What CrewQR holds, where it is, and what happens to it. Last updated 16 September 2026.
This page is about CrewQR. If you are a worker whose employer uses CrewQR and you want to know what your own company's time clock records about you, that is a different page and it is on your company's own CrewQR address, linked from the sign-in screen.
CrewQR is a time clock and wage-compliance tool for companies with hourly employees. The customer is the employer. Their employees' records belong to them; we hold those records on their behalf and do not treat them as ours.
Whatever your crew records: names, employee numbers, email addresses and phone numbers where you enter them, pay rates, hours, meal and rest breaks, job assignments, job-site photographs, and — only if the worker allows it on their own phone — where they were while on the clock.
The CrewQR Time Clock app on a worker's phone can record location in two ways, both optional and both switched on by the worker, never by the office. A punch can carry the place it was made from. And if the worker turns on Record where you are on the clock, the phone records which job site they are working from between clocking in and clocking out, and at no other time — recording starts at clock-in, stops at clock-out, and if the app is killed mid-shift it checks on the next launch and only continues if a shift is still open. It does not run in the evening, at the weekend, or on the way home, and there is nothing in the product that could make it. A punch is never refused for having no location. What the office sees is which job a worker was at and whether a punch was made away from it; the worker sees the same thing on their own phone, with a switch to turn it off.
The worker-facing version of this — what the app records about them and why, in their own company's words — is at their company's address, for example demo.crewqr.com/privacy.php, and is linked from the sign-in screen and from inside the app.
On servers in Amazon Web Services, in Oregon, United States. Each company's records are in their own separate database with their own credentials — not rows tagged with a company name in a shared table. Nothing in the app can read across from one company to another.
You and whoever you give accounts to. Our staff can see your company name, your contact details and whether your account is working; that is a separate system from the one holding your hours, and every time a member of staff signs in or acts on an account it is written to a log that cannot be edited from the panel that writes it.
There is nobody else. No analytics, no advertising, no tracking pixels, no third-party scripts in the app. The marketing site loads a font from Google; the app does not.
Every database is copied nightly, kept for a fortnight, with the first copy of each month kept for four years — because wage records are expected to be kept three to four years. Copies are stored encrypted, and the server that writes them cannot read them back or delete them. A backup is restored and checked automatically every week, because a backup nobody has restored is not yet a backup. The security page says exactly what that credential can and cannot do, and what we have not verified.
Any administrator can download everything their company has, at any time, without asking us: every table as a spreadsheet plus the job-site photographs, from Settings. You do not have to be leaving, and there is nothing to negotiate.
Ask us and your company's database and its records are deleted. Backups already taken age out on the schedule above rather than being reached into, which is a limit worth stating plainly rather than promising something the storage does not do.
Write to hello@crewqr.com. If you want a copy of what we hold about you, or want it deleted, say so and we will do it.