Legal

ETime Privacy Policy

Effective November 12, 2026 · Applies to ETime for iPhone, iPad, Mac and Android, and to this website

The short version:

ETime is a time-entry app for people whose employer uses the Hess System. It sends your data only to your organization's Hess System, and to your company's sign-in page if you use single sign-on.
Your time records belong to your organization, which controls how long they're kept.
Location is optional and used only to clock in and out at a work site (Android). Your coordinates stay on your device and are never sent to the Hess System.
No ads, no analytics or tracking SDKs, and no selling of data. Signing out erases everything ETime stored on your device.

1. Who we are

ETime is developed and published by Gabe Sanchez ("we", "us"). This policy explains what the ETime mobile and desktop app ("ETime" or "the app") does with information about you, and how you can control it. Questions go to support@gxsanchez.com.

2. How ETime works

ETime is an app for the Hess System, the workforce and timekeeping system your employer (for example, your school district) uses. You can use ETime only with a Hess System account your organization has given you. ETime doesn't create accounts.

When you use the app, it talks directly to your organization's Hess System service at api.hess-apps.com. Your profile, time records, leave balances and messages are stored in that system and managed by your organization. Your organization decides who can see your records and how long they're kept, under its own policies. If you have questions about the records themselves, such as your hours, pay or leave, contact your organization's HR, payroll or IT department.

We don't run any other server for ETime, and the app doesn't send your information anywhere except the places described in section 6.

3. Information ETime handles

The table below lists everything the app collects or uses, why, and where it goes. "On your device" means stored inside the app's private, encrypted storage on your phone, tablet or computer.

Information	Why ETime uses it	Where it goes
Sign-in details: your work email address and, for standard sign-in, your Hess System password	To find out whether your organization uses single sign-on, and to sign you in	Sent securely to your organization's Hess System. Your password is never stored on your device.
Single sign-on (SSO): your sign-in on your company's identity provider	To sign you in when your organization requires SSO	Entered in your device's system browser on your identity provider's own page. ETime never sees your SSO password.
Session tokens	To keep you signed in	Stored in the iOS/macOS Keychain or the Android Keystore on your device, and erased when you sign out
Profile and work details: name, employee ID, jobs and positions, roles, assigned work locations, and your organization's settings	To show the right jobs, time codes and pay periods	Received from your Hess System and kept on your device
Time records: dates, start and end times, hours, job and time codes, comments, pay periods, and timesheet status	To show, enter, save and submit your time	Sent to and received from your Hess System, and kept on your device. Unsent clock punches wait on your device until they can be sent.
Leave balances	To show your vacation, sick and other leave	Received from your Hess System and kept on your device
Messages and notifications: your organization's message board and notices about your time	To keep you informed	Received from your Hess System. Notifications never include your hours or other people's names.
Device information: a random ID created when you install ETime, your device model and operating-system version (for example, "Pixel 8 / Android 15"), and the app version	To secure your sign-in, so a stolen session can't be used on another device; to list your signed-in devices; and to tell you when an update is required	Sent to your Hess System with each request. The random ID isn't a hardware identifier or an advertising ID, and it's created again if you reinstall.
App integrity checks (Apple devices): an Apple App Attest result, and whether the device appears to be jailbroken or running a debugger	To protect your account from modified or fake copies of the app	Sent to your Hess System when you sign in or save time
Location (Android, optional): precise or approximate location	To confirm you're at the work site when you clock in, and to clock you out automatically if you leave it during a shift	Used and kept only on your device. Not sent to your Hess System, to us or to anyone else. See section 4.
QR codes (Android): the clock-in code posted at your work site	To pick the right site and job for a clock-in	Scanned on your device by Google Play services' code scanner. ETime receives only the code's text and doesn't get access to your camera.
Face ID, Touch ID or fingerprint (optional)	To unlock ETime quickly	Handled entirely by your device's operating system. ETime learns only whether unlocking succeeded and never receives biometric data.
App settings: theme, date format and similar preferences	To remember how you like the app	Kept on your device only

ETime doesn't access your contacts, photos, files, microphone, calendar, health data or payment information.

4. Location

Location features are available in ETime for Android. ETime for iPhone, iPad and Mac doesn't use your location.

When ETime uses location

When you clock in. ETime reads your current location once, to check that you're inside your work site's designated area, for example the radius set in the site's QR code.
While you're clocked in, including in the background. If you've allowed location "all the time", ETime asks Android to let it know if you leave the area around where you clocked in (a geofence). If you do, ETime clocks you out automatically. This works even when the app is closed, which is why it needs background location access.
When you clock out, the geofence is removed and ETime stops using your location until your next clock-in.

