Privacy Policy

Last updated: March 15, 2025 · App: WorkerLedger (Contractor Ledger)

1. Information We Collect

1.1 Account and identity (when you sign in)

• Google Sign-In: When you sign in with Google, we receive from Google: your email address, name, and optionally profile picture (avatar). We use this to create and manage your account and to associate your app data (workers, attendance, backups) with you. We do not receive or store your Google password.
• User ID: We assign a unique user ID to your account for authentication and to link your data to you.

1.2 Data you enter in the app

• Workers: Names, phone numbers, photos (if you set a profile picture), skill, daily wage, joining date, and status. This data is stored on your device and, if you enable cloud backup, in encrypted backups on our servers.
• Business profile and settings: Business name, type, address, city, and phone. Stored locally and optionally in cloud backups.
• Attendance, advances, expenses: Daily attendance, salary advances, and expense/transaction records. Stored on device and optionally in encrypted cloud backups.
• Backup preferences: Your choices for automatic backup, frequency, Wi‑Fi only, and cloud backup. Stored on your device and used only to run backups.

1.3 Device and app permissions

We request only the permissions needed for the features we describe:

We do not collect your precise location. We do not access SMS, call log, or other sensitive permissions not listed above.

1.4 Payment and subscription data (Razorpay)

If you use in-app subscriptions, payments are processed by Razorpay using their subscription model. We offer monthly recurring plans; you are charged every month until you cancel.

• Payment collection: When you subscribe, payment is collected through Razorpay’s secure checkout (payment modal or hosted page). Razorpay supports cards, UPI, net banking, and other methods available on their platform.
• What we receive: We may receive from Razorpay: subscription status, plan ID, next billing date, and payment success/failure so we can unlock features and show billing history. We do not receive or store your full card number, CVV, or complete bank account details.
• What Razorpay handles: Payment processing, card/UPI details, and recurring charges are handled entirely by Razorpay. Razorpay’s privacy policy applies to their processing: Razorpay Privacy Policy.
• Billing history and invoices: We may show subscription and invoice information that Razorpay provides (e.g. payment date, plan name, amount). Retention of payment records follows Razorpay’s terms and our retention policy below.

If we add other payment methods or gateways later, we will update this policy and only collect what is necessary for that feature.

2. How We Use Your Information

• Provide the app: To run worker management, attendance, salary/advances, expenses, backups, and notifications.
• Authentication: To sign you in with Google and keep your session secure (e.g. access tokens).
• Cloud backup: If you enable it, to store encrypted backups of your data on our servers and restore them when you reinstall or switch devices.
• Subscriptions: To verify Razorpay subscription status and grant access to premium features (monthly recurring plans).
• Support and safety: To respond to support requests, enforce our Terms of Service, and comply with law.
• Improvements: We may use aggregated, non-personally identifiable usage data to improve the app and services.

We do not sell your personal data to third parties.

3. Data Storage and Security

• On your device: Your worker, attendance, advance, and expense data is stored locally (SQLite/device storage). Access tokens are stored in secure storage where available (e.g. Expo SecureStore).
• Cloud backup: Backups are encrypted (AES-256-GCM) before upload. We use a secure backend and cloud storage with access controls. Encryption keys are derived/stored so that only your account can decrypt your backups.
• Transit: We use HTTPS for all communication with our servers.

4. Data Sharing and Third Parties

• Google: For sign-in only (identity data above). Google’s privacy policy applies to their processing.
• Razorpay: For subscription and payment processing (monthly recurring billing). Razorpay’s privacy policy applies to payment data: Razorpay Privacy Policy.
• Cloud infrastructure: Our backend and cloud storage providers process data necessary to provide backup and API services, under strict confidentiality and data protection agreements.
• Legal: We may disclose information if required by law, court order, or to protect our rights and safety.

We do not sell or rent your personal information. We do not share your data with advertisers or data brokers for their marketing.

5. Your Rights and Choices

• Access and correction: You can view and edit your worker and business data inside the app. For account data (email, name) received from Google, you can manage that in your Google account.
• Delete data: You can delete workers and records in the app. To delete your account and associated cloud backups, contact us at [email protected]. We will process requests in line with applicable law (e.g. GDPR, CCPA).
• Contacts and photos: You can revoke Contacts or Photos permission in your device settings; the app will work but contact-picker or profile-photo features may not be available.
• Notifications: You can turn off notifications in app settings or in system settings.
• Subscriptions: You can cancel your monthly subscription from within the app or by contacting us at [email protected]. Cancellation stops the next recurring charge. Refunds for past charges are handled as per our refund policy and Razorpay’s terms.

If you are in the EEA/UK, you have additional rights (e.g. portability, restriction, objection, lodging a complaint with a supervisory authority). Contact us to exercise them.

6. Data Retention

• Account and app data: Retained while your account is active. After you request account deletion, we delete or anonymize your data within a reasonable period, except where we must retain it for legal or legitimate business purposes.
• Backups: Encrypted backups are retained according to our backup and retention rules; you can delete backups from the app or request deletion via support.
• Logs and tokens: Access tokens and temporary logs are retained only as long as needed for security and operation.

7. Children

The app is not directed at children under 13 (or higher age in some regions). We do not knowingly collect personal data from children. If you believe a child has provided us data, please contact us and we will delete it.

8. International Transfers

If we transfer your data to countries outside your residence, we will ensure appropriate safeguards (e.g. standard contractual clauses or adequacy decisions) as required by applicable law.

9. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes via the app or by email if we have it. Continued use of the app after the effective date of changes constitutes acceptance of the updated policy. We encourage you to review this policy periodically.

10. Contact