Privacy Policy

AR Productions Inc built the Work Log app as a Freemium app. This SERVICE is provided by AR Productions Inc at no cost and is intended for use as is.

This page is used to inform visitors regarding our policies with the collection, use, and disclosure of Personal Information if anyone decided to use our Service.

If you choose to use our Service, then you agree to the collection and use of information in relation to this policy. The Personal Information that we collect is used for providing and improving the Service. We will not use or share your information with anyone except as described in this Privacy Policy.

For a better experience, while using our Service, we may require you to provide us with certain personally identifiable information. The information that we request will be retained by us and used as described in this privacy policy.

The app does use third-party services that may collect information used to identify you.

During first setup on Android, and when you check or redeem a gift, the app checks whether the genuine original Work Log Pro unlock app is installed. To recover an existing gift and prevent repeated claims on the same phone and Android profile, the app sends an app-scoped Android device reference, a device public key and Google Play Integrity proof to our gift service. A transfer from the original app can also supply a temporary gift ticket. These checks do not send your shifts, wages or notes.

Our claim records use keyed hashes of device references rather than storing the original references. We retain the gift identifier, fixed activation and expiry dates, hashed device references and a binding marker after the gift ends to prevent another claim. If you sign in, we can associate the gift with your account for account-based features. Sign-in is optional. Account deletion removes that association; the minimal device claim record remains to prevent a repeat gift. Challenge and ticket records expire and are removed by automatic cleanup, which may occur after expiry. A hashed network reference is kept temporarily to limit repeated requests.

When you choose to read a payslip, its pages are sent to Work Log's server and Anthropic to suggest pay settings. If Anthropic temporarily rejects the read, app versions with the updated provider disclosure may send the same pages to OpenAI as a backup. You review and edit the suggestions before applying them. Work Log does not store images from the AI read. The extracted result expires after one hour and is scheduled for automatic deletion; applying or cancelling the setup also removes it. Database cleanup may happen after the expiry time. Both providers' API retention rules described below also apply to payslip reading.

Optional problem reporting is separate. Nothing is attached by default. You choose any pages and suggestions, cover personal information with solid redaction boxes, edit written details, then preview and confirm the report before sending it. Only the flattened pages and details you confirm are sent, with technical diagnostics and an import reference for troubleshooting and improving payslip reading. Reports are stored privately in Firebase, accessible to authorized support operators, and scheduled for deletion after 30 days. To request earlier deletion, contact support with the report reference. Linked reports are also removed when you delete your cloud data or account.

When you import a work schedule, the schedule content from the photo, PDF or spreadsheet you choose is sent, together with the job's name, the name you picked as yours on that schedule, today's date and your time zone, to Work Log's server and from there to Anthropic, which reads the shifts as a service provider. The shifts come back to the app for you to review; nothing is added until you confirm.

If Anthropic temporarily rejects a spreadsheet read, Work Log may send that spreadsheet content and the same import context to OpenAI as a backup service provider. This backup is used for spreadsheets, including employer roster spreadsheets; schedule photos and PDFs are not sent to OpenAI by this fallback.

Work Log does not store the uploaded image or file. Anthropic normally deletes the content and its response within 30 days, but may keep them longer to investigate misuse or when required by law. Under its commercial API terms, Anthropic does not use this content to train its models by default. OpenAI does not use API content for training by default. Its abuse-monitoring logs may contain submitted content and are normally retained for up to 30 days, with longer retention when required by law or reasonably necessary to protect its services or others from harm. Work Log requests no stored completion from OpenAI.

To recover an interrupted import without reading the same schedule again, Work Log temporarily stores the extracted result. It can include names and shift details from the schedule. This result expires after 24 hours and is then automatically deleted by our database's cleanup process; deletion may happen later than the expiry time.

Work Log keeps the shifts you choose to add, the name you picked on your device, and usage counts to apply the import allowance. Shifts you add follow the account and backup retention rules below.

