PrIvacy PolIcy for TImeStudy Pro

Effective Date: March 10, 2026 | Last Update: April 6, 2026

1. Introduction

Welcome to TimeStudy Pro. We are committed to protecting your professional privacy. This Privacy Policy explains how our mobile application handles information when you use our industrial engineering services. By using TimeStudy Pro, you agree to the terms outlined in this policy.

2. Data Collection and Local Storage (Room Database)

TimeStudy Pro is designed with a "Local-First" approach to ensure data sovereignty.

• User-Generated Data: All data you input, including factory names, station details, work steps, and time measurements, is stored exclusively on your device using an encrypted local database (Room DB).

• No Server Uploads (Standard): For Free and Premium users, we do not collect, store, or transmit your time study data to any external servers. Your professional data remains under your absolute control on your hardware.

3. Media & Camera Usage (Visual Documentation)

To provide a comprehensive Gemba observation experience, TimeStudy Pro requires specific media permissions:

• Camera Access: Used solely for capturing "Observation Photos" during live time studies to document specific work-step anomalies, machine setups, or standard work conditions.

• Gallery/Media Access: Required to attach existing process photos to your reports and to save exported analysis charts or captured observation images directly to your device.

• Privacy Note: We do not track or scan your private photo library. Only media explicitly captured or selected within the app is processed locally.

4. Premium+ Cloud Backup & Sync (ISO/IEC 27001 Compliant & AES-256 Encryption)

For Premium+ subscribers, we provide an optional Cloud Backup service. In strict accordance with ISO/IEC 27001 (Information Security Management System) standards, we implement a "Zero-Knowledge" architecture to ensure the highest level of data integrity and confidentiality:

1. ISO/IEC 27001 Alignment: Our cloud data handling, risk management, and security controls are designed to meet international information security standards, ensuring that your industrial data is processed within a globally recognized secure framework.

2. User-Defined Master Key: Before any data is backed up, the user must define a private encryption key. This key is never stored on our servers and remains known only to the user.

3. AES-256 Encryption: Your factory hierarchy and measurement data are encrypted locally on your device using the AES-256 (Advanced Encryption Standard)—the global benchmark for high-security data protection—powered by your private Master Key.

4. Secure Transmission & Storage: Data is transmitted via encrypted SSL/TLS tunnels and hosted in Google Firebase’s ISO-certified data centers.

5. Absolute Zero-Knowledge Privacy: Since the encryption key remains exclusively in your possession, neither TimeStudy Pro developers nor Google Firebase can access, read, or decrypt your industrial data.

6. Data Recovery: Restoring data requires both your authenticated Google account and your private Master Key. Loss of the Master Key means the data cannot be recovered by our team, ensuring no "backdoor" exists for unauthorized access.

5. Third-Party Services

To sustain development and provide core features, we use:

• Google Play Services: For app stability and core Android API functionality.

• Google AdMob: To offer the app for free to non-premium users. AdMob may use Advertising IDs for relevant ad delivery.

• Google Play Billing: All subscription transactions are processed securely by Google. We never store your financial or credit card information.

6. Permissions and Data Usage

To ensure a seamless engineering experience, the following permissions are utilized:

• Internet & Network State: For subscription verification, Cloud Sync (Premium+), and advertisements.

• In-App Billing: For secure Premium/Premium+ upgrades.

• Storage Access (Scoped Storage): To export professional Excel (.xlsx) reports and manage backup/restore files.

• Camera Permission: For visual documentation of time studies.

• Media Access (Photo Library / READ_MEDIA_IMAGES): This permission is required to access and display the observation photos captured within the application. It allows the user to review, verify, and manage visual records of specific work-steps directly through the TimeStudy Pro interface.

Privacy Note: We do not scan or monitor your private photo gallery. This access is strictly limited to enabling the visual review of your industrial observations within the app's secure environment.

7. Data Security

The security of your local data depends on your device's security. For Cloud data (Premium+), the combination of your private AES-256 key and Firebase's industry-standard infrastructure ensures your industrial data is protected against unauthorized access.

8. Changes to This Policy

We may update this policy periodically. Changes are effective immediately after being posted.

9. Contact Us

If you have any questions about this Privacy Policy: Email: umitdursoy@gmail.com