Privacy Policy

Effective Date: May 1, 2026 | Last Updated: October 23, 2026

Welcome to Kronto, a workforce management platform operated by Passcom, Co. (“Kronto,” “we,” “us,” or “our”). This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our mobile application, web application, and related services (collectively, the “Service”).

Please read this Privacy Policy carefully. By accessing or using the Service, you acknowledge that you have read, understood, and agree to the practices described in this policy. If you do not agree, please discontinue use of the Service.

This Privacy Policy is provided in compliance with Apple App Store guidelines, the California Consumer Privacy Act (CCPA), and applicable data protection laws.

1. Who We Are

Kronto is a B2B software-as-a-service platform designed for small business operators — primarily coffee shops and quick-service restaurants. We provide tools for employee scheduling, time and attendance tracking, team communication, tips management, and workforce reporting.

Data controller and operator contact:
Passcom, Co.
Email: help@kronto.com
Website: https://kronto.com

2. Information We Collect

We collect several categories of information depending on your role (Business Owner, Shift Manager, or Employee).

2.1 Account and Business Information

Full name, email address, and password
Business name, business address, and number of locations
Job title and role within the organization
Billing and payment information (processed securely via third-party payment processors; we do not store raw card numbers)

2.2 Employee and Workforce Data

When a business owner or manager adds employees to the platform, we collect and store:

Employee names, email addresses, and phone numbers
Employment type, pay rates, and job positions
Work schedules, shift assignments, and availability
Time card records, including clock-in and clock-out times
Break records and overtime data
Tips data entered or imported into the platform
Performance notes or records entered by managers

2.3 Usage and Device Information

When you use the Service, we automatically collect:

Device identifiers (device ID, advertising ID where applicable)
Device type, operating system version, and app version
IP address and general geographic region
App usage patterns (screens viewed, features used, session length)
Session playback, as described in 2.5
Crash reports and diagnostic data
Log data including access times and error logs

2.4 Location Information

The Kronto mobile application may request access to your device location for the following purposes:

Verifying that an employee is clocking in or out at a permitted work location
Displaying location-based schedules when a business has multiple sites

Location access is requested only when you initiate a clock-in or clock-out action. We do not track your location continuously or in the background without your knowledge.

2.5 Session Playback

To understand how people use Kronto and where they run into difficulty, we record how the app is used during a session — the pages visited, where the cursor moves, what is clicked, and how the screen changes in response. This lets us review afterward how the app was used.

This is not a video or a screen capture. We do not have access to your camera, your screen, or anything outside Kronto. Text on screen — including names, pay rates, tip amounts, and anything typed into a form — is hidden on your own device before anything is sent to us, so we never receive it and cannot reveal it later. What we can see is the layout of the page and what was done on it.

We may turn text on for a specific business when we are working directly with them, for example during setup or while investigating a problem they have reported. This only affects sessions from that point forward.

Some businesses use Kronto on a shared tablet at the workplace. A tablet is recorded in the same way, and the recording is identified by the location it belongs to rather than by any individual — we do not record who was using it at a given moment. The same masking applies: names, pay rates, tip amounts and anything typed into a form are hidden on the device before anything is sent to us.

Session playback is retained for 90 days and then deleted.

2.6 Communications

In-app chat messages sent between team members via the Kronto messaging feature
Feedback, support requests, or other correspondence you send us

What you enter in the free tip calculators on kronto.com stays in your browser. To email or download the results, you give us your email address, and your browser remembers it for 30 days. For an email, we use the calculation only to send you the results and a link to reopen them; we do not keep it. For an email or a download, we send your email address and the calculator you used to HubSpot, which we use to manage our contacts. We send you Kronto tips and updates only if you ask for them when you email the results, and you can unsubscribe at any time. To limit abuse, we keep scrambled counters of recent sends, deleted after 35 days.

2.7 Information We Do Not Collect

Kronto does not collect health information, or biometric data.

3. How We Use Your Information

We use the information we collect to:

Provide, operate, and maintain the Service
Process and manage employee schedules, time cards, and payroll export data
Enable in-app communication between team members
Send transactional notifications (e.g., shift reminders, schedule changes, time card approvals)
Monitor and improve the performance, reliability, and security of the Service
Analyze aggregate usage patterns to improve product features
Respond to customer support inquiries
Comply with legal obligations

We do not sell your personal information. We do not use your data for behavioral advertising or cross-app tracking.

4. How We Share Your Information

We may share your information in the following limited circumstances:

4.1 With Your Organization

Business owners have access to data for all employees and managers within their organization. Shift managers have access to scheduling and time card data for employees they manage. Employees can view their own schedules, time cards, and tips.

4.2 With Service Providers

We work with trusted third-party vendors who assist us in operating the Service. These providers only process data as directed by us and are bound by appropriate confidentiality and data protection obligations. Categories include:

Cloud hosting and infrastructure providers
Payment processors (for subscription billing)
Analytics and crash reporting services
Product analytics and session playback services
Customer support platforms
Email and push notification delivery services

4.3 Payroll and POS Integrations

Kronto integrates with third-party payroll and point-of-sale systems at the direction of the business owner. When you initiate a payroll export or sync, relevant time card and workforce data is transmitted to the third-party system you have chosen to connect. Such transmission is subject to the third party's own privacy policies.

4.4 Legal Requirements

We may disclose your information if required to do so by law or in response to valid legal processes (such as a subpoena, court order, or government request), or when we believe in good faith that disclosure is necessary to protect our rights, your safety, or the safety of others.

