Klepsi apps privacy

The Klepsi apps for iPhone, macOS and Windows are published by ALEOP SAS, 99 vieille route de la Gavotte, Les Bastides du Cèdre, 13170 Les Pennes Mirabeau, France. Data protection officer: dpo@aleop.eu.

The apps are used to enter your time, your absences and your expenses in your company's Klepsi instance. This data belongs to your company, which decides how it is used and is responsible for it. Aleop hosts the instance on its behalf, under the terms of the data processing agreement concluded with your company.

• No advertising, no trackers, no audience measurement.
• No crash reports sent automatically.
• No data sent to Aleop outside your company's instance, and none to a third party.

The instance whose address you enter, for example company.klepsi.app, always over an encrypted connection. As long as no address is entered, the app does not contact any server.

If your company has chosen to sign in with its Microsoft account or another identity provider, that provider's sign-in page opens while you sign in. Your company chose this provider and has its own contract with it.

The instance receives what you enter: time, absences, expenses and their receipts, comments. It also knows your name, your email address, your role and technical logs (IP address, date and time). On iPhone, the device type is recorded with the session when you sign in. On a computer, the app identifies itself to the instance by its name and version.

The instance is hosted in France by OVHcloud. Service emails are sent through Brevo, and support goes through Atlassian's Jira Service Management. The apps do not contact any of these services. Details, retention periods and safeguards are in the data processing agreement concluded with your company.

• The sign-in token is stored in the iPhone keychain, restricted to this device. Your password is not kept.
• To work without a network, the app keeps a copy of your account, your projects and your recent days, along with entries not yet sent. These files are protected by iOS encryption. Entries are sent to the instance when the network comes back.
• Your settings stay on the phone: instance address, theme, lock, reminder, last five projects used, running timer.
• Signing out erases the token and the copy of your account, your projects and your days. Entries not yet sent and a running timer stay on the phone, linked to your account. They are sent the next time you sign in, never under the account of another person who signs in on the same phone. The app warns you before a sign-out that leaves some behind. To erase everything, first send your entries, sign out, then delete the app.

Each one is only requested when you use the feature, and you can refuse it.

• Camera: take a photo of an expense receipt.
• Photos: choose a receipt you already took. The iOS picker only gives the app the photo you choose, not your photo library. Before it is sent to the instance, the image is reduced and saved again, without the original photo's information such as where it was taken.
• Face ID or Touch ID: lock the app, if you turn it on. Recognition is done by iOS. The app never receives your biometric data.
• Notifications: the 6 pm reminder on working days, if you turn it on. It is scheduled on the phone and cancelled as soon as an entry exists that day. No notification server is used.

While a timer is running, its project, its client and the elapsed time are shown on the lock screen and in the Dynamic Island. They can therefore be seen without unlocking the phone. You can turn this off in iOS Settings, under Klepsi, "Live Activities".

• The window shows the pages of your instance. No other address is loaded in it, except the sign-in page of your identity provider.
• The app keeps in its folder the address and name of the instance, the size and position of the window, and the "Always on top" option. The session is a cookie of the instance, erased if you change instance.
• To work without a network, the app also keeps a copy of your name, your email address, your projects and their clients, along with entries not yet sent and a timer started without a network. These files stay in the app's folder, readable only by your own account on the computer. Entries are sent to the instance when the network comes back.
• When the session ends, the copy of your account, your projects and your clients is erased. Entries not yet sent and a running timer stay, linked to your account and to the instance. They are sent the next time you sign in, never under another person's account and never to another instance. The app warns you before a change of instance that leaves some behind.
• The instance pages can only request two permissions: notifications and copying to the clipboard. No camera, no microphone, no location.
• No automatic updates: the app does not contact any update server. On Windows, the Microsoft Store handles updates.
• On Windows, uninstalling erases the app's data, including entries waiting to be sent.

To access, correct or delete your data, first contact your company's administrator, who manages your account. You can also write to dpo@aleop.eu. If you disagree, you can contact the CNIL (cnil.fr).

For any question about the apps, write to support@aleop.eu. The privacy policy of the aleop.eu website is on a separate page (in French).