What ETime never does with location

Use it while you're clocked out.
Record a history of your locations or the route you travel.
Send your coordinates to your organization's Hess System, to us, or to any third party. Your organization receives the time entry (dates and times), not your position.
Use it for advertising, analytics or any purpose other than clocking in and out.

Where it's kept

The location where you clocked in is stored in ETime's encrypted storage on your device, so the geofence can work during your shift. It's erased when you sign out or uninstall the app. Android's location services, provided by Google Play services, work out the location and watch the geofence. Google's handling of location is described in the Google Privacy Policy.

Turning it off

Location is optional. You can deny it, choose "Only while using the app" (clock-in checks work but automatic clock-out doesn't), or switch it off at any time in your device's Settings → Apps → ETime → Permissions → Location. Without location you can still enter your time by hand, unless your organization requires an on-site clock-in.

5. How information is used

ETime uses information only to provide the app's features: signing you in, showing and submitting your time, showing balances and messages, clocking in and out, keeping your account secure, preventing duplicate time entries, and telling you when an update is needed. It's never used for advertising, profiling, or training artificial-intelligence models, and it's never sold.

Your organization's Hess System. This is where your sign-in, time records and device information go, as described above. Your organization's own privacy policies apply to the records stored there.
Your organization's identity provider, if you use single sign-on. You sign in on its page, under its policies.
Apple and Google, as platform providers. On Apple devices, App Attest is provided by Apple. On Android, location and QR-code scanning use Google Play services. If you've chosen to share diagnostics with Apple or Google in your device settings, they may share anonymous crash and performance reports with developers. These never include your time records.
When the law requires it. We'd disclose information only if required by law, and we hold almost none (see section 9).

We don't sell, rent or trade personal information, and we don't share it with advertisers or data brokers.

7. No ads or tracking

ETime contains no advertising, no analytics or crash-reporting SDKs, and no tracking. It doesn't use your device's advertising identifier and doesn't track you across other companies' apps or websites.

8. Security

All connections use HTTPS, and ETime only accepts the Hess System's own certificates (certificate pinning).
Information ETime keeps on your device is stored in an encrypted database, and session tokens are kept in the Keychain or Android Keystore.
ETime's data is excluded from device and cloud backups and from transfers to a new phone, so it never leaves the device it was created on.
Each sign-in is tied to your device. You can see your signed-in devices in Settings and sign out of all of them at once.
The app doesn't write your hours, balances, names or credentials to logs.

No system is perfectly secure, but we design ETime to keep as little as possible and to protect what it keeps.

9. How long information is kept

On your device: until you sign out, until your session is ended from another device or by your organization, or until you uninstall ETime. Any of these erases everything ETime stored, including unsent clock punches, so ETime warns you before you sign out with punches still waiting.
In your organization's Hess System: your time records are kept for as long as your organization decides, often to meet payroll and employment-record laws. Sign-in sessions expire after 30 days without use.
With us: we don't receive or keep your time records, location or device information. We keep only support emails you send us, for as long as needed to help you (see section 13).

10. Your choices and deleting data

Erase ETime's data from a device: open ETime and sign out from Settings, or uninstall the app.
Sign out on every device: in ETime, open Settings → Signed-in devices → Sign out everywhere.
Stop location use: turn off ETime's location permission in your device's Settings.
Stop notifications: turn them off in your device's Settings.
Records in the Hess System: your Hess System account and time records are created and kept by your organization, so ETime can't delete them. Ask your HR, payroll or IT department. Some records may have to be kept by law.

Step-by-step instructions are on the Delete your ETime data page. If you need help, email support@gxsanchez.com.

11. Your privacy rights

Depending on where you live (for example, under the GDPR in Europe or state laws such as the CCPA in California), you may have the right to access, correct, delete or get a copy of your personal information, or to object to how it's used. Because your organization controls the records in its Hess System, requests about those records should go to your employer. We'll respond to any request about information we hold within 30 days, and help point you to the right place. We won't treat you differently for making a request.

12. Children

ETime is a workplace app for employees and isn't directed to children under 13. We don't knowingly collect information from children. If you believe a child has provided information through ETime, contact us and we'll help remove it.

13. Emailing support

If you email us, we receive your email address and whatever you include in your message, and use them only to reply and fix the problem. Please don't send passwords, pay details or other sensitive information. You can ask us to delete your support emails at any time.

14. This website

This website is a set of static pages. It has no accounts, sign-in, cookies, analytics or ads, and you can't enter time on it. Pages load fonts from Google Fonts, so Google receives your IP address and browser details when you visit (see the Google Privacy Policy). The web host may keep standard server logs, such as IP addresses and pages requested, for security and reliability.

15. Changes to this policy

If ETime starts handling information differently, we'll update this policy and the effective date at the top before the change takes effect. Significant changes will also be noted in the release notes.

16. Contact

Gabe Sanchez · support@gxsanchez.com