Legal
Privacy Policy
Effective August 31, 2026
CommPartHS, LLC operates ClockIn. ClockIn is a U.S. job-discovery and work-based-learning service for people ages 15–20. This policy covers clockin.jobs and the ClockIn mobile app.
What we collect
- Account and age information: name, email, hashed authentication credentials, birthdate, city, and ZIP code.
- Job activity: searches, saved or blocked employers, applications, current work situation, availability, relevant experience, references you provide, hiring status, and employer-reported hours.
- Profile and work information: availability, transportation, skills, work-permit status or files you choose to provide, and preset avatar selection. Students cannot upload public profile photos.
- School-linked records: only after a school connection is verified, the connection, placements, approved hours, credentials, agreements, school messages, and district content.
- Safety and support: reports, support requests, and related responses.
- Technical information: IP address, security logs, device and app diagnostics needed to authenticate, prevent abuse, and operate the service.
The iPhone app may ask for camera access only when you choose to photograph a signed work-based-learning form. It does not request precise location, contacts, microphone access, or photo-library access for ordinary job search.
How we use information
We use information to operate accounts, show age-appropriate jobs, send applications to the employer you choose, connect verified school services, track authorized work-based-learning records, provide support, investigate safety reports, prevent fraud, and comply with law. We do not sell personal information, use it for targeted advertising, or use student information to train general-purpose AI models.
Who can see what
Employers receive the profile, application, and reference information submitted for their job. A school does not receive a student's job-search or rejection history. A school receives a placement or hours only after the student is verified to that school and the applicable school workflow confirms the record. One district cannot see another district's student records.
Service providers
We use Amazon Web Services for hosting and the primary database, Cloudflare for network security and protected media storage, and Resend for transactional email. Payment information for employer services is handled by Stripe. These providers may process information only to deliver their services to us.
Retention and deletion
If you combine a self-created account with a school-provisioned ClockIn account, we consolidate the profiles and their non-conflicting job and school records, disable the duplicate login, and retain an audit record of the merge. Combining accounts does not give a school access to consumer searches, saved jobs, rejections, or applications it could not already access through an authorized school workflow.
You can delete a consumer ClockIn account inside the app under My Account. We deactivate the login, remove direct profile identity, revoke live school links, and remove saved-job, follow, skill, permit, and guardian-link data from active use. Applications, hires, verified hours, audit evidence, safety records, and education or employment records may be retained in de-identified or access-restricted form where the school, employer, safety obligation, or law requires an accurate record. Backups expire on their normal protected schedule.
School-controlled education records are controlled by that school. Contact the school to exercise FERPA rights or request correction of its records. For ClockIn consumer data requests, email privacy@commparths.com.
Age and families
ClockIn does not permit self-service accounts for people under 15. COPPA applies to children under 13; ClockIn's higher age floor is enforced at registration. A parent or guardian should help a minor understand these terms and may contact us with a privacy or safety concern.
Security, changes, and contact
We use encrypted transport, access controls, audit logging, protected storage, and database isolation. No system is perfectly secure. We may update this policy and will post the effective date here. Privacy questions: privacy@commparths.com. Urgent safety reports: security@commparths.com.