Last updated: October 29, 2026

Privacy policy

This Privacy Policy explains how Evomind Systems Inc. ("Evomind", "Timedigo", "we", "us", or "our") collects, uses, discloses, and protects personal information when you use the Timedigo website, web dashboard, mobile application, and related services (collectively, the "Platform").

Timedigo is a time and attendance platform for businesses. Owners and managers use the web dashboard to manage staff, schedules, and timesheets, and the Timedigo mobile app runs on shared devices where employees clock in and out with a PIN or badge.

1. Who is responsible for your information

Evomind Systems Inc., based in British Columbia, Canada, is responsible for personal information about business account holders (owners, managers, and payroll managers) and visitors to our website.

Information about a business's employees (their names, schedules, attendance records, and related details) is entered and controlled by that business, the employer. We process it on the employer's behalf and according to its instructions. If you are an employee, please contact your employer first about your information; we will help them respond to your request.

For privacy questions or requests, contact us at info@evomindsystems.com.

2. Information we collect

Account and business information

• Names, email addresses, phone numbers, and business details such as business name, legal name, address, and time zone.
• Login credentials. Passwords are stored only as one-way hashes.
• Verification codes and activation links we send to confirm an email address or phone number.
• Language and display preferences.

Workforce information entered by the business

• Employee names, and optionally email, phone number, employee code, hire date, and employment status.
• Hourly pay rates, visible only to the business's owners and payroll managers.
• Work locations, schedules, and recurring shifts.
• Employee PINs and badge codes, stored only as one-way hashes so they cannot be read back.

Attendance records

• Clock-in, clock-out, and break times, including the device and server time of each event and which device recorded it.
• Corrections, reasons, reviews, approvals, and an audit log of changes made in the dashboard.

Location at clock-in and clock-out

When a business turns on location checks, the Timedigo mobile app reads the device's location only at the moment someone clocks in, clocks out, or starts or ends a break, and stores those coordinates and their accuracy with the attendance record. The business uses this to confirm the event happened at the workplace. The app does not track location in the background or at any other time.

Mobile devices

• Device name, assigned location, app version, an app installation identifier, last check-in time, and the number of punches waiting to sync.

Information collected automatically

• IP address, browser type and version, and operating system.
• Date and time of access, pages requested, and security events such as failed sign-in or PIN attempts.

Payment information

Subscription payments are processed by Stripe. Card details are entered on Stripe's pages and are never stored on our systems. We store Stripe customer and subscription references, subscription status, and renewal dates.

What we do not collect

Timedigo does not capture photos, track location in the background, use advertising identifiers, or include third-party analytics or advertising tools.

3. How we use information

• Provide and operate the Platform, including scheduling, attendance, timesheets, overtime calculations, and exports.
• Authenticate users, verify contact details, and secure accounts and mobile devices.
• Process subscriptions, trials, and billing.
• Send operational messages such as verification codes, account activation, team invitations, and password resets.
• Provide customer support and troubleshoot issues.
• Maintain reliability, performance, and security, and prevent fraud, abuse, and unauthorized access.
• Comply with legal obligations and enforce our Terms & conditions.

4. Consent and legal bases

We collect, use, and disclose personal information with consent or as otherwise permitted or required by applicable law, including Canada's Personal Information Protection and Electronic Documents Act (PIPEDA) and British Columbia's Personal Information Protection Act (PIPA). Businesses using Timedigo are responsible for notifying their employees about attendance and location records and for obtaining any consent their employment and privacy laws require.

Where another jurisdiction's law requires a legal basis, we rely on one or more of the following: performance of a contract, legitimate interests (such as service security and reliability), consent, and compliance with legal obligations.

5. How we share information

We do not sell personal information. We share it only as follows:

• With the business. Owners and authorized managers of a business can see the workforce and attendance information for that business, according to their role.
• With service providers that help us run the Platform, under contracts that limit their use of the information:
  • DigitalOcean: application hosting, databases, and file storage, in Toronto, Canada.
  • Amazon Web Services (Amazon SES): sending email, in Montreal, Canada.
  • Stripe: subscription billing and payment processing.
  • Twilio: sending SMS verification codes.
• For legal reasons, when required by law or to protect the rights, safety, and security of our users, the public, or Evomind.
• In a business transfer, with a successor in connection with a merger, acquisition, restructuring, or asset sale, subject to this policy.

6. Where information is stored

Timedigo's application data, databases, and uploaded files are stored in Canada. Stripe and Twilio may process limited information (such as billing details or a phone number receiving a code) in the United States or other countries, where it may be accessible to authorities under those countries' laws. We use contractual and organizational safeguards for these transfers.

7. Data retention

• Account, workforce, and attendance information is kept while the business's account is active, so the business can meet its own payroll and record-keeping obligations.
• Location coordinates are kept with the attendance record they belong to until the business deletes them, closes its account, or asks us to remove them.
• When an account is closed, we delete or anonymize its information within thirty (30) days, except where we must keep it longer by law (for example, billing records). Businesses should export any records they need to keep before closing their account.

8. Security

We protect personal information with safeguards appropriate to its sensitivity, including encrypted connections (HTTPS), one-way hashing of passwords, PINs, and badge codes, role-based access in the dashboard, lockouts after repeated wrong PINs, the ability to remotely sign out lost devices, and hosting in Canada. No system is completely secure. If a breach creates a real risk of significant harm, we will notify affected businesses, individuals, and regulators as the law requires.

9. Cookies and browser storage

We use only essential cookies to keep you signed in and to protect forms against forgery, and browser storage to remember display preferences such as dark mode. We do not use analytics or advertising cookies. See our Cookie notice.

10. Your privacy rights

Depending on where you live, you may have the right to:

• Access the personal information we hold about you and ask how it has been used and disclosed.
• Correct inaccurate or incomplete information.
• Withdraw consent, subject to legal or contractual limits (withdrawing may mean we can no longer provide some features).
• Ask us to delete information, or receive a portable copy of certain information.
• Complain to a regulator, such as the Office of the Privacy Commissioner of Canada or the Office of the Information and Privacy Commissioner for British Columbia.

To make a request, email info@evomindsystems.com. We may need to verify your identity first. Employees should contact their employer for information the employer controls; we will assist the employer with the request.

11. Children's privacy

The Platform is intended for businesses and their adult account holders. Employers who record young workers in Timedigo are responsible for doing so in line with the employment and privacy laws that apply to them.

12. Changes to this policy

We may update this Privacy Policy from time to time. We will post the updated version on this page and change the "Last updated" date. For material changes, we will also notify account owners by email or in the dashboard.

Contact us

Evomind Systems Inc.
Email: info@evomindsystems.com
Phone: 236-998-9029