claude API to generate a reply. This applies to both typed and voice conversations. Separately, a nightly job sends a summary of your own past questions to Anthropic to build a short working profile so the assistant understands your role. Other AI-assisted features send their input to Anthropic in the same way: notes generated from a meeting transcript you upload, triage of a maintenance request you submit, reading the text out of documents you upload (for example scanned checks and leases), and the automatic daily summaries of company operating data. Do not type or upload anything you would not want sent to an outside AI provider. See Anthropic’s privacy policy.
• Apple — push notifications are delivered through the Apple Push Notification service, which receives your device token and the notification content.
• Google Maps Platform — to estimate paid drive time between two company sites on your shift, we send the coordinates of the two company sites and a time of day to Google’s Distance Matrix service. We do not send your name, your account, or your device’s own location.
• Google Workspace — email the app sends you or about you (a form confirmation, an approval request, a password-reset link, an alert) is sent through the company’s Google Workspace account, so the contents of those messages pass through Google.
• Cloudflare — the app is served through Cloudflare, which carries the encrypted connection between your device and our servers and handles the network request (including your device’s IP address).

Some buttons and links in the app open forms hosted on JotForm (for example a time-off request or a store checklist). Anything you type into one of those forms goes to JotForm, not through the app, and JotForm’s own privacy policy applies to it.

The iOS microphone prompt is permission to use the microphone on your device. It is not, by itself, your consent to send audio to OpenAI. The app asks you separately, in plain language, before the first time you use Chat or Voice, naming OpenAI and Anthropic, saying what is sent, and explaining that the assistant provider may vary. You can decline and still use the rest of the app.

• We do not sell your personal information.
• We do not use your data for advertising or marketing.
• We do not track you across other apps or websites.
• The app contains no third-party advertising or analytics SDKs.

• Location, motion, notifications, and the voice feature can each be turned off at any time in the app’s Settings or in iOS Settings.
• The microphone is used only while you are actively using the voice feature, and the camera only when you choose to add an attachment.
• AI sharing. You can withdraw your agreement to share what you ask with OpenAI and Anthropic at any time in Settings → Hishmeh AI. Chat and Voice then stop working until you agree again; nothing else in the app is affected.
• Account deletion. In the app, go to Settings → Account → Request account deletion, or email [email protected]. Because accounts are issued by the company, an administrator completes the deletion — typically within 5 business days. Your account record and associated personal data are deleted; records we are required to keep (for example payroll and employment records) are retained.
• To ask about, access, or correct the information we hold about you, contact us using the details below.