WorkFlow ("the app") is a local-first time tracking app with workplace geofencing for Android. This Privacy Policy explains what data the app handles, how it is used, your rights, and how to contact us.
1. Who we are
WorkFlow is published by:
- Name: Ivan Knezevic
- Country: Switzerland
- Contact e-mail: i.knezevic@gmx.ch
For the purposes of GDPR and the Swiss Federal Act on Data Protection (FADP/revDSG), Ivan Knezevic acts as data controller for any personal data this Privacy Policy covers.
2. Data the app handles on your device
WorkFlow is designed local-first. The following data categories are created and stored on your device only:
- Workplace location: the latitude/longitude coordinates and geofence radius you configure as your workplace.
- Location samples: background location reads used to evaluate whether you have entered or left a workplace geofence.
- Time entries and work sessions: check-in/check-out timestamps, durations, breaks, daily aggregates, and any manual corrections.
- Settings and preferences: schedule preferences, theme, language, notification settings.
- Diagnostics: permission status, background-task status, last fallback check, device manufacturer hint, local error reports.
- Backups and support bundles: files the app generates when you explicitly use the backup or support bundle feature.
This data is stored in the app's local database and is not transmitted to us or any third party by default.
3. Data the app may send off your device
WorkFlow does not transmit your location data, work time entries, or any personal identifiers to our servers. There are no analytics SDKs and no advertising SDKs active in this release of the app.
The following limited categories of data may leave your device:
- Address search (OpenStreetMap Nominatim): when you manually search for a workplace address during setup, the search text you type is sent to OpenStreetMap's public Nominatim service at
nominatim.openstreetmap.org. The request includes a User-Agent header identifying the app and a developer contact e-mail (required by the Nominatim usage policy), and an Accept-Language header reflecting your device language. OpenStreetMap may log the request under its own privacy terms (OpenStreetMap Foundation privacy policy). Address search runs only when you actively type a query during workplace setup; it is not used in the background. - User-initiated exports and shares: when you explicitly choose to export a report (PDF/CSV), share a backup, or share a support bundle, the destination app or service you choose handles that file under its own terms.
This release of WorkFlow does not transmit crash reports, telemetry, or product analytics. Firebase Crashlytics code is present in the codebase but remains inactive in this build because no Firebase configuration is bundled. If a future build enables Crashlytics, this Privacy Policy will be updated before that build is published.
4. Permissions and why we ask for them
- Location (foreground and background): WorkFlow collects location data to enable automatic check-in and check-out, even when the app is closed or not in use. Location is used only to compare your device with the workplace geofence you configured.
- Notifications: used to confirm check-in and check-out events and to surface tracking-status issues.
- Battery-optimization exemption (optional): improves background reliability on Android devices that aggressively kill background tasks.
- Storage / Share intents: used only when you export or share files initiated by you.
5. Legal basis for processing (GDPR / FADP)
Processing your location and time data on your device is necessary to provide the core functionality you requested (Art. 6(1)(b) GDPR / Art. 31(2)(a) revDSG: contractual necessity).
When you trigger an address search, the search query and language header are sent to OpenStreetMap's Nominatim service on the basis of your direct request to perform that search (Art. 6(1)(b) GDPR).
6. Data retention
- Data stored on your device remains until you delete it within the app, clear app storage in Android Settings, or uninstall the app.
- Address search queries are sent to OpenStreetMap each time you search; the app does not cache them. OpenStreetMap's retention policy applies to any logs the OpenStreetMap Foundation may keep.
7. Your rights
Under GDPR and the Swiss FADP, you have the right to:
- request access, rectification, or deletion of any personal data we process,
- restrict or object to processing,
- data portability,
- lodge a complaint with the supervisory authority responsible for your location:
- Switzerland: Federal Data Protection and Information Commissioner (FDPIC), edoeb.admin.ch
- EU: your local data protection authority.
Because WorkFlow does not require user accounts, does not collect identifiers, and stores all time and location data locally on your device, we typically do not hold any personal data linked to you that we could access, correct, or erase. If you believe we hold personal data about you (for example because you contacted us at the support e-mail), please contact us at the e-mail above.
8. Account deletion and data deletion
WorkFlow does not require an account.
- Delete data on your device: use the in-app reset / clear-data option in Settings, or uninstall the app via Android Settings > Apps. Uninstalling removes the local database.
- Address search logs: the app does not store an address search history. Logs that OpenStreetMap may keep on its servers are governed by OpenStreetMap's privacy policy.
9. Children's privacy
WorkFlow is not directed to children under the age of 13 (or 16 in jurisdictions where that is the applicable threshold). The app does not knowingly collect personal data from children.
10. International data transfers
Address search queries sent to OpenStreetMap's Nominatim service are processed by the OpenStreetMap Foundation's infrastructure, which may be located outside Switzerland or the EU/EEA. See the OpenStreetMap Foundation privacy policy for details.
11. Third-party services
- Google Play Services: required on Android to provide the Google Geofencing API. Geofence event detection runs on-device; entry/exit events are delivered locally by the operating system.
- OpenStreetMap Nominatim: used only for manual address lookup during workplace setup.
These providers process data under their own privacy policies. WorkFlow does not enable any analytics, advertising, or crash-reporting SDK in this release.
12. Security
The app uses Android's encrypted secure storage for sensitive configuration values. We rely on the security mechanisms provided by the Android operating system for data at rest on your device.
13. Changes to this policy
We may update this Privacy Policy. The "Last updated" date at the top reflects the most recent revision. Material changes will be announced in the app release notes.
14. Contact
Privacy questions, data subject requests, and any complaints:
E-mail: i.knezevic@gmx.ch
Postal: available on request via e-mail.