Version of 07.11.2026
Privacy policy
Lenarta app (ch.lenarta.app) for iPhone and Android, test version.
In short
- Your employer decides why your hours are recorded. Lenarta processes them on its behalf. For the security of the platform and for support, Lenarta is itself responsible (section 1).
- The app records your display name, your clock-ins and their corrections. This version asks for neither your location, nor the microphone, nor the camera, nor your contacts.
- No advertising, no trackers, no audience measurement. No data is sent to an artificial intelligence model.
- Your work data is stored in Switzerland, in Geneva. The provider that operates the database (Aiven) may have technical access to it, notably from Finland (section 6).
- You can delete your access in the app: Me, then Delete my account. Your employer keeps your hours for as long as the law requires (section 10).
1. Who is responsible for what
This app is published by Lenarta, Albert Ghazaryan, sole proprietorship, Chemin des Abeilles 25, 1010 Lausanne, Switzerland ("Lenarta" in this page). On the App Store and on Google Play, the developer is Lenarta (Albert Ghazaryan). Your personal data: privacy@lenarta.ch. Support: support@lenarta.ch.
| Processing | Responsible | Lenarta's role |
|---|
| Your clock-ins, their corrections, your team member record (display name, role, language) | Your employer. It decides what is recorded and why. | Processor: Lenarta processes this data on your employer's instructions and under a processing agreement, and does not use it for any other purpose. |
|---|
| Security and operation of the platform: registering phones, limiting abuse, technical logs | Lenarta | Responsible. |
|---|
| Your messages to Lenarta and the handling of your requests (rights, deletion) | Lenarta | Responsible. For your work data, Lenarta passes your request to your employer. |
|---|
| The lenarta.ch website and its demo request form | Lenarta | Responsible (see the website's Data protection page, in French). |
|---|
Your employer, responsible for your work data, gives you its name and contact details. Its name also appears in the app, under Me.
2. What the app records
| Data | Why |
|---|
| Your display name, your role and your language, given by your employer | Show whose clock-in each one is, speak to you in your language |
|---|
| A member identifier and a phone identifier, created by Lenarta | Tie your phone to your account and recognise that it is the right one |
|---|
| The word "iPhone" or "Android", never the model or a serial number | Let your management recognise your phone |
|---|
| Your clock-ins: arrival, start and end of break, departure, with the phone time, the time the server received it and the site chosen | Establish your working time, which your employer must be able to present to the authorities |
|---|
| Your clock-in corrections with their reason, as free text, read by your management | Let management decide. Write only what explains the correction, no health information |
|---|
| Your account deletion request | Keep a trace of your request |
|---|
| Your session tokens | Recognise you at each send without a password |
|---|
| The event register: each clock-in and each decision is entered in it, append-only | Keep the proof of what was done, and by whom |
|---|
| Technical logs: date, function called, result, duration, technical identifiers of the company, the member and the phone. Never a name, typed text or content | Security, detecting abuse, finding faults |
|---|
| Your messages to support@ and privacy@, and our replies | Answer your requests |
|---|
On your phone, clock-ins that have not been sent yet and your settings (language, sounds) are stored in an encrypted database. The key of this database is in the phone's keychain (Keychain on iPhone, Keystore on Android) and is copied to no other device. Android's automatic backup is turned off for this app.
Each time the app talks to the server, the server sees the IP address of the connection. It is used to limit abuse. It stays in the memory of the application server for 16 minutes at most after the last request and is not written in the application's logs. The web server in front of the application may record the IP address of connections, for 30 days at most.
3. What the app does not record
- Your location.
- Your microphone, your contacts, your photos, the camera.
- Your phone's advertising identifier.
- No advertising, no analytics tool, no tracking, no cookie.
If a future function uses one of these, this page will be updated before the function is released. The app will ask for the system's permission at the moment you need it. For location, your employer must also turn the function on; it will be used only at the moment you clock in and never read in the background.
4. Why your data is processed
- So that your working time is recorded, even without a network, then validated by your management.
- To secure your access, limit abuse and recognise a lost or copied phone.
- To run the platform and look for faults.
- To answer your requests for support, for access to your data and for deletion.
Lenarta does not sell data and does not advertise. There is no continuous tracking and no productivity score. No decision about you is taken solely by automated processing: a person in your management validates or corrects your hours.
5. Who sees your data, and who processes it for Lenarta
At your employer: your management and the people it designates.
At Lenarta: its staff, only to run the service, keep it secure or answer a request. Their access to a company's data goes through named tools, and every action is entered in a log. Your employer's management will be able to read this log in the app as soon as the screen exists; until then, you can ask for it at privacy@lenarta.ch.
Lenarta's providers (processors). Lenarta signs a processing agreement with each of them before any real data, and informs its client companies before adding one.
| Provider | What it does | Where | Data concerned |
|---|
| Exoscale | Hosts the application server, the database, storage and backups | Switzerland: Geneva, copies in Zurich | All the application's data |
|---|
| Aiven | Operates the database managed by Exoscale (backups, failovers, updates) | Notably Finland (European Union) | Technical access to the database |
|---|
| Infomaniak | Domain name, lenarta.ch website, e-mail | Switzerland | Your messages to Lenarta, visits to the website |
|---|
Distribution of the app. Apple (App Store, TestFlight) and Google (Google Play) distribute the app. They are responsible for the data they collect themselves (account, installation, crash reports you agree to share). Lenarta sends them neither your clock-ins nor any other work data. They are established in the United States. This version sends no notifications. If notifications are added, they will go through Apple's and Google's services with a minimal text, and this page will be updated first.
Building. Expo builds the app's code. It receives no data about any person.
