Sign in once - this device will remember you.
Punching needs two permissions on this device. They are used only while you punch.
Three taps, and the app sits on your home screen like any other.