Privacy Policy
Last updated: October 2026
What we collect
When you sign in with Google, we store your Google account ID, email address, name, and profile picture. These are used to identify you and display your account in the app. We do not access Gmail, Drive, Calendar, or other Google products.
You also create attendance records, holidays, sick and travel days, blocked dates, day preferences, and settings. We store country, city, and timezone to infer local dates and to suggest public holidays. We do not store precise GPS. Personal access tokens and short-lived device login codes are stored to let you use the CLI and MCP clients with the same account. If you use the contact form, we store your name, email, topic, and message so we can reply. We also store whether you want the weekly office note, which morning you chose, and a record of each note we send.
Why we process your data
- Profile data. Legitimate interest: required to identify you and provide the service you signed up for.
- Attendance and preferences. Contractual necessity: user-generated data needed to deliver the core service.
- Authentication token. Strictly necessary: stored in your browser's local storage to keep you signed in.
- Contact form. Legitimate interest: so we can answer the question you sent.
- Weekly office note. Legitimate interest: a note about your own attendance, sent on the morning you choose (Saturday by default). You can turn it off from Profile or from the unsubscribe link in the email.
Who can access your data
Only you can access your attendance data through the app. Messages sent through the contact form are readable by the operator so we can reply. We send the weekly office note through Resend, our email provider. Resend records whether a note is delivered, opened, or clicked, and tells us about bounces and spam complaints, so we can see if the note is useful and stop sending when an address fails. We do not share your information with third parties for their own marketing. Google provides authentication; their use of your data is governed by Google's Privacy Policy.
Where your data is stored
Production data is hosted with a managed cloud provider in the UK/EU region. Data is encrypted in transit (HTTPS/TLS) and at rest (managed database encryption).
How long we keep your data
We retain your account data while your account exists. When you delete your account, all associated attendance data is permanently removed immediately. Contact form messages are kept until we have answered them, then deleted.
Your rights
Under UK GDPR, you have the right to:
- Access: export all your data from Profile while signed in.
- Rectification: edit your attendance and preferences directly in the app.
- Erasure: delete your account and all data from Profile.
- Portability: download your data as JSON from Profile.
Cookies and local storage
We use a small number of cookies and similar storage, and all of them are strictly necessary to provide the service you asked for. We do not use analytics or advertising cookies, so there are no optional categories to turn on or off.
- Staying signed in: a JWT in localStorage, and a record that you have seen the cookie notice.
- Google sign-in: Google Identity Services cookies and scripts. Signing in with Google is the only way into the app.
Because these cookies are essential, declining them is not possible while using the app. If you would rather not have them, do not sign in.
Contact
To exercise your rights or ask questions about this policy, use the data export or account deletion options in the app, or see Contact.