Privacy Policy

1. Who we are

Work Hour Book (the "app") is made by GLN Tech ("we", "us", "our"). This Privacy Policy explains what personal information we collect when you use the Work Hour Book apps for Android, iPhone and iPad, the web app at app.workhourbook.com, our websites, the optional account and cloud-sync service, notifications and home-screen widgets (together, the "Service"), and how we use, share and protect it.

For the purposes of data-protection laws such as the EU and UK General Data Protection Regulation ("GDPR"), GLN Tech is the controller of your personal information. You can reach us at support@workhourbook.com (see section 14).

This policy is part of our Terms of Service.

2. Information we collect

a. What you enter in the app ("Your Data")

Jobs and clients, pay rates and currencies, pay-period and overtime settings, shifts (start and end times, breaks, time zones), notes, tips, mileage, expenses, allowances, deductions, paid marks and similar work records.

• Without an account, Your Data is stored only on your device. We cannot see it.
• With an account, Your Data is also stored on our servers and synced to your other devices and the web app.

b. Account information (only if you create an account)

• Your email address and a unique account ID.
• Your password, if you set one. It is stored only in a securely hashed form by our authentication provider; we never see it.
• If you sign in with Google or Apple: the email address and, if they provide it, your name and profile picture that you allow them to share. With Apple's "Hide My Email", we receive a relay address instead of your real one.
• Sign-in records such as when you signed in and the method used.

c. Purchase information (only if you subscribe or restore a purchase)

Subscriptions are processed by Apple or Google. We and our subscription-management provider receive a customer ID (your account ID when signed in, or a random ID when not), which product you bought, purchase and renewal dates, subscription status, country or storefront, currency and price. We never receive your card or bank details.

d. Advertising information (free version of the phone apps only)

The free version shows ads served by Google AdMob. Every ad request this app makes is non-personalised, on every platform and in every region. It is not a setting and not something consent can change: the app never asks for a personalised ad, so no profile of you is built or used to choose what you see, and we do not track you. On iPhone and iPad the advertising identifier (IDFA) is never accessed and the app never asks for tracking permission. To serve and measure ads, Google still collects limited information from your device, which may include IP address, approximate location derived from it, device model and operating system, app version, language, interactions with ads, and on Android the Advertising ID. Google uses that for choosing ads by context, for frequency capping, fraud prevention and aggregate reporting, not for profiling you. Premium users and the web app see no ads. See section 9 for your choices.

e. Notification information

If you allow notifications and are signed in, we store a push token (an address issued by Apple or Google for delivering notifications to this app on your device), a random installation ID we create, and the device platform (Android or iOS). We use them only to tell your devices when your shift changes on another of your devices. Reminders such as "still clocked in?" are scheduled on your device itself.

f. Technical information

When the app or web app talks to our servers, our hosting providers automatically record technical data such as IP address, date and time, request details, app version and error information, for security, troubleshooting and abuse prevention.

g. When you contact us

If you email us, we receive your email address and whatever you choose to include.

h. Kept only on your device

Some features use information that never leaves your device and that we cannot access: App Lock with Face ID, Touch ID or fingerprint (handled entirely by your device's operating system; we never receive biometric data), scheduled reminders, widget contents, display preferences, and a count of how many times the app has been opened (used to decide when ads start).

What we do not collect

We do not collect your precise location, contacts, photos, camera, microphone, calendar or health data. We do not use analytics or crash-reporting SDKs, we do not use tracking cookies on our web app, and we do not buy data about you from others.

3. How we use information, and our legal bases

We do not use Your Data (your hours, pay, notes or jobs) for advertising, and we do not make decisions about you based solely on automated processing that have legal or similarly significant effects.

4. How we share information

We do not sell your personal information for money, and we never share Your Data (your hours, pay, notes or jobs) with advertisers. We share information only as follows:

Service providers who work for us

They may use your information only to provide their services to us, under contracts that require them to protect it.

Advertising partners

In the free phone apps, Google AdMob receives the advertising information described in section 2(d) and uses it under its own terms and privacy policy (how Google uses information from apps that use its services). Some US state laws treat sharing information for personalised ads as "sharing" or "targeted advertising". Because every ad request is non-personalised, we do not share your information for targeted advertising as those laws define it, and there is nothing you need to opt out of.

Other cases

• At your direction, for example when you export a timesheet and choose to send it to your employer.
• For legal reasons, when we believe in good faith it is required by law, legal process or a government request, or needed to protect the rights, property or safety of our users, the public or us.
• Business transfers, if GLN Tech is involved in a merger, acquisition, reorganisation (including forming a company to run the Service) or sale of assets, in which case this policy continues to apply to your information.

