This Privacy Policy applies to OwnCrew and all products offered under the owncrew.ai domain and related services, including but not limited to:
OwnCrew Time Clock — Android application, package ai.owncrew.timeclock, distributed via Google Play and directly
OwnQR — dynamic QR code service
Other OwnCrew products (Review Reply, SEO Writer, Social, Contract Assistant) as they become available
This policy explains what personal data OwnCrew collects, how it is used, stored, shared, and what rights you have.
2. Who We Are
OwnCrew is operated by Chiao-wan Huang, based in British Columbia, Canada. For all privacy inquiries, contact hello@owncrew.ai.
3. Data We Collect and Why
OwnCrew Time Clock (Android app)
The Time Clock app is a workplace attendance tool installed by a business owner on a shared kiosk device. Data is collected only at the moment an employee punches in or out:
Precise location (GPS)— recorded only at punch time to verify the employee is within the store's geofence. Not collected in the background.
Camera photo — captured only at punch time as attendance attestation. Stored privately; only the store owner sees it via the admin panel.
Device identifier— an app-generated identifier binding a specific tablet to a store as a "kiosk". Used to enforce revocation of unauthorized devices.
Employee display name — entered by the store owner into the admin panel; displayed on the kiosk so staff can select themselves at punch time.
Facial features (biometric data)— a 512-dimensional numeric vector ("face embedding") is computed from the punch photo inside the kiosk browser and transmitted to OwnCrew servers, where it is stored alongside the punch record. On subsequent punches, new embeddings are compared against the same employee's own recent history (past 30 days) to detect potential buddy-punching. This is sensitive personal information under PIPEDA and equivalent laws. This feature is opt-in per employee: on the employee's first use, a written "Photo & Facial Recognition Consent Form" is shown on the kiosk screen and must be accepted before any punch can proceed on this device. No embedding is stored or compared until acceptance is recorded. Employees who choose not to accept cannot punch via the OwnCrew Time kiosk and should arrange an alternate time-tracking method with the store operator. To withdraw consent after acceptance and request deletion of stored embeddings, contact hello@owncrew.ai — see §7.
Other OwnCrew Services
Web-based services may collect account email, phone number (for CASL-compliant notifications), and aggregated usage analytics to improve product quality. Individual product pages disclose additional detail.
4. How Data Is Stored and Secured
All data transmitted over HTTPS (TLS 1.2+).
Stored on Supabase (Postgres + Storage) with encryption at rest.
Photos stored in private buckets, accessed via short-lived signed URLs; not publicly indexable.
Kiosk device sessions authenticated via server-signed JWT cookie (30-day maximum lifetime, revocable at any time by the store owner).
Passwords and API secrets never transmitted to client or logged in plaintext.
5. Data Sharing
We do not sell or rent personal data. We do not share data with third parties for advertising.
We use the following service providers strictly to operate the platform (data processors):
Vercel — application hosting
Supabase — database and file storage
Cloudflare — DNS and email routing
Google Cloud — Google Play distribution
Sentry — error and performance diagnostics for our web properties (not enabled inside the OwnCrew Time mobile app)
Anthropic— AI inference for specific product features (currently used by our Florist product's AI tools). Prompts you submit are sent to Anthropic for inference; Anthropic does not retain them beyond the request lifecycle except as required for abuse review under their published policy.
Resend — transactional email delivery
Stripe — payment processing (when applicable)
We may disclose data if required by valid legal process or to protect the rights and safety of users.
6. Retention
For OwnCrew Time Clock: the store owner is the data controller. Punch records are retained as long as the store account is active. On account deletion or by written request from the employee, records are deleted within 30 days, subject to legal retention obligations (e.g., payroll audit requirements). Requests: hello@owncrew.ai.
Kiosk device sessions expire after 30 days of inactivity and can be revoked at any time from the store admin panel.
7. Your Rights
Under Canada's Personal Information Protection and Electronic Documents Act (PIPEDA) and applicable law, you may:
Request access to your personal data we hold
Request correction of inaccurate data
Request deletion (subject to legal/contractual retention obligations; biometric face embeddings are deleted within 7 days of request, independent of any other punch-record retention)
Withdraw consent for future processing (including biometric processing consent; withdrawal takes effect on the next punch and does not affect punches already recorded)
Lodge a complaint with the Office of the Privacy Commissioner of Canada
OwnCrew products are business tools not directed at users under 18. We do not knowingly collect personal information from children. If we become aware such data has been collected, it will be deleted.
9. Advertising and Tracking
OwnCrew Time Clock contains no advertising, no ad SDKs, no cross-site tracking pixels, and no third-party analytics inside the app. The marketing website may use privacy-respecting analytics (aggregate only, no personal identifiers).
10. Cookies and Email
Web properties use functional cookies for authentication and session management only — no advertising cookies. Transactional and marketing emails comply with Canada's Anti-Spam Legislation (CASL); an unsubscribe link is included in every marketing email.
11. International Data Transfers
Data may be processed in the United States by our service providers (Vercel, Supabase). By using OwnCrew you consent to such transfer, subject to safeguards required by applicable law.
12. Changes to This Policy
Material changes will be notified via email to registered users at least 14 days in advance. The effective date at the top of this page reflects the latest revision.
13. Contact
OwnCrew · hello@owncrew.ai · Chiao-wan Huang · British Columbia, Canada