Case Study · Workforce SaaS

A privacy-first time tracker built for UK businesses.

We designed and built Geo Time Tracker end-to-end — a UK GDPR-aligned, GPS-verified workforce attendance platform that confirms staff are on site without surveilling them between clock-in and clock-out.

ProductEmerador
SectorWorkforce Management SaaS
ScopeArchitecture, build, mobile, billing, compliance
StatusLive · Android app on Google Play
08:42
Thu 30 Apr · On Shift
Within Geofence
Site A — Maidstone
Clock Out
The Brief

Verify attendance without surveilling staff.

UK SMBs with field, site and hybrid teams face a recurring headache: paper timesheets are unreliable, but most workforce-tracking tools take the opposite extreme — continuous GPS tracking, movement history, and surveillance-grade telemetry that is hard to square with UK GDPR.

The brief was to build a workforce attendance product that verifies the right thing — was the worker actually on site at clock-in and clock-out — and nothing else. No live tracking, no movement history, no background location. Built for the UK, hosted in the UK, and aligned to UK GDPR by design.

Beyond the privacy stance, the product needed everything a real SaaS needs: multi-tenant accounts, three-tier subscription billing, a manager dashboard, a super admin panel, a native mobile app for workers, automated timesheet calculation, and a compliance posture that holds up to scrutiny.

The Hard Parts

Decisions that shaped the product.

01

Privacy versus verification

How do you prove a worker was on site without tracking them all day? Continuous GPS solves verification but creates a surveillance product that staff resent and UK GDPR penalises.

Our Approach

Point-in-time GPS only — captured at the moment of clock-in and clock-out, never between. Geofencing is configurable per company policy. The marketing line "no live tracking" is an architectural fact, not a promise.

02

UK GDPR versus HMRC retention

Right-to-erasure under UK GDPR collides with HMRC's seven-year retention requirement for payroll-related records. A naïve "delete everything on request" creates legal exposure for the customer.

Our Approach

Tiered retention by plan with audit logs decoupled from operational data. Erasure handling explicitly addresses the HMRC carve-out in T&Cs and the DPA.

03

Multi-tenant SaaS billing

Three plan tiers, free trials, feature gating per tier, prorated upgrades, and a Stripe live-mode integration that has to handle real money on day one.

Our Approach

Stripe Subscriptions with company-scoped subscription models, webhook-driven state, and feature flags resolved at the request layer. Trial flows collect payment details upfront.

04

Three surfaces, one source of truth

Workers need a fast native mobile experience. Managers need a dashboard. The product team needs an admin panel. Three audiences with different needs — but consistent data and business rules.

Our Approach

One Django REST API as the single source of truth. Native Android (Kotlin / Jetpack Compose) for workers. Mobile-friendly Django dashboards for managers and super admins. Celery for scheduled work.

Architecture

A simple system that does serious work.

Clients
Native Android · Web DashboardsWorkers · Managers · Super Admin
API
Django REST FrameworkAuth · Multi-tenant · Feature-gated
Workers
Celery · Celery BeatTimesheets · Retention · Billing sync
Data
PostgreSQL · Object StorageTenant-scoped · UK-hosted
Services
Stripe · Email · Cloud StorageLive billing · Transactional · Backups

Backend

PythonDjangoDRFPostgreSQLCeleryRedis

Mobile

KotlinJetpack ComposeHilt

Web

Django TemplatesTailwind CSSLucide Icons

Infrastructure

StripeCloudflare R2UK Hosting
Delivered

Everything a real SaaS needs.

01

GPS-verified clock-in/out

Point-in-time location capture at shift start and end, with configurable geofencing per site and per company policy.

02

Automated timesheets

Hours auto-calculated from clock events. No separate timesheet module — the data is the source of truth.

03

Three-tier Stripe billing

Starter, Business and Enterprise plans with feature gating, free trials, and webhook-driven subscription state.

04

Tiered GDPR retention

Plan-based retention windows with audit logs decoupled from operational data. Right-to-erasure with HMRC carve-outs.

05

Manager & super admin dashboards

Mobile-friendly Django interfaces covering team management, shift oversight, billing, support and audit trails.

06

Native Android worker app

Built in Kotlin and Jetpack Compose, published on Google Play. No background location, no movement history.

07

Marketing & SEO site

Full Django-served marketing site with industry landing pages, structured data, and content tuned for UK search.

08

Legal & compliance pages

T&Cs, Privacy Policy, GDPR statement and cookie posture — drafted with UK GDPR, DPA and HMRC retention in mind.

Inside the Product

Manager dashboard.

geotimetracker.app/dashboard
Geo Time Tracker manager dashboard

Real-time team visibility — clock states, locations and shift status, without continuous tracking.

Compliance & Trust

Built for UK procurement scrutiny.

Privacy and compliance aren't a marketing layer — they're load-bearing decisions in the architecture, the data model, and the contracts.

  • UK GDPR aligned by design
  • UK data hosting
  • Encryption in transit and at rest
  • DPA-ready as data processor
  • Strictly-necessary cookies only
  • No live GPS tracking
  • Role-based access controls
  • Audit logs decoupled from data
  • Tiered retention by plan
  • HMRC retention obligations addressed
Live in Production

Web platform live. Android app on Google Play.

Geo Time Tracker is deployed, the marketing site is live, and the native Android worker app is published on the Google Play Store. We're now opening the platform to its first UK customers.

Need something similar?

From idea to launch — end-to-end.

If you need a regulated, multi-tenant SaaS taken from architecture to live, we'd like to talk.