5. International transfers

We and our providers may process information in the United States and other countries whose data protection laws may differ from those where you live. Where the GDPR or similar laws apply, we rely on appropriate safeguards such as the European Commission's Standard Contractual Clauses (and the UK Addendum) or adequacy decisions, including the EU–US Data Privacy Framework where a provider is certified.

6. How long we keep information

We may keep information longer where the law requires it or to resolve disputes and enforce our agreements, and we may keep aggregated or de-identified information that no longer identifies you.

7. How we protect information

Information is encrypted in transit (HTTPS/TLS) between the app and our servers. Access to our systems is restricted and protected, and each account can access only its own data through row-level security. App Lock can add Face ID, Touch ID or fingerprint protection on your device. No method of transmission or storage is completely secure, so we cannot guarantee absolute security. If we become aware of a breach affecting your personal information, we will notify you and the authorities where the law requires.

8. Your choices and controls

• Use it without an account. Your Data then stays on your device.
• Delete your account in the app or web app, or by email. See our account deletion page for steps and what is deleted.
• Get a copy of your data. Premium users can export PDF or Excel timesheets in the app. Anyone can ask us by email for a copy of the personal information we hold, free of charge.
• Notifications. Turn them off at any time in your device settings.
• Sign out to stop syncing on a device.

9. Advertising choices

• Ads are always non-personalised. There is no switch for this, in the app or anywhere else, because the app never requests a personalised ad.
• Consent (EEA, UK, Switzerland and other regions where required). The app still asks for your choice through Google's consent message, because even a non-personalised ad may store and read information on your device. You can change it at any time under Settings › Privacy choices in the app.
• iPhone and iPad. The app does not ask for tracking permission and never accesses your advertising identifier, so there is nothing here for you to allow or refuse.
• Android. You can reset or delete your Advertising ID in Settings › Privacy (or Google) › Ads.
• US "sharing" and targeted advertising. There is nothing to opt out of: ads are non-personalised for everyone, and we do not sell or share your information for targeted advertising.
• Premium removes ads completely.

10. Your privacy rights

Depending on where you live, you may have the right to:

• know what personal information we hold about you and get a copy, in a portable format;
• correct inaccurate information;
• delete your information;
• object to or restrict certain processing, including processing based on legitimate interests;
• withdraw consent at any time (this does not affect processing already done);
• opt out of the "sale" or "sharing" of personal information, targeted advertising and profiling; and
• not be discriminated against for exercising these rights.

How to exercise them. Use the in-app controls above or email support@workhourbook.com from the email address on your account (so we can verify it is you). You may use an authorised agent, who must provide proof of your permission. We respond within the time the law requires, normally within 30 days (GDPR) or 45 days (US state laws), and we may extend this where the law allows. We do not charge for requests unless they are clearly unfounded or excessive.

Appeals (US). If we decline your request, you may appeal by replying to our decision with the subject "Appeal". If you are not satisfied with the appeal, you may contact your state Attorney General.

Complaints (EEA, UK, Switzerland). You have the right to complain to your local data protection authority, but we would appreciate the chance to address your concern first.

California. In the past 12 months we collected the categories described in section 2: identifiers (email, account ID, device and advertising identifiers, IP address), commercial information (subscription records), internet or network activity (ad interactions, technical logs), approximate geolocation derived from IP, and the work records you enter. We do not sell personal information for money; the use of advertising identifiers for personalised ads may be "sharing" under California law, which you can stop as described in section 9. We do not use or disclose sensitive personal information for purposes that require a right to limit. We do not knowingly sell or share the personal information of consumers under 16.

11. Children

The Service is not intended for children under 13 (or under 16 in the EEA, UK and Switzerland), and we do not knowingly collect their personal information. If you believe a child has given us personal information, contact us and we will delete it.

12. Notes for each platform

• Android and iPhone/iPad. Everything above applies. On iPhone and iPad, widgets read a copy of your shift and totals from storage shared only between the app and its widgets on your device.
• Web app. The web app requires an account. It stores your session and an offline copy of Your Data in your browser (local storage and IndexedDB) so it works quickly; signing out removes the session. It shows no ads, uses no tracking cookies and honours Global Privacy Control signals.

13. Changes to this policy

We may update this policy as the Service or the law changes. We will change the "Last updated" date and, if the changes are material, tell you in the app or by email before they take effect.

14. Contact us

Questions, requests or complaints about privacy:

GLN Tech (Work Hour Book)
Connecticut, United States
Email: support@workhourbook.com