Summary
| What | Where it goes |
|---|---|
| Your shifts, pay, benefits, notes, photos, voice notes, files and settings | Stays on your phone, encrypted. We never receive it. |
| Backups and exports you make | Wherever you choose to save or send them. |
| Payments for Pro | Handled by Google Play. We get a purchase confirmation, never your card details. |
| Optional AI requests | Off by default. If you turn it on, sent from your phone straight to the AI provider you picked, using your own key. |
| Things you type into workerhub.tools | Stay in your browser. |
| Beta sign-ups and messages you send us | Your email to us. We use it to reply and to send beta invites. |
We don't sell or share your personal information, and WorkerHub contains no ads or analytics SDKs.
Information stored on your device
Everything you enter in WorkerHub (jobs, shifts, pay estimates, benefits, notes, reminders, contacts, invoices, expenses, documents, photos, voice notes and settings) is stored only in WorkerHub's private storage on your phone. WorkerHub has no accounts and we don't run servers that hold your records, so we can't see, access or recover them.
Optional usage stats are off unless you turn them on in Settings. They count which tabs and tools you use, on your phone. They reach us only if you include them in a feedback email you send yourself, and they never include your name, jobs, pay, notes, photos or locations.
Permissions
- Microphone: only when you tap Record to make a voice note, or use voice input. Recordings stay on your phone.
- Camera: WorkerHub doesn't use the camera directly. When you take a photo, your phone's camera app takes it and hands it back.
- Location: only while a GPS mileage trip you started is running, or when you choose to stamp a location on a photo-log picture. Only while you use the app, never in the background without a visible notification, and it stays on your phone.
- Notifications, exact alarms and full-screen alerts: for reminders, alarms, timers and the punch-clock notification you set.
- Biometrics: optional fingerprint or face unlock. Your biometric data stays with Android; WorkerHub only learns whether the unlock succeeded.
- Internet: only for the actions listed in the next section and for Google Play purchases.
When information leaves your phone
Only when you choose to:
- Saving or sharing files. Backups, spreadsheets, invoices and PDFs go wherever you save or send them.
- Opening links. Maps, websites, phone numbers and email addresses open in other apps, which have their own privacy policies.
- Convention calendars and RSS feeds. When you import a calendar page or refresh a feed you added, WorkerHub downloads that page. No personal information is sent.
- Spreadsheet import. If the built-in spreadsheet reader can't load, WorkerHub may download the open-source SheetJS library from a public content network. No personal information is sent.
- Optional AI. AI is off by default. If you turn it on and add your own API key, WorkerHub sends content only when you ask it to (for example, "Improve with AI" on a scanned document) and confirm. The text, and the picture only if you allow it, goes directly from your phone to the provider you chose, over an encrypted connection, under that provider's terms. Your key is stored only on your phone. We never receive any of it.
- Feedback. If you use Contact us in the app, it opens your email app with a message to us. Nothing is sent until you press send.
Purchases and promo codes
WorkerHub Pro is sold through Google Play. Google processes the payment under the Google Privacy Policy. The app receives a purchase confirmation from Google Play (which product you bought, its status and an order reference) so it can turn Pro on. We never receive your card or bank details.
WorkerHub promo codes are tied to a short phone code that the app creates on your phone. If you ask us for a code, you send us that phone code by email. It identifies the install, not you, and we use it only to make your code.
Our websites
getworkerhub.com and workerhub.tools don't use cookies, analytics or ads.
- Free tools. Numbers you type into workerhub.tools are worked out in your browser and saved only in your browser's local storage, so the form is filled in next time. Clear your browser data to remove them.
- Hosting. Our web host may keep short-lived technical logs (such as IP address, browser type and the page requested) to keep the sites secure and running.
- Fonts. Pages load fonts from Google Fonts, which means your browser contacts Google's servers.
- Beta sign-ups and messages. If you sign up for the beta or contact us, we receive what you send (such as your name, email address and the kind of work you do). We use it to reply, to choose testers, to add your Google account email to the Google Play testing list, to send beta updates and reward codes, and to check beta participation from the feedback and surveys you send. We keep it until the beta ends or you ask us to delete it.
Security and backups
Everything WorkerHub stores is encrypted on your phone with AES-256, using a key kept in the Android Keystore, and is protected by Android's app sandbox. You can turn on fingerprint, face or screen-lock unlock and hide WorkerHub from the recent-apps screen.
Because the key never leaves your phone, WorkerHub's records aren't included in Android device backups. To move to a new phone, make a backup in the app and restore it on the new phone. Keep backups and exports somewhere safe. Spreadsheets, PDFs and other exports are not encrypted.
Your choices and deleting your data
- Edit or delete any record in the app.
- Use Data, then Reset all local data, to erase everything WorkerHub stores.
- Uninstalling WorkerHub, or clearing its storage in Android settings, permanently deletes its data from your phone.
- Files you exported aren't deleted by the app. Delete them where you saved them.
- To delete a beta sign-up or message you sent us, email [email protected].
Your rights
Depending on where you live, including California and other US states, you may have rights to know, access, correct or delete personal information a business holds about you, and to opt out of its sale or sharing. We don't sell or share personal information, and the only personal information we hold is what you send us by email or form. Email us to use any of these rights and we'll answer within 45 days.
Children
WorkerHub is made for working adults and isn't directed to children under 13. We don't knowingly collect information from children.
Estimates
Pay, tax, deduction, benefit and convention-date figures in WorkerHub and on our websites are planning estimates, not payroll, tax or legal advice. Your employer's payroll records and official documents are the source of record.
Changes and contact
If this policy changes, we'll update the effective date and post the new version here before the change takes effect. Questions or requests: [email protected].