Your data is yours.

Last updated: August 30, 2026

1. Data stored on your device

HourTally stores work hours, pay profiles, workplace names, timesheet records and actual-payment information on the user’s device. Android records are encrypted with AES-256-GCM using a non-exportable key created in Android Keystore. An account is not required, and this payroll data is not sent to a server operated by HourTally or Kumpir Software.

2. Encrypted backups

At the user’s request, HourTally can create a password-protected AES-256-GCM backup and send it through Android’s share interface to Google Drive or another selected destination. The password is not stored or sent to a server. A forgotten password cannot be recovered.

3. Pro purchases

Pro purchases are processed by Google Play Billing. HourTally does not receive card or payment credentials. Purchase status is queried from Google Play only to activate or restore entitlement.

4. Advertising and privacy choices

When advertising is enabled, required privacy choices are collected through Google User Messaging Platform and Google Mobile Ads is used. HourTally removes the Android advertising-ID permission and does not attach pay, workplace, shift or payment amounts to ad requests. Google may process IP address, app interactions, diagnostics and device information under its own policies for delivery, security, measurement and fraud prevention. Ads are not displayed or requested for Pro users.

5. Notifications

Notification permission is requested only when the user enables daily shift reminders or location-automation notifications. Reminders are scheduled locally on the device.

6. Automatic location shifts

When explicitly enabled by a Pro user, this feature uses precise and background location to detect workplace entry and exit while HourTally is closed or not in use, then start or stop a shift. Workplace coordinates and pending events are encrypted on the device. HourTally does not maintain a continuous route or location history and does not send location to its server or ad requests. The feature can be disabled at any time.

7. Permissions and deletion

HourTally does not request contacts, SMS or broad storage access. Android cloud backup and device-to-device system transfer are disabled for app data. Settings > Delete all data removes encrypted records, geofences, pending events and the device key. Uninstalling removes local data; backups stored elsewhere must be deleted from that destination separately.

8. Closed beta applications

The closed beta form may request a full name, the email address used for the Google Play invitation, country, Android device details and intended use. The application is emailed to [email protected] to manage beta invitations and beta communication. A non-reversible digest of the email address is retained for the duration of the beta to prevent repeat applications. A 12-month application cookie and local preference containing no personal information are stored in the browser. To request deletion of the application email or duplicate-control record, contact [email protected].

9. Contact

HourTally is developed by Kumpir Software. For privacy, deletion or support requests, email [email protected] or use the current contact channels published on the Kumpir Software website.

kumpirsoftware.com