Privacy Policy · BuildFlow Worker

Mobile app for workers · Last updated: 7 July 2026

The BuildFlow Worker app is intended solely for workers of BuildFlow customer companies, to record attendance (clock-in, clock-out and breaks) and to look up their hours. This policy explains what data we process and why.

1. Data controller

Each worker's data is processed on behalf of the employing company (a BuildFlow customer), which is the data controller. BuildFlow acts as the platform provider (processor). To exercise your rights, contact your employer first.

2. What data we collect

Identification: name, email, phone, trade, certifications and profile photo (optional), provided by your company or by you.
Clocking records: date and time of clock-in, clock-out and breaks; hours worked.
Location (GPS): only when your company turns this option on, and only at the moment the shift starts and ends. The app does not track your location in the background.
Technical data: device model and IP address at the time of the record, for security and audit purposes.
Notifications: a device identifier (push token) so that we can send you reminders and company notices.

3. What we use the data for

Solely to: record attendance and calculate working hours; make that information available to your company for management and payroll; send reminders and notices; and keep the account secure. We do not sell your data and we do not use it for advertising.

4. Location

A recolha de GPS é optional and configured by your company. Quando activa, a localização é registada apenas ao picar o ponto (entrada/saída), para confirmar que o registo foi feito no local de trabalho. Pode recusar a permissão de localização no seu dispositivo; nesse caso, se a empresa a exigir, poderá não conseguir registar o ponto pela app.

5. Who we share it with

Your data is accessible to your employer through the BuildFlow dashboard. We use infrastructure providers (database hosting and notification delivery) who process the data only on our behalf and under contract. Your data is not passed to third parties for their own purposes.

6. Retention

Time records are kept for as long as the employment relationship and the company's legal obligations require. If you delete your access account, your login credential is removed; the record of hours belongs to the company and is kept by it in line with its legal obligations.

7. Your rights

Under the GDPR you have the right of access, rectification, erasure, restriction and portability of your data. You may exercise these rights with your company. In the app you can, at any time, change your photo, your contact details and your password, and delete your access account under Profile → Delete account.

8. Security

Access is protected by authentication and each worker sees only their own data. Communications are encrypted (HTTPS) and access to the database is controlled by security policies applied to each individual record.

9. Contact

For questions about this policy or about how your data is handled, contact your company or BuildFlow support at suporte@buildflow.pt.