We designed and built Geo Time Tracker end-to-end — a UK GDPR-aligned, GPS-verified workforce attendance platform that confirms staff are on site without surveilling them between clock-in and clock-out.
UK SMBs with field, site and hybrid teams face a recurring headache: paper timesheets are unreliable, but most workforce-tracking tools take the opposite extreme — continuous GPS tracking, movement history, and surveillance-grade telemetry that is hard to square with UK GDPR.
The brief was to build a workforce attendance product that verifies the right thing — was the worker actually on site at clock-in and clock-out — and nothing else. No live tracking, no movement history, no background location. Built for the UK, hosted in the UK, and aligned to UK GDPR by design.
Beyond the privacy stance, the product needed everything a real SaaS needs: multi-tenant accounts, three-tier subscription billing, a manager dashboard, a super admin panel, a native mobile app for workers, automated timesheet calculation, and a compliance posture that holds up to scrutiny.
How do you prove a worker was on site without tracking them all day? Continuous GPS solves verification but creates a surveillance product that staff resent and UK GDPR penalises.
Point-in-time GPS only — captured at the moment of clock-in and clock-out, never between. Geofencing is configurable per company policy. The marketing line "no live tracking" is an architectural fact, not a promise.
Right-to-erasure under UK GDPR collides with HMRC's seven-year retention requirement for payroll-related records. A naïve "delete everything on request" creates legal exposure for the customer.
Tiered retention by plan with audit logs decoupled from operational data. Erasure handling explicitly addresses the HMRC carve-out in T&Cs and the DPA.
Three plan tiers, free trials, feature gating per tier, prorated upgrades, and a Stripe live-mode integration that has to handle real money on day one.
Stripe Subscriptions with company-scoped subscription models, webhook-driven state, and feature flags resolved at the request layer. Trial flows collect payment details upfront.
Workers need a fast native mobile experience. Managers need a dashboard. The product team needs an admin panel. Three audiences with different needs — but consistent data and business rules.
One Django REST API as the single source of truth. Native Android (Kotlin / Jetpack Compose) for workers. Mobile-friendly Django dashboards for managers and super admins. Celery for scheduled work.
Point-in-time location capture at shift start and end, with configurable geofencing per site and per company policy.
Hours auto-calculated from clock events. No separate timesheet module — the data is the source of truth.
Starter, Business and Enterprise plans with feature gating, free trials, and webhook-driven subscription state.
Plan-based retention windows with audit logs decoupled from operational data. Right-to-erasure with HMRC carve-outs.
Mobile-friendly Django interfaces covering team management, shift oversight, billing, support and audit trails.
Built in Kotlin and Jetpack Compose, published on Google Play. No background location, no movement history.
Full Django-served marketing site with industry landing pages, structured data, and content tuned for UK search.
T&Cs, Privacy Policy, GDPR statement and cookie posture — drafted with UK GDPR, DPA and HMRC retention in mind.
Real-time team visibility — clock states, locations and shift status, without continuous tracking.
Privacy and compliance aren't a marketing layer — they're load-bearing decisions in the architecture, the data model, and the contracts.
Geo Time Tracker is deployed, the marketing site is live, and the native Android worker app is published on the Google Play Store. We're now opening the platform to its first UK customers.
If you need a regulated, multi-tenant SaaS taken from architecture to live, we'd like to talk.