Timecard is a punch clock. It records when you start and stop work, totals your hours per pay period and works out your pay. The short version: your data stays with you. The developer does not collect it, see it, sell it or share it.
Work entries (start time, stop time), your settings (hourly rate, currency, pay period, rounding) and, if you turn on an integration, the server address and token you enter for it. That is all. There are no accounts, no sign-up and no profile.
On your device, and in your own iCloud account so that your iPhone, Apple Watch and Mac show the same entries. iCloud storage is provided by Apple under Apple's terms; the developer has no access to it. If iCloud is off, the data stays on the device only.
Nothing. The app contains no analytics, no advertising, no tracking and no third-party software development kits. It does not contact any server operated by the developer.
Siri phrases such as "Punch in with Timecard" are handled by Apple's Siri on your device. Timecard only receives the resulting command and the time you said.
Settings → Integrations lets you connect Timecard to a time-and-attendance system run by your employer, currently Acroprint timeQplus. This is off by default. When you turn it on and enter a server address and token, the app sends the punches of a pay period you choose to that server, and only when you press Sync. That server belongs to whoever gave you the address, typically your employer, and their handling of the data is governed by their policies, not this one.
You can export your hours as a CSV file. Where that file goes is up to you.
Delete entries in the app, or delete the app. To remove the iCloud copy as well, open Settings on your iPhone → your name → iCloud → Manage Account Storage → Timecard → Delete.
Timecard is a workplace tool and is not directed at children under 13.
If this policy changes, the new version is posted at this address with a new effective date.
Jacob Koop, koopster@gmail.com