CSC Timesheets App — Privacy Policy
Effective: October 21, 2026
This policy covers the CSC Timesheets iPhone app and the timesheet website it opens, both run by Carlson Scale, Inc. ("we"). The app is for Carlson Scale employees only. The company installs it privately on company phones through Apple Business; it is not on the public App Store.
The short version
- You sign in with your work email. Your timesheet is built from your schedule in SimPro, the company's job system.
- Shop arrival times are optional. If you allow location, the app notes when you arrive at or leave the shop. It sends only whether you arrived or left, the time, and how accurate the phone's location fix was. It never sends your coordinates.
- Saying no to location, or turning it off later, changes nothing about your job or your timesheet.
- No ads, no tracking, no analytics. We don't sell your information.
What we collect
Your sign-in
- Your work email. Cloudflare Access, our sign-in service, emails you a one-time code to type in. After that, the server checks a signed token saying who you are on every request.
- The staff list. Only people the office has added can use the system. The list holds your name, work email, employee ID and whether you're active.
- On your phone: a sign-in cookie, so you stay signed in for about a month.
Your timesheet
- From SimPro (read only): your scheduled blocks (such as Clock In, Lunch and jobs), the job statuses you tap and their times, and each job's number, name, customer and site. CSC Timesheets never changes anything in SimPro.
- What the system builds: a draft for each day, with workers' comp codes and flags on anything worth a second look.
- What you add: your edits and confirmations. Every change is logged: before, after, who and when.
- When you send the week, the system emails the timesheet spreadsheet to the office and keeps a copy.
- Emails to you ("ready to check", a Friday reminder, "received by the office") go to your work email. The first two contain a personal link to your timesheet.
Shop arrival and departure times (optional)
Your iPhone watches one circle, about 150 m (500 ft) around the shop at 1418 Lone Palm Ave., and tells the app when you cross its edge. The app never turns on continuous location tracking.
| For each crossing, the app sends | The app never sends |
|---|---|
| Arrived or left | Your coordinates |
| The time | Your route, or where you were away from the shop |
| How accurate the location fix was (in metres), only if iOS had one from within 2 minutes | Which customers you visited |
The server files each event under your sign-in and notes when it arrived.
How it's used: to fill in when you left the shop and when you got back, instead of estimating. Those rows say "Time from your phone". They never move your Clock In or Clock Out. If your phone shows you at the shop 15 minutes or more before Clock In or after Clock Out, the row is flagged so you can add the time if you were working.
Off-duty crossings, such as driving past on a weekend, are stored like any other. But your timesheet ignores crossings more than 3 hours before or after your scheduled day, and the office sees only your last 10 events on days you worked, within an hour of your worked time.
Notifications
The current version doesn't use push notifications. The only notification, if you allow them, is made on the phone itself: a heads-up to sign in again so waiting shop times can be sent.
What stays on your phone
In the app's own storage, which other apps can't read: your recent shop times (at most 14 days and 50 events), any not yet sent, which sign-in each belongs to, your sign-in cookie and a few settings. Deleting the app deletes all of it.
Technical logs
Our server logs each request: the time, the page or action, whether it worked, and your work email (for shop times, how many were saved, never the times). Cloudflare logs sign-in attempts, typically with your email, IP address and browser details. Our internal monitoring gets a status message after each daily run, which can name anyone whose timesheet failed to build.
What we never collect
No location coordinates or history, contacts, photos, messages, microphone, camera or advertising ID. No ads, analytics or tracking tools, and no tracking across other apps or websites. We don't sell your personal information or share it for advertising.
Who sees it
Inside Carlson Scale: you, the office staff who handle timesheets and payroll, and the person who administers the CSC server.
Companies that run parts of the service for us:
| Company | What they do | What they handle |
|---|---|---|
| Cloudflare | Sign-in, and the secure connection to our server | Your work email, sign-in logs, and every request on its way to our server |
| Microsoft 365 | Emails we send you; sent timesheets in the office mailbox | |
| SimPro | The company's job system | Your schedule and jobs. CSC Timesheets only reads them |
| GitHub | Hosts the system's private code | The staff list |
| Apple | Delivers the app; runs location services on your phone | Covered by Apple's own privacy policy |
How long we keep it
| Information | How long |
|---|---|
| Shop arrival and departure times | 180 days, then deleted automatically |
| Nightly backups | Up to 30 days; something deleted from the server can remain in a backup until then |
| Timesheets, edits, change logs and sent spreadsheets, including rows filled in from shop times | Kept as payroll records; the system doesn't delete them automatically |
| Server request logs | Rolling, about 30 MB in total; the oldest lines are overwritten |
| Cloudflare sign-in logs and emails | Under Cloudflare's and the company's Microsoft 365 retention |
| On your phone | Sent times: at most 14 days and 50 events. Unsent times: until sent; any too old to send (14 days) are removed 14 days later |
Your choices
- Turn shop times off: iPhone Settings > Apps > CSC Timesheets > Location > Never (on iOS 17: Settings > CSC Timesheets > Location). Times already waiting on the phone are still sent the next time the app has a connection. To discard those too, delete the app.
- Precise Location: shop times need it on. With it off, nothing is noted.
- Notifications: Settings > Apps > CSC Timesheets > Notifications.
- Sign out: tap the gear in the app, then Sign out. This ends your sign-in and removes the sign-in cookie and the timesheet site's data from the phone. Unsent shop times stay on the phone and go out only under your own sign-in, if you sign in again within 2 weeks.
How we protect it
- Everything between the app and our server is encrypted (HTTPS), and the server can't be reached from the internet except through Cloudflare.
- The server admits only people on the staff list, checking their sign-in on every request.
- Inside itself, the app opens only the company's sign-in page and the timesheet site. Other links open in Safari.
- Shop times are only sent under the sign-in they were noted with, so on a shared phone one person's times never go out as another's.
If a security breach affects your information, we will tell you.
Seeing, correcting or deleting your information
- Your timesheet: change any row until you send the week. After that, ask the office.
- Anything else: email [email protected], call (209) 523-3898, or ask the office to see the information stored about you, correct it, or delete the shop times stored for you. We'll check the request comes from you, for example by replying to your work email.
- Deleting shop times: we delete them from the server, and backup copies age out within 30 days. Timesheet rows already filled in from shop times are part of your timesheet records and stay.
California employees may have additional rights under state law, including the right to request access to or deletion of their personal information. Contact us at [email protected].
Changes to this policy
When this policy changes, we update this page and its effective date, before any app version that collects something new reaches your phone.
Contact
Carlson Scale, Inc.
1418 Lone Palm Ave., Modesto, CA 95351
Email: [email protected]
Phone: (209) 523-3898