Your data is yours.

Last updated: September 1, 2026

1. Data stored on your device

HourTally stores work hours, pay profiles, workplace names, timesheet records and actual-payment information on the user’s device. Android records are encrypted with AES-256-GCM using a non-exportable key created in Android Keystore. An account is not required, and this payroll data is not sent to a server operated by HourTally or Kumpir Software.

2. Encrypted backups and Google Drive

At the user’s request, HourTally can create a password-protected AES-256-GCM backup and send it through Android’s share interface to a selected destination. Pro users can create a one-time Drive backup or explicitly enable a daily or weekly automatic backup. Initial Drive approval is requested while the app is open; later automatic jobs run through Android WorkManager under the selected network and charging conditions, using only short-lived non-interactive authorization. Access is limited to the app’s Drive app-data area. Access can be removed in the app; an existing Drive backup must be deleted separately. Backup passwords and access tokens are not stored. A forgotten password cannot be recovered.

3. Pro purchases

Pro purchases are processed by Google Play Billing. HourTally does not receive card or payment credentials. Purchase status is queried from Google Play only to activate or restore entitlement.

4. Advertising and privacy choices

When advertising is enabled, required privacy choices are collected through Google User Messaging Platform and Google Mobile Ads is used. HourTally removes the Android advertising-ID permission and does not attach pay, workplace, shift or payment amounts to ad requests. Google may process IP address, app interactions, diagnostics and device information under its own policies for delivery, security, measurement and fraud prevention. Ads are not displayed or requested for Pro users.

5. Notifications

Notification permission is requested only when the user enables daily shift reminders or location-automation notifications. Reminders are scheduled locally on the device.

6. Automatic location shifts

When explicitly enabled by a Pro user, this feature uses precise and background location to detect workplace entry and exit while HourTally is closed or not in use, then start or stop a shift. Workplace coordinates and pending events are encrypted on the device. HourTally does not maintain a continuous route or location history and does not send location to its server or ad requests. The feature can be disabled at any time.

7. Permissions and deletion

HourTally does not request contacts, SMS or broad storage access. Android cloud backup and device-to-device system transfer are disabled for app data. Settings > Delete all data removes encrypted records, geofences, pending events and the device key. Uninstalling removes local data; backups stored elsewhere must be deleted from that destination separately.

8. Closed beta applications

The closed beta form creates an email draft in the browser using the full name, Google Play invitation email, country, Android device details and intended use entered by the visitor. The site does not send these fields to a server or retain them in cookies or local storage. The application reaches [email protected] only after the visitor sends the draft in their own email app. Contact the same address to request deletion of a submitted application email.

9. Contact

HourTally is developed by Kumpir Software. For privacy, deletion or support requests, email [email protected] or use the current contact channels published on the Kumpir Software website.

kumpirsoftware.com