Privacy Policy

Last updated: April 16, 2026

1. Who We Are

Wrok ("we", "us", "our") is a shift scheduling and team management application. This policy explains how we collect, use, and protect your personal data when you use our mobile app and website at wrokapp.com.

2. Data We Collect

We collect the following information when you use Wrok:

• Account information: Name, email address, username (provided during registration)
• Workplace data: Workplace names, worker names, shift schedules, timetables, sick days, vacation requests
• Messages: Content of messages sent through the in-app chat
• Device information: FCM tokens for push notifications, device type
• Location data: GPS coordinates when using the clock-in/check-in feature (only when explicitly triggered by the user)
• Usage data: Crash reports and error logs via Firebase Crashlytics

3. How We Use Your Data

• To provide and maintain the scheduling service
• To send push notifications about schedule changes, messages, and requests
• To verify clock-in location against workplace geofence
• To diagnose bugs and improve the app via crash reports
• To send transactional emails (welcome, password reset)

4. Data Storage and Security

Your data is stored securely on servers hosted by Railway (cloud infrastructure). All data is transmitted over HTTPS. Passwords are hashed using BCrypt and are never stored in plain text. We do not sell, rent, or share your personal data with third parties for marketing purposes.

5. Third-Party Services

We use the following third-party services:

• Firebase Cloud Messaging (FCM): Push notifications
• Firebase Crashlytics: Crash and error reporting
• RevenueCat: In-app subscription management
• Google Play Billing: Payment processing for subscriptions
• Cloudflare: DNS, CDN, and security

6. Data Retention

We retain your data for as long as your account is active. When a boss deletes their account, all associated workplaces, workers, schedules, and messages are permanently deleted. When a worker account is deactivated, personal login data is removed, but the name and work history are retained for business record-keeping purposes.

7. Your Rights (GDPR)

If you are in the EU/EEA, you have the right to:

• Access your data (use the "Download My Data" feature in Settings)
• Rectify inaccurate data (edit your profile in the app)
• Delete your account and data (use "Delete Account" in Settings)
• Export your data in a portable format (JSON export in Settings)

8. Children's Privacy

Wrok is not intended for use by anyone under the age of 16. We do not knowingly collect data from children.

9. Changes to This Policy

We may update this privacy policy from time to time. We will notify you of significant changes through the app or by email.

10. Contact Us

For privacy-related questions, contact us at privacy@wrokapp.com.