Lenarta does not pass your data to a data broker or for advertising, and sends no data to an artificial intelligence provider. An authority entitled to do so may ask for access to data; Lenarta informs the company concerned when the law allows it.
6. Where your data is
| Country | Who | What | Safeguard |
|---|
| Switzerland | Exoscale (Geneva, copies in Zurich), Infomaniak | All the application's data; your messages to Lenarta | Data stored in Switzerland |
|---|
| Finland | Aiven | Operating access to the database | Finland is listed in Annex 1 of the Data Protection Ordinance: the Federal Council recognises an adequate level of protection; processing agreement |
|---|
| United States | Apple, Google | Their own distribution data. No work data sent by Lenarta | They are responsible for it |
|---|
Your work data is stored in Switzerland. Lenarta sends none of it to the United States. If another country of access is added, this page is updated and client companies are informed beforehand.
7. For how long
These durations are maximums, except those that say “at least”. Lenarta erases each item as soon as it is no longer needed and, at the latest, at the end of the period shown.
| Data | Duration |
|---|
| Access, registered phones, tokens, unused invitations | Deleted at once when you delete your account. Without deletion, a phone left unused for 180 days is signed out: a new invitation is then needed |
|---|
| Line of a revoked phone (identifier, dates, reason) | Deleted at the latest 12 months after revocation |
|---|
| Clock-ins, corrections (without the free-text sentence, erased earlier), days, event register | Kept by your employer for at least 5 years after their validity expires (art. 73 para. 2 OLT 1, Ordinance 1 to the Labour Act), then erased or anonymised within the following 12 months, unless another legal obligation applies |
|---|
| The free-text sentence of a correction (reason “Other”) | Kept by Lenarta for your employer, at most four months after you send it, then erased. Your management needs to read it to reply. Your hours record does not need it: it keeps only the reason you chose |
|---|
| Trace of your account deletion | As long as your employer's register, because it proves your request |
|---|
| Accounting records: signed work orders, invoices (future functions) | 10 years from the end of the financial year (art. 958f para. 1 Code of Obligations) |
|---|
| Member record (display name, role, language) | During your employment, then as long as your employer must keep the registers in which it appears |
|---|
| Technical logs of the application | 30 days at most, with technical identifiers, without names or content |
|---|
| Log of Lenarta staff access to your data (who, when, why) | At least 1 year, append-only |
|---|
| IP address | In the memory of the application server, 16 minutes at most after the last request; in the logs of the web server in front of the application, 30 days at most |
|---|
| Your messages to support@ and privacy@, and our replies | At most 12 months after the last reply |
|---|
| Backups | A deleted item disappears from the backups within 30 days at most (daily encrypted copy in Zurich, kept 30 days) |
|---|
| End of the contract between your employer and Lenarta | Your employer can export its data for 30 days; Lenarta then erases it within 90 days. This does not release your employer from keeping its registers |
|---|
8. Security
- All connections of the app are encrypted (HTTPS).
- The phone's database is encrypted; its key stays in the phone's keychain.
- Each company is isolated from the others in the database, and automated tests check it at every change.
- Your phone identifies itself with a short token, renewed automatically. A lost phone can be revoked: it stops accessing data at the next request.
- Access by Lenarta's staff is named and logged.
- In case of a data security breach, Lenarta informs the company concerned as soon as possible. That company reports the incident to the Federal Data Protection and Information Commissioner (FDPIC) and informs the people concerned when the law requires it. For data it is itself responsible for, Lenarta makes the report.
- To report a vulnerability: security@lenarta.ch.
9. Your rights
You can ask which data is processed about you, why, for how long and who receives it (right of access, art. 25 of the Federal Act on Data Protection, FADP); have inaccurate data corrected (art. 32 FADP); receive in a commonly used electronic format the data you provided yourself, such as your clock-ins (art. 28 FADP); object to a processing, ask for a given disclosure to be prohibited or for data to be erased, or have a datum marked as disputed (art. 32 FADP and art. 28 ff. of the Civil Code). Erasure is not possible for what the law requires to be kept (section 7).
Write to privacy@lenarta.ch or to your employer. For your work data, your employer is responsible and answers you; Lenarta passes your request to it within 5 working days and helps it answer. For the data Lenarta is responsible for (section 1), Lenarta answers itself. The answer is free and is given within 30 days of receipt of the request; if that is not possible, you are told why and when. To protect your data, we check who you are: do not send a copy of an identity document before you are asked to.
Lenarta does not ask for your consent to process your hours: your employer decides on this processing and answers for it (section 1). System permissions (camera, microphone, location, notifications), if a future function asks for them, can be withdrawn at any time in the phone's settings.
You can also contact the FDPIC (edoeb.admin.ch) or go to a civil court.
10. Delete your account
In the app: Me, then Delete my account. Your access, your phones, their tokens and unused invitations are deleted at once, as well as Lenarta's data on the phone. Your management is told. Your employer keeps its registers (your hours, your team member record) as the law requires: section 7 says for how long. If you no longer have your phone, write to support@lenarta.ch. Details are on lenarta.ch/en/suppression.
11. The lenarta.ch website
The pages of lenarta.ch use no cookie, no audience measurement tool and no script or font from another site. What the website records (the host's logs, the demo request form) is described in the website's Data protection page, in French.
12. Languages and changes
This page is published in French and English; the app's other languages will follow before 01.01.2027. The version date is at the top of the page. When a function adds data (photos, voice, notifications, location), this page is updated before it is released. Client companies are informed before a provider is added.
privacy@lenarta.ch (your data) · support@lenarta.ch (support) · security@lenarta.ch (vulnerability) · Lenarta, Albert Ghazaryan, Chemin des Abeilles 25, 1010 Lausanne, Switzerland