Time SCAN · Creative Online Co., Ltd. · Last updated: August 31, 2026
Time SCAN ("the app", "we", "us") is a face-recognition time-attendance app
operated by Creative Online Co., Ltd. This Privacy Policy explains what data we
collect, how we use it, how we store and protect it, and your rights — with
particular detail on face data.
Face Data Collection and Use
What we collect. When an organization enrolls an employee,
the app captures the employee’s face image and derives a mathematical face
template (embedding) used for identity matching. During check-in / check-out,
the camera detects and verifies the employee’s face against the enrolled
template.
Purpose (only attendance). Face data is used solely to
verify employee identity when recording attendance (check-in / check-out).
It is not used for advertising, tracking, profiling,
analytics, or any unrelated purpose.
Sharing. Face data is not sold or shared with third
parties. It is stored securely in our Firebase backend and is
accessible only to the organization’s authorized administrators.
Storage & processing. Face matching runs on-device
(offline). Enrolled face templates and thumbnails are stored on the device and
synced to the organization’s private space in Firebase (Cloud Firestore /
Storage) so the organization’s own devices can verify attendance. Attendance
scan logs are kept on the device and are not uploaded.
Retention. Face data is retained only while the employee
account or organization account remains active, or as required for attendance
and HR record purposes. The organization administrator can remove an employee
(and their face data) at any time when it is no longer needed.
Information We Collect
Account data — username, optional email/display name, and
(for Google/Apple sign-in) the basic profile provided by that provider.
Face data — as described above.
Attendance data — scan timestamps, result, employee
code/name, and (if the station enables GPS lock) the device location at scan
time, stored on the device.
How We Use Information
To provide attendance verification, sync an organization’s employees and
stations across its own devices, generate attendance reports the organization
exports, and provide support.
Third-Party Services
Google Firebase (Authentication, Cloud Firestore, Storage)
— backend for accounts and employee/face sync.
Data Security
Data in transit is encrypted (HTTPS/TLS). Backend data is protected by Firebase
security rules so an organization can access only its own data. Face matching is
performed locally on the device.
Your Rights & Data Deletion
Organization administrators can delete employees and their face data in the app
at any time. When you delete your account, we deactivate it (soft-delete) and
remove your personal and face data, subject to records we are required to keep
by law. See our Data Deletion page or contact us.
Children
Time SCAN is intended for workplace use and is not directed to children under 13.
Changes
We may update this policy; the "Last updated" date reflects the latest version.