NovaTimePuncher
macOS, iOS
A punch clock for NovaTime time-tracking systems — on the Mac from the menu bar and on iPhone as an app. No ads, no cross-app tracking; optional anonymous statistics you can turn off anytime.
Last updated: August 5, 2026
1. Overview and Controller
What this is about
NovaTimePuncher books clock-in, clock-out, and breaks on the NovaTime time-tracking server you configure yourself in the settings (usually your employer's server). Robware does not operate any server of its own; your credentials and booking data are not transmitted to us. The app contains no ads. To improve the product, it optionally collects anonymous, aggregated usage statistics (see section 4) that you can turn off at any time.
Controller
The controller responsible for data processing is: Robware, owner Robin Wichmann, Hauptstr. 58c, 21640 Bliedersdorf, Germany. E-mail: kontakt@robware.de
2. Data Stored Locally
Credentials
Your personnel number and password are stored locally on your device. The password is encrypted with AES-GCM; the key is bound to your device (derived from a device-specific hardware identifier on the Mac, stored in the Keychain on iPhone).
Working-time data
Recorded working and break times, the weekly overview, and technical logs of the bookings are stored locally on your device. This data never leaves your device.
Legal basis
Processing is carried out to provide the app's features on the basis of Art. 6(1)(b) GDPR.
3. Transmission to the Time-Tracking Server
When punching, the app transmits your personnel number, your password, and the booking action to the NovaTime server you configured. Without a configured server, the app runs in a local demo mode and transmits nothing. The operator of the NovaTime server (usually your employer) is responsible for processing your time-tracking data there; their privacy policies apply. The app does not transmit data to any other recipients.
4. Anonymous Usage Statistics
What is collected
To improve the product, the app collects anonymous, aggregated usage signals: that the app was launched, that the punch and break functions are used, and whether a server is configured or the demo mode is running. No working times, no personnel number, no server URL, and no advertising identifier (IDFA) are transmitted; there is no cross-app tracking and no personal profile is created.
Processor
The signals are processed by TelemetryDeck GmbH on servers in the European Union. TelemetryDeck is designed for data-minimizing, anonymous statistics and does not use cross-device identifiers.
Objection / Opt-out
You can turn the anonymous statistics off at any time in the app settings via the anonymous-statistics toggle; no further signals are sent afterwards.
Legal basis
Processing is based on our legitimate interest in improving the app's quality and stability (Art. 6(1)(f) GDPR). You may object at any time via the toggle mentioned above.
5. Storage Period and Deletion
All local data remains on your device until you reset it in the app or uninstall the app. To have data on the time-tracking server deleted, contact its operator.
Your Rights
Under the GDPR you have the right of access to the personal data concerning you (Art. 15), the right to rectification (Art. 16), erasure (Art. 17), restriction of processing (Art. 18), data portability (Art. 20), and the right to object to processing based on Art. 6(1)(f) GDPR (Art. 21). You may withdraw any consent you have given at any time with effect for the future. You also have the right to lodge a complaint with a data protection supervisory authority.
Contact
We answer questions about privacy in NovaTimePuncher at kontakt@robware.de.