Privacy Policy
Last updated: 1 June 2026
This policy explains what personal data the PAX apps and the pax.works website collect, why, who sees it, how long we keep it and what you can do about it.
Who we are
PAX is a workforce app and platform for clocking in and out, shifts, tasks, leave, reports, messages and mail. It is provided by DAMOVA LIMITED (company number 16893209), 10a Aldermans Hill, London N13 4PJ, United Kingdom (“PAX”, “we”, “us”).
Contact for privacy questions and requests: support@pax.works. [CONFIRM: data protection officer or named privacy contact, if one is appointed]
Our role: employer and PAX
You normally use PAX because your employer or organisation has set up a workspace and added you to it.
- Your employer (or the organisation that runs your workspace) is the controller of the work records created in its workspace: shifts, clock-in and clock-out records, leave, tasks, reports, documents, messages and mail. It decides why and how they are used. PAX processes them on its behalf as processor. Questions about how your employer uses those records should go to your employer first.
- PAX is the controller of your account and sign-in data (your phone number, name, optional email and photo, sign-in sessions and device registrations), and of the operation and security of the service.
What we collect
| Data | Why we need it |
|---|---|
| Phone number | To create your account and sign you in with a one-time code sent by SMS. |
| Name | To show who you are to your colleagues and employer. |
| Email address and profile photo (optional) | To complete your profile and for account contact. |
| Emergency contact (if you or your employer add one) | Held in your workspace profile for your employer's safety and welfare purposes. |
| Precise location, only while the app is open | To check that you are at your workplace when you clock in and out, to show nearby workplaces, and to record the location at the time of each clock event. See the location section below. |
| Clock, shift, break, leave and absence records | To record attendance and working time for your employer. |
| Photos, files and form answers you submit as task proof or reports | To show that work was done, as your employer requires. |
| Messages and PAX Mail content | To deliver chat and email inside your workspace. |
| Device and push identifiers, device name and type, session information | To keep you signed in, deliver notifications, show your active devices and let you or an admin sign a device out. |
| Basic technical logs (such as IP address and request time) | To keep the service secure and fix faults. |
The apps ask for permission before using your camera (task proof photos and QR codes), photo library (choosing a photo to upload), notifications and location. You can change these permissions in your device settings at any time. Some features will not work without them. In particular, clocking in at a workplace needs location.
We do not use advertising identifiers, we do not sell personal data and we do not use your data to show you advertising or to track you across other companies’ apps and websites.
Location
PAX uses your precise location only while the app is open and in use. It does not track you in the background and it does not ask for “Always” or background location access.
Location is used when you clock in or out, to show nearby workplaces, and to check while the app is open that you are still at your workplace during a shift. The location recorded at the time of a clock event is stored with that record and is visible to your employer’s workspace. Remote or work-from-home shifts that your employer has set up do not require you to be at a workplace.
How we use data and our legal bases
- To provide the service you or your employer asked for, including sign-in, clocking, tasks, messaging and notifications (performance of a contract, or the employer’s own lawful basis for work records).
- To keep the service secure, prevent abuse and fix problems (our legitimate interests).
- To meet legal obligations, and to establish or defend legal claims.
- To send service messages, such as sign-in codes and shift reminders. We do not send marketing through the apps.
Who we share data with
- Your employer and workspace. Members and administrators of your workspace can see the work records and profile details that the workspace is set up to show.
- Service providers (processors) that help us run PAX: cloud hosting and storage; an SMS provider that delivers sign-in codes; Google (Firebase Cloud Messaging for push notifications, and Google Maps to display maps); and our sign-in identity provider, which verifies your phone number. They may only use data to provide their service to us.
- Authorities and advisers where the law requires it or to protect rights and safety.
If we ever sell or restructure the business, personal data may be transferred to the new owner under the same protections.
International transfers
Some providers may process data outside the UK. Where they do, we rely on adequacy regulations or approved safeguards such as the UK International Data Transfer Agreement or the UK Addendum to the EU Standard Contractual Clauses. [CONFIRM: hosting region and the transfer mechanism for each provider]
How long we keep data
- Account and sign-in data: until you delete your account, or until it is removed on request. Sign-in sessions expire automatically. [CONFIRM: inactive account retention period]
- Work records owned by your employer (shifts, clock records, leave, tasks, documents, messages): kept for the period your employer sets for its workspace. [CONFIRM: default retention period for workspace records]
- Location history and push tokens linked to your devices: deleted when you delete your account.
- Security and server logs: [CONFIRM: log retention period].
Deleting your account
You can delete your account in the app (Profile, then Account settings, then Delete account) or on our account deletion page. Deleting removes your name, phone number, email, profile photo, emergency contact, devices and location history, removes you from every workspace and signs you out on every device.
Your employer keeps the work records it owns, such as shifts, clock-in and clock-out times (with the location recorded at the time), leave, tasks and messages. These then show as “Deleted user” and are no longer linked to your contact details. Our sign-in provider may keep the phone credential used for sign-in for a limited time after deletion.
Your rights
Under UK data protection law you have the right to be informed, to access your data, to have it corrected or erased, to restrict or object to its use, to data portability and to object to automated decisions. Where we rely on consent you can withdraw it at any time.
To use these rights, email support@pax.works. For work records, you may also ask your employer directly. We will reply within one month. We may ask you to prove your identity first.
If you are unhappy with how we handle your data, you can complain to the UK Information Commissioner’s Office at ico.org.uk. We would appreciate the chance to put things right first.
Security
Data is encrypted in transit using HTTPS. Access is limited to people who need it, and sign-in sessions can be revoked. No online service is completely secure, so please protect your phone and sign out of shared devices.
Children
PAX is a workplace tool. It is not intended for children and is not directed at anyone under 16. We do not knowingly collect personal data from children. If you think a child has an account, email support@pax.works and we will remove it.
Changes to this policy
We will update this page when our practices change and show the date at the top. For significant changes we will tell you in the app or by another suitable route.
Contact
Email support@pax.works or see our support page. You can also read our Terms of Service.