4.5 Business Transfers

If Passcom, Co. is involved in a merger, acquisition, or sale of all or a portion of its assets, your information may be transferred as part of that transaction. We will notify you via email or a prominent notice within the Service prior to your data being transferred and becoming subject to a different privacy policy.

4.6 With Your Consent

We may share your information for any other purpose with your explicit consent.

5. Data Retention

We retain your personal information for as long as necessary to provide the Service and fulfill the purposes described in this policy, or as required by law. Specifically:

Active account data is retained for the duration of your subscription
Time card and schedule records are retained for a minimum of three (3) years to support payroll compliance and audit requirements
Account data is deleted within ninety (90) days following account closure, unless longer retention is required by applicable law
Anonymized and aggregated usage data may be retained indefinitely for product analytics purposes

You may request deletion of your personal data at any time. See Section 7 (Your Rights) for details.

6. Data Security

We implement industry-standard administrative, technical, and physical safeguards to protect your information, including:

Encryption of data in transit (TLS 1.2+) and at rest (AES-256)
Role-based access controls limiting data access to authorized personnel
Regular security assessments and monitoring
Incident response procedures

While we take these measures seriously, no method of transmission over the internet or method of electronic storage is completely secure. We cannot guarantee absolute security, and you use the Service at your own risk.

7. Your Rights

Depending on your location, you may have the following rights regarding your personal information:

7.1 Access and Portability

You may request a copy of the personal information we hold about you, including in a portable format.

7.2 Correction

You may request that we correct inaccurate or incomplete information about you.

7.3 Account Deletion

You may request deletion of your Kronto account and the personal information associated with it at any time. Because Kronto accounts are created and managed by your employer (the business that subscribes to Kronto on your behalf), you can request deletion in either of the following ways:

Ask your employer's Kronto account administrator to remove your profile from their organization; or
Email help@kronto.com with the subject line “Account Deletion Request” from the email address associated with your account.

After we receive your request, we will delete your personal information, except where some data needs to be retained to comply with legal obligations (for example, payroll records) or to complete legitimate business purposes. We will inform you if any requested data cannot be deleted and explain why.

7.4 Restriction and Objection

You may request that we restrict the processing of your data, or object to certain types of processing, in circumstances where applicable law provides for such rights.

7.5 California Residents (CCPA)

If you are a California resident, you have the right to: (1) know what personal information we collect, use, disclose, and sell; (2) request deletion of personal information; (3) opt out of the sale of personal information (we do not sell personal information); and (4) non-discrimination for exercising your CCPA rights.

To submit a verifiable consumer request, please contact us at help@kronto.com.

7.6 How to Exercise Your Rights

To exercise any of the rights described above, please contact us at help@kronto.com with the subject line “Privacy Request.” We will respond within 30 days of receiving your request (or 45 days if an extension is required, with notice). We may need to verify your identity before processing certain requests.

8. Children's Privacy

The Service is intended for use by businesses and their adult employees. Kronto is not directed to individuals under the age of 13, and we do not knowingly collect personal information from children under 13. If we become aware that we have inadvertently collected personal information from a child under 13, we will take steps to delete such information promptly.

If you believe a minor has provided personal information through the Service, please contact us at help@kronto.com.

9. Third-Party Links and Services

The Service may contain links to third-party websites, applications, or services. This Privacy Policy does not apply to those third parties. We encourage you to review the privacy policies of any third-party services you access through Kronto, including payroll providers, POS systems, and calendar applications.

10. International Data Transfers

Kronto is operated in the United States. If you are accessing the Service from outside the United States, please be aware that your information may be transferred to, stored, and processed in the United States where our servers are located and our central database is operated. Data protection laws in the United States may differ from those in your jurisdiction. By using the Service, you consent to this transfer.

11. Apple Platform Disclosure

The Kronto mobile application is available on the Apple App Store. In accordance with Apple's guidelines, we disclose the following data practices for the Kronto iOS app:

Data Used to Track You

Kronto does not use data from the Kronto app to track you across other companies' apps or websites for advertising purposes.

Data Linked to You

The following data types are collected and linked to your identity within the Service:

Contact Info: Name, email address, phone number
Financial Info: Payment information for subscription billing
Location: Precise location at time of clock-in/clock-out (when permission is granted)
User Content: In-app messages, schedule notes, checklist entries
Identifiers: Device ID, user account ID
Usage Data: Feature interactions, session information
Diagnostics: Crash reports, performance data

Data Not Linked to You

Aggregated, anonymized analytics data that cannot reasonably be used to identify you is collected for product improvement purposes and is not linked to your identity.

12. Push Notifications

The Kronto app may send push notifications to your device for shift reminders, schedule changes, time card approvals, and in-app messages. You may control push notification permissions through your device settings at any time. Disabling push notifications does not affect your ability to use the core features of the Service.

13. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, or legal requirements. We will notify you of material changes by:

Posting the updated policy on our website at https://kronto.com/privacy
Updating the “Last Updated” date at the top of this policy
Sending an in-app notification or email for material changes that affect your rights

Your continued use of the Service after the effective date of any updated policy constitutes acceptance of the revised terms. If you do not agree to the changes, you should stop using the Service and may request deletion of your account.

14. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us:

Passcom, Co.
Attn: Privacy Team
Email: help@kronto.com
Website: https://kronto.com