Safety Guidelines

Clockify is used at shared kiosks, on staff phones, and via NFC cards to capture attendance. These guidelines cover how to use those capture methods safely and what to do if something looks wrong.

Kiosk pairing codes rotate every 30 seconds and should never be shared outside your organization or photographed and posted publicly. Report a lost, stolen, or tampered kiosk device to your site administrator immediately so it can be unpaired.

Treat your NFC attendance card like an access badge — do not lend it to a coworker to punch in on your behalf, and report a lost card right away so it can be deactivated. Printed site QR codes should only be scanned from the physical location they are posted at; do not scan a copy sent to you remotely.

Where your organization has enabled selfie verification, the photo is taken on-device at the moment of the punch and used only to verify the punch, subject to our Privacy Policy. Do not ask a coworker to complete verification on your behalf — this is treated as falsifying an attendance record under our Terms of Service.

GPS location is captured at the time of a punch to support the assurance score for that record. If you believe location data is being requested outside of an active punch, stop and contact your administrator or support@clockify.in.

If you suspect a device has been compromised, a punch record looks wrong, or someone has misused shared credentials, report it to your site administrator and, if it involves a possible security issue, to support@clockify.in. We investigate reports and will unpair or disable affected devices or cards as needed.