Trust
A page to show your works council. It says what the tool does not measure, what the employer, the manager and colleagues see, and how long each piece of data stays. Every sentence describes the product as it works.
Checked against the code on 25 September 2026. The privacy policy prevails.
Office attendance is declared by the employee (office, remote, travel, absent): it is never inferred from a GPS position or a Wi-Fi network. When a space booking is checked in from the app, the phone’s position is used to confirm the person is on site: only the distance to the space and the accuracy of the reading, in metres, are recorded with the booking, never the position.
K-work installs no monitoring software: no keystrokes, no screenshots, no time spent in applications.
The K Sense sensor measures CO2, temperature, humidity, light and infrared presence. It knows a space is occupied, not by whom; if the space is booked, that presence confirms the booking.
When a week has not been declared, the reminder goes to the employee, and to them alone. No real-time alert about a person: the only named message is a periodic summary to HR or administrators, which the company must switch on (off by default).
The company’s attendance rule blocks no booking and writes to no file. One day more or less can be read, that is all.
Comparisons with other companies only appear aggregated over at least five companies, and never point to a person.
What the company administrator sees
What the manager sees
The declared absences and trips of their team, to organise the work, without the reason. A member who hides their presence is not listed: they are counted, never named.
What colleagues see
Who will be at the office on which days, so people can meet up. Anyone can hide their presence: they then disappear from the floor plan and the team view, and no longer see the others’ days.
What the lobby screen shows
By default, nobody who is present. The company can choose to display their number, their first name and last-name initial, or their first and last name (“names” mode): anyone passing through the lobby, visitors included, can then read them. Anyone who has hidden their presence is counted there, never named.
Beyond the stated period, data is automatically deleted or anonymised. Where a row says there is no automatic purge, the data stays as long as the account exists.
| Data | Period |
|---|---|
| Attendance declarations, day by day (office, remote, travel, absent) | No automatic purge: kept as long as the account exists, even after leaving the company, then deleted with it |
| Desk, parking and locker bookings, with the check-in time | No automatic purge: kept as long as the account exists, even after leaving the company, then deleted with it |
| GPS distance and accuracy when checking in to a space booking (in metres, never the position) | With the booking, as long as the account exists |
| Raw K Sense sensor readings (CO2, temperature, presence) | In normal operation, 23 to 24 hours after receipt by the server. The hourly purge removes readings older than 23 hours; a failed purge can delay deletion. Afterwards, only averages with no identity remain. |
| Visitors’ name, email, phone, company and purpose of visit | 90 days after the visit by default (7 days to 3 years, chosen by the company), then anonymised |
| Audit log: payments, bookings, check-ins, administrators’ actions | 13 months |
| K-work team log: sign-ins and actions in its administration tool | 13 months |
| Usage log of enterprise API keys | 13 months |
| Private messages between members | 13 months |
| Availability probes (status page) | 90 days |
| Notification identifiers of an inactive device | 6 months without activity; as the purge runs once a month, an inactive identifier may remain for up to about 7 months |
| Account deleted at its holder’s request | Erased 30 days after the request, within the following hour, except records the law requires us to keep (invoices: 10 years) |
This page summarises. The privacy policy prevails; any question from the works council or an employee can be sent to our data protection officer.