Privacy policy

1. Who we are

Workgro ("we", "us") is a mobile app for iOS and Android that helps small businesses schedule hourly work, verify work hours on site and calculate gross pay. This policy explains what personal data the app and this website process.

Contact: digitalgo3msc@gmail.com

This website itself uses no cookies, no analytics and no tracking. It only remembers the language you pick, in your own browser.

2. Your employer and us

Workgro has two kinds of users: employers, who create a company in the app, and workers, whom the employer invites.

• Your employer is responsible for its team's work records. Shifts, clock-in times and places, hours requests, pay rules, payments and expenses of a company are kept for that employer. For this work data the employer is the controller, and Workgro processes it on the employer's behalf and on its instructions. If you work for a company that uses Workgro, your employer decides what is recorded and how long it must be kept, and you can also contact your employer about it.
• We are responsible for your account. For your Workgro account itself (sign-in, name, email, app settings, notifications, crash reports and purchases), Workgro is the controller.

3. Data we process

• Account: your email address and name, and the sign-in information needed to log you in.
• Company and role: the companies you create or join, your membership and your role (employer or worker), and invitations (an invitation is addressed to the worker's email address; the app sends no emails).
• Workplaces: name, address, map position, geofence radius, the verification method (GPS or QR code) and whether a photo is required.
• Shifts and work periods: scheduled shifts and assignments; when you start, pause, resume and finish work; the location at those moments at GPS workplaces (see section 4); QR scans; and photos you take as proof at clock-in, where the workplace asks for one.
• Hours requests: the days and time ranges a worker requests, and the employer's decision.
• Payroll settings and results: hourly rates, overtime, Sunday and holiday rules, the holiday calendar, bonuses and deductions, and the calculated gross pay per period.
• Payments: which approved shifts the employer has marked as paid.
• Expenses: the amount, category and note of an expense, the photo of the receipt, and the employer's decision.
• Notifications: a push token for your device, so we can send invitations, shift reminders and decisions on requests and expenses.
• Crash reports and app usage: technical information when the app crashes (device model, system version, app version, the error), and basic usage events (for example which screens are opened), to fix errors and improve the app.
• Purchases: if your company subscribes to a paid plan, the subscription status and an anonymous purchase identifier. Payment itself is handled by Apple or Google; we never see your card details.

4. Location

Workgro checks your location only at the moment you clock in, pause, resume or finish at a workplace that uses GPS verification, to confirm you are inside the workplace's area. The app does not track your location in the background or during the rest of the day. At QR-code workplaces no location is used. If you are outside the area, the app does not let you clock in.

5. Why we process it

• To provide the app: accounts, companies, shifts, verified clock-in, hours requests, payroll calculation, exports, payments and expenses (performance of the contract with you or your employer).
• For your employer's legal obligations, such as recording working time, and its payroll (on the employer's behalf, see section 2).
• To send the notifications you rely on, such as invitations and shift reminders (performance of the contract; you can turn notifications off in your device settings).
• To keep the app stable and improve it through crash reports and usage events (our legitimate interest in a working app).
• To manage subscriptions (performance of the contract).

We do not sell personal data, show ads, or use your data for advertising or tracking across other apps and websites.

6. Who helps us run Workgro

We use these service providers, bound by data processing terms:

• Google Firebase (Google Ireland Ltd. / Google LLC): sign-in (Authentication), database (Cloud Firestore), file storage for photos and receipts (Cloud Storage), server functions (Cloud Functions), push notifications (Cloud Messaging), crash reports (Crashlytics) and usage statistics (Google Analytics for Firebase).
• RevenueCat (RevenueCat, Inc.): manages subscription status across the App Store and Google Play.
• Apple and Google: app distribution, in-app purchases and the delivery of push notifications.

Inside a company, people see what their role needs: the employer sees the team's work data; a worker sees their own shifts, hours, expenses and earnings.

Some of these providers may process data outside the European Economic Area, for example in the United States. Where that happens, the transfer is covered by the EU Standard Contractual Clauses or the EU-U.S. Data Privacy Framework.

7. How long we keep it

• Account data is kept until you delete your account.
• Work records (shifts, work periods, hours, payments, expenses) belong to the employer's records. When a worker deletes their account, the work records they created for that employer can be kept for as long as the employer is legally required to keep them, for example for working-time and payroll obligations. When an employer deletes their account, their company is closed and its members lose access to it.
• Crash reports are kept for up to 90 days.
• Backups are overwritten in the normal backup cycle.

8. Your rights

Under the GDPR you have the right to:

• Access and portability: export your data from inside the app, or ask us for a copy.
• Deletion: delete your account from inside the app (see section 7 for work records).
• Rectification: correct your name and settings in the app; ask your employer to correct work records.
• Restriction and objection: object to processing based on our legitimate interest.
• Complaint: lodge a complaint with a data protection supervisory authority, in particular in the country where you live or work.

For work data that your employer controls, we pass your request on to your employer and help them answer it. Write to digitalgo3msc@gmail.com for anything else; we answer within one month.

9. Security

Data is sent encrypted (HTTPS/TLS) and stored with Google Firebase. Access rules make sure that only members of a company, according to their role, can read that company's data. No system is perfectly secure, but we take reasonable measures to protect your data.

10. Children

Workgro is a work tool for adults and is not intended for children. We do not knowingly collect data from children under 16.

11. Changes

We may update this policy when the app changes. The date at the top shows the latest version. For important changes, we will let you know in the app.

12. Contact

Questions about privacy or your data: digitalgo3msc@gmail.com