Marcato Privacy Policy
Effective October 31, 2026
Marcato was built so your work records belong to you. This policy explains what the app keeps, where it keeps it and who can see it.
Who is responsible
Marcato is developed by Noramis, which is responsible for this app. For any privacy question, write to [email protected].
What is recorded
Marcato only keeps what you create in the app:
- your punches, with the time, a selfie and the location at that moment
- the companies you work for, with the document number you choose to add for reports
- your projects, tasks and time entries
- absences, with a photo attached if you want
- your work schedules and hour bank settings
- the workplaces you add
To prove nothing was changed, every record gets a digital signature made with a key stored on your iPhone, plus technical details such as the time since the device was turned on.
Nothing is recorded in the background. The app only saves something when you punch or create a record.
Where it is kept
On your iPhone and in your private iCloud database, which only you can reach with your Apple Account. iCloud keeps your devices in sync and is covered by Apple’s privacy policy.
Marcato has no servers, no account and no analytics, advertising or tracking tools. The developer cannot see your data.
When available, the activity summary in reports is written by Apple Intelligence on your device.
Selfies and faces
When you punch, the camera checks on your device that a real face is in the photo, with a short liveness challenge such as a blink or a head turn. This check happens only on your iPhone.
Marcato does not create face templates, does not compare faces and does not recognize or identify anyone. The selfie is saved as a regular photo with the punch. People who receive a report compare the photos by eye.
Location
Marcato uses your location in two cases:
- at the moment you punch, to record where it happened
- if you turn on workplace reminders, iOS tells the app when you arrive at or leave those places so it can remind you to punch
The app does not follow your route or keep your position outside a punch. You can change location access at any time in your iPhone Settings.
Who sees it
Only you, and the people you send a report to, such as your employer, a funder or a client. Before you export, you choose the company, the period and what goes into each report. Marcato never sends anything on its own and never sells or hands data to anyone.
A signed file carries the selfies of the period it covers, so the person who receives it can see them. When you open a signed file from someone else, Marcato keeps on your iPhone the keys you confirm and the last record seen from each sender, only to detect a file that was altered later.
Purchases and subscriptions
Marcato Pro subscriptions are handled by Apple through the App Store. Marcato never receives your payment details. The app only asks Apple whether your subscription is active.
Your control
You can export all your data at any time. You can also erase everything from the app’s Settings. That removes your records and photos from your iPhone and from your iCloud.
Since your data stays with you, there is no copy on our side to request or delete.
Children
Marcato is a work time app made for adults. It is not aimed at children and does not knowingly collect data from children.
Changes to this policy
If this policy changes, the new version will be posted on this page with an updated date. Important changes will also be announced in the app.
Contact
Questions or requests about privacy: [email protected].