Work Hours & Pay

Privacy Policy

Effective 26 September 2026

Who is responsible

Work Hours & Pay is developed by Yurii Koshkin in Spain, under the Gatoficio studio brand. For privacy questions or requests, email support@gatoficio.com.

Your work records

The app stores job names, currencies, time zones, pay rates and rules, saved rate snapshots, shift times, unpaid breaks, tips, and local settings in its private storage on your device. These records can reveal information about your work and earnings. We do not receive a copy of the ledger, and the app has no account, employer connection, or app-operated cloud sync.

Your device or iCloud backups may include app data, depending on your Apple settings. This is separate from app-operated cloud storage.

Reports and sharing

Reports and pay estimates are calculated locally. If you export a CSV, the system share sheet lets you choose where it goes. The destination you choose may store or transmit the report under its own privacy policy. Review the contents before sharing.

Optional usage analytics

In the release app, optional usage events are enabled by default. We use TelemetryDeck GmbH to understand onboarding, successful use, offer loading, and purchase or restore outcomes. Events contain an app-specific hashed device identifier derived from Apple’s identifier for vendor, a session identifier, and timestamps of app activity. Technical metadata includes app and system version, device type, screen and display settings, language, region, time zone, accessibility settings, and first-use and retention information. App-activity timestamps are not the work dates and times entered in your ledger. They may identify the plan category and offer variant, but do not include names, email addresses, job names, shift dates or times, pay rates, earnings, tips, ledger contents, receipts, payment details, or transaction identifiers.

We use these events to improve usability and reliability, not for advertising, selling data, or tracking you across other companies’ apps and websites. We do not connect analytics identifiers to support correspondence or an account. TestFlight analytics are marked as test traffic; simulator, automated-test, and preview runs do not send production events.

You can turn off Settings → Optional usage events at any time. This stops future sending and discards queued events; it cannot recall events already transmitted. If you turn the setting back on during the same session, restart the app to resume sending. No events collected while disabled are replayed.

TelemetryDeck states that analytics processing is hosted in the EU, IP addresses are not stored, and its analytics events do not currently have a fixed deletion schedule. See its privacy FAQ and privacy policy for provider details. We do not promise a shorter analytics retention period than the provider supplies.

Purchases

App Store purchases are processed by Apple. The app verifies StoreKit purchase and entitlement information on your device to unlock Pro, restore access, and handle expiry or revocation. We do not receive your payment card details. Optional analytics may record the plan category and a verified purchase or restore outcome, without receipt or transaction identifiers. Apple independently processes billing and purchase history under its own policies.

When you contact support

If you email us, we receive your email address and the message or attachments you choose to send. Our email providers process these communications to deliver and store them. We use them to answer your request and maintain necessary support records, not to build an advertising profile. Please do not send payslips, payment details, or your complete ledger unless a specific issue requires a carefully redacted example.

Keeping and deleting information

You control your local records. Delete shifts in the app when they are no longer needed. Removing the app using Delete App rather than Offload App removes its local app data; separately stored exports and backups may remain. Manage those copies through the destination app or your device-backup settings. We cannot recover or delete a ledger we do not hold.

Support correspondence is kept only as long as needed to handle your request, resolve follow-up issues, or meet applicable obligations.

Your privacy rights

For personal information we receive through support, you may request access, correction, deletion, or restriction, or object to processing where applicable. We process support correspondence to respond to requests and protect our legitimate interest in providing and securing support. Contact us using the address above; you may also raise a concern with your local data-protection authority, including Spain’s AEPD.

Website visits and changes

Opening a link from the app loads a website. See the Gatoficio website privacy notice for hosting and connection information. Material changes to this app policy will be reflected here with a new effective date.