If you turn on Calendar link, Work Log creates a private link to a calendar of your shifts. When you add that link to a calendar service you choose, such as Google Calendar, Apple Calendar or Microsoft Outlook, that service regularly fetches your job names, the times and hours of your worked and scheduled shifts, breaks and days off from the last 60 days onward, and your pay and notes if you turn on Include pay and notes. That service handles this information under its own privacy policy. Anyone who has the link can see the same information.

If you connect a calendar subscription, Work Log saves your private calendar link in encrypted form on its server and uses it to check for schedule updates. The original calendar response is processed in memory. Work Log saves the shift details needed to show your schedule, keep it updated and protect recorded work. Calendar imports are not sent to an AI provider.

Disconnecting stops further calendar checks and removes the active saved link. Shifts you keep and work you have recorded follow the account and backup retention rules below. Temporary processing data normally becomes eligible for cleanup 24 hours after a check finishes; useful cached data and unfinished or unresolved work can be kept longer. Limited processing records are retained for 30 or 90 days, and records needed to prevent duplicate work or unsafe restores can remain until account deletion. Information may persist temporarily in platform backups and operational logs before their normal deletion.

Reporting an import problem is optional and separate from normal imports. If you request it, Work Log creates a fictional calendar example from technical formatting, without the original names, notes, places, links, identifiers, dates or times. You review the example or technical summary before choosing Send report. The report is linked to your account and stored privately in Firebase to help investigate import problems. It is scheduled for deletion after 30 days, with physical deletion on the next successful cleanup run; you can delete it earlier in Calendars. Unsent review data expires after 30 minutes and becomes eligible for cleanup after 24 hours. Reports are also removed when you delete your cloud data or account. Report contents are not copied into product analytics.

You can also request support for a scheduling provider without sharing a calendar. Work Log stores the provider name, the issue you select, your optional message and whether you agreed to email contact about testing. These private requests are linked to your account and follow the same 30-day report retention and deletion controls. Volunteering for testing does not grant access to your calendar; we will ask for separate permission before using your feed. Please leave private calendar links and passwords out of your request. Request contents are not copied into product analytics.

Sending a calendar issue report or provider request also creates an internal support email containing its type, submission time, provider name when available, your account email address when available and private record reference. Provider request emails also include the optional message you submit. Your account email is saved with the report and used as the email’s reply address so support can respond directly about your submission. Your testing-contact choice and calendar sample are not included in that email. Email copies follow the support inbox’s ordinary retention; deleting the report removes its contents from Firebase, but does not remove the provider name, message, email address or reference already delivered by email.

If you're signed in, the app gives Work Log a notification token for your device through Firebase Cloud Messaging (on iPhone, through Apple's push notification service), so we can tell you when an employer you're linked to publishes or changes your schedule. Work Log keeps the token with your account, together with your device type, app version, the app's language, your 12- or 24-hour setting and your shift reminder setting, so these notifications read the way the app does. The token is removed when you sign out.

The same notification service can send reminders and schedule-change alerts for connected calendars, according to each phone's notification settings.

Link to privacy policy of third-party service providers used by the app:

Cookies are files with a small amount of data that are commonly used as anonymous unique identifiers. These are sent to your browser from the websites that you visit and are stored on your device's internal memory.

We may employ third-party companies and individuals due to the following reasons:

We keep your data only for as long as needed to provide the app's features, maintain your account, process purchases, provide cloud backup and sync features, comply with legal obligations, resolve disputes, and enforce our agreements.

Data stored locally on your device, such as shift records, settings, and other app content, remains on your device until you remove it, uninstall the app, or delete it within the app where supported.

If you use cloud backup, sync, sign-in, employer-linking, or other online features, we may retain account information and related cloud data for as long as your account remains active or as needed to provide those services.

You can request deletion of your account-related data through the deletion options provided in the app or by contacting us at ARProductionsDev@gmail.com. When we receive a valid deletion request, we will delete or de-identify the data we are not required to keep, within a reasonable time.

We may update our Privacy Policy from time to time. Thus, you are advised to review this page periodically for any changes. We will notify you of any changes by posting the new Privacy Policy on this page.