Privacy policy

Last updated October 29, 2026

Oh! Thyme is a time-tracking app your employer uses for clock-ins, timesheets and payroll. This page says what it collects about you, why, and who sees it. Your employer decides how Oh! Thyme is used at work, and we handle your records on their behalf.

What we collect

• Who you are at work. Your name, work email, job title, employee number and supervisor. Your employer adds these, or they come from your employer's NetSuite.
• Your time. When you clock in and out, your breaks, the hours on each project and task, time off requests, and every change to your time with who made it and why.
• Your location, once per punch. When you clock in, clock out or switch tasks, the app reads the phone's location one time and saves it with that punch, so your employer can check it against the job site. It is never read during your shift, on a break or after you clock out. If you turn location off, you can still clock in.
• The camera, only to scan codes. The camera opens only when you scan a QR code. No photo is saved.
• Your device's name. Saved each time you sign in, so you and your admins can see which phones are signed in.

Face ID or your fingerprint is checked by your phone. We never receive it.

Why we use it

To record the hours you work, check meal and rest breaks and overtime under the rules of your state, let your supervisor approve your time, and send approved hours to your employer's payroll. We do not sell your information or use it for ads.

Who sees it

• You. Your own hours, punches and every change to them.
• Your supervisor and your employer's admins and payroll staff, to approve and pay your time.
• Paycom and NetSuite, only if your employer connects them. Approved hours and pay types go to Paycom. Approved hours by project go to NetSuite.
• Microsoft, if your employer uses Microsoft 365 sign-in. Microsoft tells us your name and work email when you sign in.
• Resend, which sends the sign-in codes we email to you.
• Cloudflare, which hosts Oh! Thyme and stores its data.

NetSuite and Paycom sign-in keys are stored encrypted on our servers and never reach a phone.

This website

ohthyme.com has no ads and no tracking cookies. The web console sets one cookie to keep you signed in.

How long we keep it

As long as your employer uses Oh! Thyme. Wage laws require employers to keep time records, so your employer decides when work records can be deleted. A sign-in on a device lasts 30 days unless you sign out first.

Your choices

To get a copy of your information, correct it or ask for it to be deleted, email support@ohthyme.com. Because these are work records, we may check with your employer before we delete anything. You can also ask your employer's payroll or HR team directly.

The demo

The people in the Solvane Solar demo are made up. Anything you change in the demo is reset every night.

Changes

If this policy changes, we update the date at the top of this page. Questions: support@ohthyme.com.