Privacy policy — ArbeitszeitCheck Mobile
This notice covers the ArbeitszeitCheck mobile app (Android and iOS) — a client for the open-source ArbeitszeitCheck Nextcloud app on your organisation’s server.
Last updated: 29 May 2026
Publisher
Software by Design GbRHusumer Baum 2
24837 Schleswig, Germany
Email: info@software-by-design.de
Privacy: datenschutz@software-by-design.de
General website privacy: software-by-design.de/datenschutz
This page is hosted on our documentation site and loads no analytics scripts. Cookie-free visitor statistics on other pages of this host are described in the website privacy notice.
1. Scope
This policy describes the mobile app ArbeitszeitCheck (Android and iOS). The app is a client for the open-source ArbeitszeitCheck Nextcloud app, which runs on your organisation’s Nextcloud server.
Software by Design does not operate a central cloud that stores your working time. Your employer or IT provider operates the server you connect to.
2. Who is responsible for your data?
| Data location | Controller (typical) |
|---|---|
| Working time, absences, approvals on the server | Your organisation (employer) as operator of Nextcloud |
| App on your device | You choose the server; your organisation’s privacy policy applies to server data |
| Publisher of the mobile app | Software by Design GbR (this policy) |
For questions about records on the server, contact your employer or the administrator of your Nextcloud.
3. What the app stores on your device
| Data | Purpose | Storage |
|---|---|---|
| Server URL you enter | Connect to your Nextcloud | App storage |
| Nextcloud app password (not your main password) | API access after Login Flow v2 | Secure storage (Keychain / Keystore) |
| Biometric lock, theme, language (optional) | Settings | App storage |
| Push device token (optional) | Notifications via your Nextcloud | Registered with your server |
The app does not store your main Nextcloud account password.
4. What is sent to your Nextcloud server
When you use the app, it communicates only with the server URL you configured, including clock in/out, breaks, time entries, absences, approvals, GDPR export/delete requests, and push registration (if enabled).
Production builds use HTTPS.
5. What we do not do
- No sale of personal data
- No third-party advertising or analytics SDKs
- No transfer of working time to Software by Design servers
- No profiling or marketing by the app publisher
6. Permissions
| Permission | Why |
|---|---|
| Internet | Connect to your Nextcloud |
| Notifications | Optional break/approval reminders |
| Biometric / fingerprint | Optional unlock for the app |
7. Your rights (GDPR)
Export and deletion requests are available in Settings and are processed on your server. Contact datenschutz@software-by-design.de for questions about this mobile app.
Supervisory authority (Germany): the data protection authority for your place of residence or work.
8. Children
The app is intended for workplace use, not for children under 16.
9. Changes
We may update this policy when the app changes. The “Last updated” date will change accordingly.
10. Open source
Server app: ArbeitszeitCheck on apps.nextcloud.com (AGPL-3.0-or-later).
Related: Privacy policy — ArbeitszeitCheck Terminal (kiosk tablet app).