Jooule Team privacy policy

Who is responsible

Jooule LLC, a New York limited liability company, provides Jooule Team to restaurants that use Jooule.

• Your employer decides. The restaurant you work for decides what your staff data is used for. It is the controller of that data, and we process it on its behalf.
• We decide for our own part. For what we handle for our own purposes — account security, sign-in codes, preventing abuse and running the app itself — Jooule LLC is the controller.

What the app collects, and why

• Your name, role and phone number, from the staff card your employer keeps. The phone number is used to text you a one-time sign-in code.
• Sign-in codes. Stored only in hashed form. A code expires after 5 minutes and is deleted about an hour after it expires.
• Device sessions. A phone that signs in stays signed in for up to 180 days. Your employer’s manager can disconnect a device at any time.
• Push notification tokens (Apple Push Notification service or Firebase Cloud Messaging), used only to deliver your employer’s notifications. A token is deleted when the device is disconnected or its session ends.
• Shifts, clock-in and clock-out times, hours and tips. These are your employer’s records.
• Tasks you complete, including photos you take for a task and readings or numbers you enter, such as a fridge temperature.
• Team chat messages. Kept for 12 months; photos in chat for 90 days. Your employer and the restaurant’s owner cannot read private one-to-one messages.
• Your language preference.
• Device information: the phone’s model, operating system and app version, and a random number the app creates to tell your phone apart. Your employer sees it in its device list, and we use it for support.

What the app does not collect

• No location. The app does not use GPS or any location service. Clocking in does not record where you are.
• No contacts, and no advertising ID.
• No tracking across other apps or websites, and no ads.
• Your data is never sold.

The camera

The app opens the camera only when you choose to take a photo for a task or for chat. The photo goes to your employer’s account.

Who receives the data

• Your employer, whose records these are.
• Our service providers: the hosting provider that runs our servers, the SMS providers that deliver sign-in codes, and Apple and Google, which deliver push notifications.
• Authorities, when the law requires it.

How long it is kept

Sign-in codes, sessions, push tokens and chat are kept for the periods given above. Everything else is kept for as long as your employer keeps you on its staff, and after that for as long as your employer must keep its records by law — in some countries attendance records must be kept for years.

Correction, deletion and your rights

Ask your employer, who controls your staff data, to correct or delete it. Once your employer removes you from its staff, your sessions and push tokens end.

You can also write to us at hello@jooule.com. We will pass your request to your employer, or act on it ourselves as its processor.

Uninstalling the app removes it from your phone. It does not delete your employer’s records.

Security

Sign-in codes are stored hashed, a session belongs to one restaurant, and everything between the app and our servers is encrypted in transit.

Children

Jooule Team is a staff app and is not meant for anyone under 16.

Contact

Jooule LLC, 41 State Street, Suite 112, Albany, NY 12207, United States. Email: hello@jooule.com.

The privacy policy for this website is at jooule.com/privacy.