Privacy Policy

PRIVACY POLICY — Hours Count Last updated: April 2026

1. DATA CONTROLLER Hours Count is developed and maintained by Adrian V Gherhes from Worcester, England, GB. Contact: hourscount.app@gmail.com

2. LEGAL BASIS FOR PROCESSING (UK GDPR Art. 6, as amended by DUAA 2025) We process your data based on:

• Contract performance: to provide the shift tracking and pay calculation service you signed up for.

• Recognised legitimate interest (as defined by the Data Use and Access Act 2025): to manage your trial period and subscription status.

• Consent: you choose to enter your shift data and may delete it at any time.

3. DATA WE COLLECT Hours Count stores the following data:

• Work shift dates, times, client names, break durations and notes

• Calculated hours, pay and tax estimates (using UK PAYE thresholds for 2025/26 or 2026/27, applied automatically based on shift date)

• Your app settings (rates, tax code, theme, pay period)

• Your email address and display name (for authentication)

• Trial start date (to manage your subscription status)

• Subscription status and plan type (received from Google Play to manage feature access)

• Live shift state (clock in time, break times, client name) stored temporarily on your device to preserve an active shift if the app is closed

4. HOW DATA IS STORED Shift data, settings and live shift state are stored locally on your device using SQLite database and SharedPreferences. Authentication and trial data are stored securely in Google Firebase (Firestore), hosted in europe-west2 (London, UK). Cloud backup data (Gold plan) is stored in Firebase, encrypted in transit and at rest.

5. INTERNATIONAL DATA TRANSFERS All data is stored within the United Kingdom (Firebase europe-west2, London). We do not transfer your personal data outside the UK or EEA. If this changes in the future, we will update this policy and ensure appropriate safeguards are in place.

6. DATA RETENTION Local data: retained on your device until you delete it manually (from History, Delete All, or Delete by Period) or uninstall the app. Firebase data: retained until you request account deletion. Upon deletion request, all Firebase data is permanently deleted within 30 days. Live shift state: temporary data, automatically cleared when you complete or cancel a shift.

7. AUTHENTICATION Hours Count offers two sign-in methods: Google Sign-In and Email/Password. We only access your email address and display name. We do not access your contacts, calendar, files or any other personal data. Passwords are managed securely by Firebase Authentication and are never stored or visible to us.

8. APP SECURITY (PIN LOCK) Hours Count offers optional app protection via PIN code.

• Your PIN is stored only on your device and is not transmitted anywhere.

• This security feature is entirely optional and disabled by default.

9. DATA SHARING We do not share, sell or transmit your data to any third party. Data only leaves your device if you choose to:

• Export reports (PDF, CSV, Excel)

• Share payslips

• Create a backup (JSON or Cloud)

10. PAYMENTS & SUBSCRIPTIONS Hours Count offers optional paid subscription plans (Silver, Gold, Platinum) processed exclusively through Google Play Billing. We do not collect, store or process any payment information ourselves. All payment transactions are handled entirely by Google Play. Your payment method details (credit card, debit card or other) are managed by Google and are never visible to or stored by Hours Count. Google's privacy policy governs the processing of your payment data: https://policies.google.com/privacy

We may receive from Google: confirmation of your subscription status, the plan you subscribed to, and the validity period. This information is used solely to unlock the features associated with your chosen plan. No financial or billing details are shared with us.

You can manage or cancel your subscriptions at any time through Google Play Store > Subscriptions.

Subscription plans and pricing:

• Free Trial: 15 days of full Gold access, no payment required

• Silver: £3.59/month or £32.99/year — PAYE with standard & emergency tax codes (1257L, C1257L, BR, 0T, Marriage Allowance 1383M/1131N, W1/M1), Payslip, PDF/CSV export, Night shift & overtime, Reports, Backup JSON, PIN lock

• Gold: £6.59/month or £60.99/year — All Silver features plus all UK tax codes, Student Loan deductions (Plan 1/2/4/5/Postgrad), Pay Rules, Bank Holiday enhanced rate, Excel export, Cloud backup automatic, Multilingual interface (EN/RO/PL)

• Platinum: Coming soon — will include Holiday Pay, LTD & Self-employed calculations, Scotland tax bands, Pension auto-enrolment

11. YOUR RIGHTS (UK GDPR, DUAA 2025 & EU GDPR) You have the right to:

• Access your data (visible in History and Reports screens)

• Export your data (PDF, CSV, Excel export, JSON backup)

• Delete your data (swipe to delete, Delete All, or Delete by Period)

• Delete your account (sign out from Settings and request deletion via email)

• Rectification (edit any entry from History)

• Data portability (JSON backup contains all your data)

• Withdraw consent (uninstall the app or sign out at any time)

• Lodge a complaint (see section 13)

12. ACCOUNT DELETION You can request complete deletion of your account and all associated data by:

1. Going to Settings and tapping "Sign Out"

2. Emailing hourscount.app@gmail.com with your deletion request

We will delete all your Firebase data within 30 days of receiving your request.

13. COMPLAINTS If you have a complaint about how your data is handled, contact us at hourscount.app@gmail.com. We will acknowledge your complaint and respond within 48 hours (two business days).

If you are not satisfied with our response, you have the right to lodge a complaint with the Information Commissioner's Office (ICO) at ico.org.uk or by calling 0303 123 1113.

14. US PRIVACY (CCPA/State Laws) We do not sell personal information. We do not collect data for advertising. All data remains under your control.

15. DATA SECURITY Local data is protected by your device's built-in security (screen lock, encryption). Firebase data is encrypted in transit (TLS) and at rest. Optional PIN lock adds an extra layer of app-level protection.

16. CHILDREN'S PRIVACY This app is not directed at children under 16. We do not knowingly collect data from children under 16.

17. ANALYTICS & ADVERTISING This app contains NO analytics, NO tracking, NO advertising and NO third-party advertising SDKs. Firebase is used solely for authentication and data storage.

18. CHANGES TO THIS POLICY Any changes will be reflected in app updates. The "Last updated" date will change accordingly.

19. CONTACT For privacy inquiries or account deletion requests, contact: hourscount.app@gmail.com Worcester, England, GB