This Privacy Policy describes how Ossaili ("we", "us", or "our")
handles information in connection with the Hours Tracker – Time Clock mobile application
(package com.ossaili.hours_tracker) and this website (together, the "Service"). By using the
Service, you agree to the practices described below.
Who This Policy Covers
This policy applies to the Hours Tracker Android app and to https://workhourtools.com. Hours Tracker is a personal time-tracking tool: the work hours, jobs, pay rates, and notes you record are created by you, for your own records. We designed the app so that using it never requires creating an account or sending your data to us.
Information We Process
Depending on which optional features you enable, the app may process:
- Work records you create — clock in/out times, breaks, shifts, jobs, hourly rates, overtime and tax settings, mileage, payment status, and shift notes.
- Account information (only if you enable Cloud Sync) — your email address and a unique account identifier from Firebase Authentication or Google Sign-In.
- Approximate and precise location (only if you enable Auto Clock / geofencing for a job) — used to detect when you enter or leave a saved job location.
- Usage and diagnostic data — anonymised app-usage events and basic device information collected through Firebase Analytics to keep the app stable.
We do not ask for your name, phone number, contacts, photos, or payment card details, and the app contains no third-party advertising trackers.
On-Device Storage (Default)
Out of the box, Hours Tracker runs in offline local mode. Every shift, job, report, and note you create is stored in the app's private storage on your device. This data is not transmitted to us or to any server. If you uninstall the app without enabling Cloud Sync or exporting first, this local data is permanently deleted with the app.
Optional Cloud Sync
If you choose to enable Cloud Sync, you sign in with Firebase Authentication (email or Google Sign-In). After that, your work records are backed up to Google Cloud Firestore so you can restore them or access them from another device. Cloud Sync is entirely optional; if you never sign in, no records leave your device.
When Cloud Sync is on, your data is stored on Google's infrastructure and is accessible only to your authenticated account. We use Google Firebase as a data processor under Google's security and privacy commitments. See Firebase's privacy documentation and Google's Privacy Policy for details.
Location & Geofencing
Location access is optional and off by default. It is used only if you turn on Auto Clock (geofencing) for a specific job. When enabled, the app uses your device location — including in the background — to automatically clock you in when you arrive at a saved job location and clock you out when you leave.
- Location is used solely to power automatic clock in/out for jobs you configure.
- We do not use location for advertising, tracking, or profiling.
- You can revoke location permission at any time in your device settings, or disable Auto Clock per job inside the app — the rest of the app keeps working normally.
To support this feature the app declares the ACCESS_FINE_LOCATION, ACCESS_COARSE_LOCATION, and ACCESS_BACKGROUND_LOCATION permissions. Background location is requested only when you opt in to Auto Clock.
Notifications
If you enable timer notifications, Hours Tracker shows a foreground-service notification while a shift is running so you can see elapsed time and clock out quickly. This uses the notification and foreground-service permissions on your device and does not send any data to us.
Analytics & Diagnostics
We use Firebase Analytics to understand aggregate, anonymised usage (for example, which screens are opened or whether a feature is used) so we can fix bugs and improve the app. This data is not used to identify you personally and is not tied to the content of your work records. It is processed by Google as described in the Firebase privacy documentation.
How We Use Information
- To provide core features: tracking shifts, calculating overtime, pay, and reports.
- To sync and back up your records across devices, if you enable Cloud Sync.
- To automate clock in/out, if you enable geofencing.
- To maintain, secure, debug, and improve the Service.
- To respond to your support requests and comply with legal obligations.
Sharing & Third Parties
We do not sell, rent, or trade your personal information. We share data only with the infrastructure providers needed to run optional features:
- Google Firebase (Authentication, Cloud Firestore, Analytics) — for optional cloud sync and anonymised diagnostics.
When you export a CSV or PDF timesheet and send it to an employer, client, or accountant, that sharing is initiated and controlled entirely by you. We may also disclose information if required by law or to protect the rights and safety of users.
Data Retention & Deletion
- Local data: kept on your device until you delete individual entries, clear the app's data, or uninstall the app.
- Cloud data: retained in your account while Cloud Sync is active. You can delete records in-app, or request deletion of your account and all associated cloud data by contacting us at the address below.
To request deletion of your cloud account and data, email shadi.s.ossaili@gmail.com from the address associated with your account. We will process verified deletion requests promptly.
Data Security
Local data is protected by your device's application sandbox and operating-system security. Cloud data is transmitted over encrypted connections (HTTPS/TLS) and stored on Google Cloud infrastructure with access restricted to your authenticated account. No method of electronic storage is 100% secure, but we take reasonable measures to protect your information.
Your Rights & Choices
Depending on where you live (for example, under the GDPR or CCPA), you may have the right to access, correct, export, or delete your personal data, and to object to certain processing. Because most data stays on your device, you can already:
- View, edit, and delete any record directly in the app.
- Export your full history at any time as CSV or PDF.
- Disable Cloud Sync, location, notifications, and analytics independently.
- Uninstall the app to remove all local data.
To exercise any right regarding cloud data, contact us at shadi.s.ossaili@gmail.com.
Children's Privacy
Hours Tracker is intended for people who track work hours and is not directed at children under 13 (or the minimum age required in your country). We do not knowingly collect personal information from children. If you believe a child has provided us data, contact us and we will delete it.
Changes to This Policy
We may update this Privacy Policy from time to time. When we make material changes, we will revise the "Last updated" date above and, where appropriate, provide additional notice. Continued use of the Service after changes take effect constitutes acceptance of the updated policy.
Contact Us
If you have any questions about this Privacy Policy or your data, please reach out: