Privacy Policy

Summary

This policy covers both of our apps: Hourwallet (formerly Tracker), the full-featured app, and Tracker Light, the simple offline app (see the dedicated section below). It describes Hourwallet version 2.0 and later and notes where earlier versions differ. A separate section covers this website.

Hourwallet requires a free account, handled by Firebase Authentication, a Google service. We collect your email address, name (if provided), sign-in methods, and a user ID. Your work hours, breaks, job profiles, projects, payments, Wallet entries, and settings are stored on your device. With Hourwallet Pro, that data is also synced automatically to our sync service so you can use the app on more than one device. Our sync service can read the synced data; it is encrypted in transit and at rest. For free users, Google AdMob shows ads and may collect an advertising identifier. We do not sell your data and we do not build advertising profiles ourselves. Details below.

Account (Required)

Hourwallet requires a free account. Version 2.0 and later use Firebase Authentication (firebase.google.com), a Google service, to handle sign-in. Firebase stores on its own infrastructure your email address, your name (if you provide one or your sign-in provider shares it), the sign-in methods linked to your account (Apple, Google, or email and password), a user ID, and authentication metadata such as when you created the account and last signed in. If you use email and password, Firebase stores only a hash of your password. If you sign in with Apple or Google, your provider tells Firebase a stable user identifier and basic profile fields, such as your name and email address (Apple lets you hide your email address).

App versions before 2.0 still use Clerk (clerk.com) for sign-in until they are retired. Clerk holds the equivalent account details for those versions on its own infrastructure. Hourwallet 2.0 creates a new account: it is not linked on our servers to an account created with an earlier version.

You can delete your Hourwallet 2.0 account at any time: in the app (Profile → Delete account), on the web, or by email. Deleting it removes its Firebase authentication record, all the cloud data we hold for it, and its subscription customer record at RevenueCat. The web deletion page signs you in through the same Firebase Authentication service and the provider you choose, and does not keep you signed in afterwards. If no Hourwallet 2.0 account exists for the Apple or Google sign-in you use there, signing in briefly creates an empty record, which the page deletes right away.

An account created with an app version before 2.0, any passphrase-encrypted sync data from those versions and its subscription customer record at RevenueCat are not removed by deleting an Hourwallet 2.0 account. They are deleted with Delete account in an app version before 2.0, on request by email, or when those versions are retired.

Data Stored on Your Device

All of the following is stored locally on your device:

• Work hours, breaks, sessions, tags, and descriptions
• Projects, tasks, payments, and client details
• Job profiles, hourly rates, and salary settings
• Wallet: accounts, income and expense records, transfers, categories, labels, notes and payees, planned payments, budgets, and your Wallet settings
• App preferences (theme, language, notification settings)
• A randomly generated install identifier (the app sends it to our sync service with the requests of a signed-in account: cloud sync for Hourwallet Pro, and removing the device's record when you sign out, which applies to every account)
• Location data for geofenced auto clock-in/out, if you enable it
• Reminders for planned payments, if you set them (the app schedules them on your device)

You can view, export, or permanently erase this data at any time from Data Management. Uninstalling the app deletes all local data.

Wallet (Personal Ledger)

Wallet is a manual ledger for your own tracking. It stores the accounts, income and expense records, transfers, categories, planned payments and budgets that you enter (or import from a file you choose on your device), and the income Hourwallet adds from your job payments if you turn that on. It does not connect to banks, move money, or lend, and it is not financial advice. This data is stored on your device. With Hourwallet Pro it is synced to our sync service together with your other data, so the service can read it; it is encrypted in transit and at rest, but it is not end-to-end encrypted. Free Hourwallet 2.0 accounts do not use cloud sync, so their Wallet data stays on the device. We never share it with advertisers or use it to show ads: no ads are shown on Wallet screens. You can erase it from Data Management → Clear All Data, and deleting your account removes it from the device where you delete the account and from our sync service.

• Importing from another app: if you choose a CSV file that you exported from another app, the app reads it on your device through the system file picker. The file is not uploaded and the app does not keep a copy of it; only the records created from it are saved, and they are stored like any other Wallet record, including being synced with Hourwallet Pro. Wallet connects to no other app or service to do this. You can undo an import with Remove this import in Wallet's list of imported files.
• Exchange rates: the exchange rates Wallet uses are the ones you type in the app's currency settings. Hourwallet does not fetch rates from any service. Totals converted between currencies and marked ≈ are approximations calculated with your rates.
• Link with your jobs (Hourwallet Pro, optional): if you turn it on, payments you record for jobs and projects appear in Wallet as income, and income you add in Wallet can be attached to a job. Amounts shown as expected or marked ≈ are estimates the app calculates from the hours and rates you track. These links stay within your own data.
• Reminders: reminders for planned payments are notifications that the app schedules on your device. They do not include amounts.
• Backups and exports: a JSON export or backup you create includes your Wallet data, and Wallet can export its records as a CSV file. Those files, and any device backup you have enabled, are under your control; we cannot delete them.

Device Backup (Optional)

If you have enabled your device's native backup service, your Hourwallet data may be included in that backup. This is controlled entirely by you and your device:

• iOS: iCloud Device Backup (managed in Settings → Apple ID → iCloud → iCloud Backup)
• Android: Auto Backup to Google Drive (managed in Settings → Google → Backup)

These backups are encrypted by Apple or Google under their own terms. We have no access to them.

Profile Photo (Optional)

If you choose a profile photo in the app, the app uploads a cropped copy (a JPEG of at most 1 MB) to our service at sync.trackerapp.me, which stores it on Cloudflare R2. This is available to free and Pro users. The photo is returned only to you, when you are signed in to your account. You can remove it in the app at any time, and deleting your account removes it too.

Cloud Sync (Hourwallet Pro)

In version 2.0 and later, cloud sync is part of Hourwallet Pro. It runs automatically on every device where you are signed in to your account, so there is nothing to set up. Free Hourwallet 2.0 accounts do not use cloud sync: their data stays on the device.

When cloud sync is active:

• What is synced: your work hours (including breaks, notes, tags, and any location recorded with an entry), projects, payments, tasks, settings, job profiles, the work locations you save (including their coordinates), the days you opened the app (for your day streak), and your Wallet data (accounts, income and expense records, transfers, planned payments, budgets, and Wallet settings).
• Where it is stored: our sync service at sync.trackerapp.me, a Cloudflare Worker we operate that keeps your data in Cloudflare Durable Objects storage. The service can read your synced data because it needs to merge changes made on different devices into one consistent copy.
• Encryption: your data is encrypted in transit (TLS) and encrypted at rest with AES-256 by Cloudflare.
• Version history: to merge edits safely, the service keeps earlier versions of your synced records for 60 days. When you delete a record, a deletion marker is kept for 180 days so the deletion reaches all of your devices. The marker holds no content, and the record's earlier versions are removed once they are 60 days old.
• Devices: for each device signed in to your account, the service keeps a device record: a random install ID, the platform (iOS or Android), the app version, a push token (see Push Wake-Ups below), and when the device last connected. The app sends its install ID with sync requests and when you sign out of the device, which removes that device's record; the sign-out request is sent for every account, not only Hourwallet Pro. Records of devices that have not connected for 400 days are removed automatically.
• Live updates: while the app is open, it keeps a secure connection to the sync service that only tells the app when something changed on another device.
• Signing out and ending Pro: either one stops syncing but does not delete the cloud copy. We keep it until you delete your account.

App versions before 2.0 had an optional older sync method that encrypted your data on your device with a passphrase before uploading it; that data is not linked to your Hourwallet 2.0 account and stays on our server until you delete the earlier account with Delete account in an app version before 2.0, ask us to delete it by email, or those versions are retired.

Push Wake-Ups (Hourwallet Pro)

To wake the app so it can fetch changes made on another device, our sync service sends a silent push notification through Firebase Cloud Messaging, a Google service. On iPhone the message is delivered through Apple's push notification service. Each Hourwallet Pro device registers a push token for this, which our sync service stores in the device record. The app asks Firebase for a push token and a Firebase installation ID only while you are signed in with Hourwallet Pro; Firebase's automatic initialization is turned off, so nothing is requested otherwise. A silent push has no notification content and shows nothing on screen: it only tells the app to sync. We do not use push notifications for marketing.

Information That Does Leave Your Device

The following may leave your device:

• Account sign-in: your sign-in details are handled by Firebase Authentication (see Account above).
• Profile photo (only if you set one): see the Profile Photo section above.
• Cloud sync and push wake-ups (Hourwallet Pro only): see the Cloud Sync and Push Wake-Ups sections above. Your Wallet data leaves your device only through cloud sync.
• Advertising (free tier only): Google AdMob serves banner, interstitial, and rewarded ads. On iOS, you will see Apple's App Tracking Transparency prompt before any advertising identifier is shared with AdMob; declining the prompt means AdMob receives only non-personalized signals. Standard technical signals (rough location from IP, device model, language, screen size, ad performance metrics) are always sent so the SDK can serve and measure ads. Pro users do not see ads and no AdMob data is collected from them. No ads are shown on Wallet screens, and no Wallet data is given to AdMob.

Tracker Light

Tracker Light is our simple, offline companion app. It requires no account and has no cloud sync: everything you enter (work hours, breaks, salary settings, preferences) is stored only on your device and is never uploaded to our servers. Deleting the app deletes that data, subject to your device's own backup settings (iCloud Backup on iOS, Auto Backup on Android). The free experience is supported by ads served by Google AdMob, under the same conditions described in the advertising section above, including the App Tracking Transparency prompt on iOS. Nothing else in the account, profile photo, cloud sync, push wake-up, or authentication sections of this policy applies to Tracker Light.

This Website

trackerapp.me is hosted by Cloudflare and uses Google Analytics, a Google service, to measure how the site is used. When you visit, Google Analytics receives the page you view, where you came from, your device and browser type, your language and an approximate location derived from your IP address, and it sets cookies in your browser to recognize repeat visits. We use these figures to understand which pages are read.

To opt out, install Google's Google Analytics Opt-out Browser Add-on, or block cookies and scripts from google-analytics.com and googletagmanager.com in your browser or with a content blocker.

How We Use Information

We use the sync service to store your synced data and deliver it, merged, to your own signed-in devices; we do not use it for advertising and we do not sell it. We use Firebase Authentication only to authenticate you, and Firebase Cloud Messaging only to send the silent wake-ups described above. AdMob uses its signals to deliver and measure ads, and Google Analytics measures how this website is used. We do not sell your data and we do not build advertising profiles ourselves.

How Long We Keep Data

• Your account and synced data, including Wallet data: until you delete your Hourwallet 2.0 account.
• Earlier versions of synced records: 60 days. Deletion markers: 180 days.
• Device records: until you sign out of that device or delete your account, and removed automatically after 400 days without a connection.
• Profile photo: until you remove it or delete your account.

Deleting your Hourwallet 2.0 account in the app or on the web erases the account and all of this cloud data immediately. Requests made by email are handled within 30 days.

Data from app versions before 2.0 (the earlier account, passphrase-encrypted sync data and the subscription customer record) is kept until you delete it with Delete account in an app version before 2.0 or by email request, or until those versions are retired.

Third-Party Services

The following third parties may process data as described above. Each has its own privacy policy:

• Firebase Authentication (Google): sign-in, account management, and password reset (required to use Hourwallet 2.0 and later)
• Firebase Cloud Messaging (Google): delivers the silent wake-up pushes for Hourwallet Pro cloud sync (receives a device push token and a Firebase installation ID, only for signed-in Hourwallet Pro users; on iPhone the message is relayed through Apple's push notification service)
• Clerk: sign-in for app versions before 2.0, until they are retired
• Cloudflare: hosts our sync service, which stores your synced data and profile photo (encrypted at rest), and this website
• Google Analytics (Google): measures how this website is used (see This Website above)
• Google AdMob: advertising for free users
• Apple App Store / Google Play: in-app purchases for Hourwallet Pro
• RevenueCat: entitlement management for Hourwallet Pro (receives your account's user ID as the customer ID, store receipts, and purchase status; we do not send it your name or email)

Your Rights

You have full direct control over your data:

• Export: Data Management → Export (JSON or CSV). The JSON export includes your Wallet data, and Wallet exports its records as a CSV file from within Wallet
• Erase your data: Data Management → Clear All Data erases it, including your Wallet data, on this device and, when cloud sync is active, from the cloud and your other devices. Uninstalling the app deletes the local data on that device only.
• Delete your Hourwallet 2.0 account and all of its cloud data: in the app (Profile → Delete account), on the web, or by email, as described on the delete account page, which also covers accounts created with earlier versions
• Opt out of advertising: subscribe to Hourwallet Pro
• Opt out of personalized ads: decline the App Tracking Transparency prompt on iOS, or reset/disable your advertising identifier in device settings

Where applicable laws (including GDPR and CCPA) grant you rights of access, correction, deletion, or portability, those rights are satisfied directly through the controls above. For requests we cannot fulfill in-app — such as questions about data held by our service providers — contact support@trackerapp.me and we will help.

Children's Privacy

Hourwallet is not directed to children under 13 and we do not knowingly process data from children under 13. If you believe a child under 13 has created an account, contact support@trackerapp.me and we will delete it. Uninstalling the app erases the data stored on that device.

Changes to This Policy

If we materially change what data leaves your device or which third parties we use, we will update this policy and revise the "Last updated" date above. Continued use after an update constitutes acceptance of the revised policy.

Contact

Questions or requests regarding this policy: support@trackerapp.me