Privacy Policy

1.1 Account Information

• Authentication Data: Email address, display name, and profile photo (when using Google Sign-In or email registration).
• Account Preferences: Language settings, theme preferences, notification settings, and other customization options.
• Profile Information: Any additional information you choose to provide in your profile.

1.2 Work and Shift Data

• Work Configurations: Job names, hourly rates, penalty rates (day/afternoon/night/weekend), and work descriptions.
• Shift Records: Clock-in/clock-out times, break durations, shift dates, and associated work assignments.
• Delivery Work Data: Platform information (e.g., DoorDash, Uber Eats), vehicle type, delivery earnings, tips, and mileage tracking.
• Earnings Calculations: Computed earnings based on your configured rates (these are estimates only).
• Tax and Deduction Settings: Tax rates, superannuation percentages, and custom deductions you configure.

1.3 Live Mode Data

• Session Data: Start time, pause/resume events, total duration, and computed earnings during live tracking sessions.
• Usage Metrics: Number of Live Mode sessions used per month (for free tier usage limits).

1.4 Technical Information

• Device Information: Device type, operating system, browser type and version.
• Connection Data: IP address, approximate location (country/region level only).
• Usage Analytics: Feature usage patterns and error logs to improve the application.

2.1 Payment Data

When you subscribe to Orary Premium, payment is processed by Stripe's secure portal. We do not collect, store, or have access to your credit card number, CVV, or full bank account details.

2.2 Information We Receive from Stripe

• Stripe Customer ID: A unique identifier linking your Orary account to Stripe.
• Subscription Status: Whether your subscription is active, trialing, or cancelled.
• Billing Period: Subscription start and end dates.
• Last 4 Digits: Only the last 4 digits of your payment card (for display purposes).

2.3 Subscription Details

• Trial: New users get a 15-day free trial. Your card is required but not charged until the trial ends.
• Billing: $2.99 AUD/month after trial, charged automatically through Stripe.
• Cancellation: Cancel at any time. Access continues until the end of the billing period.
• Refunds: We do not provide refunds for partial billing periods.

3. How We Use Your Information

• Provide Core Services: Enable shift tracking, earnings calculations, and data synchronization.
• Sync Across Devices: Keep your data synchronized securely across all your devices.
• Process Payments: Manage Premium subscriptions through Stripe.
• Improve the Application: Analyze usage patterns to fix bugs and develop new features.
• Communicate with You: Send important updates about your account and security.

Orary uses Firebase (Google Cloud Platform) for data storage and authentication. Your data is protected with:

• Encryption in transit (TLS/SSL) and at rest (AES-256)
• Automatic backup and disaster recovery
• Strict access controls — each user's data is isolated and accessible only to them
• Regular security audits and compliance certifications
• Secure API calls — all communication is encrypted

5.1 Service Providers

• Firebase (Google): Authentication, database storage, and hosting.
• Stripe: Payment processing for Premium subscriptions.
• Google Calendar API: Optional calendar synchronization (only with your explicit permission).

5.2 Work Sharing Feature

When you use the "Share Work" feature, a temporary share link is created. This data expires automatically after 7 days, has a maximum of 10 uses, and does not include your personal information or shift history.

5.3 Legal Disclosure

We may disclose your information if required by law, court order, or to protect the safety of our users.

6. Cookies & Local Storage

We use essential cookies and local storage for:

• Authentication Cookies: To keep you logged in securely.
• Local Storage: To cache your preferences and improve performance.

We do not use advertising cookies or tracking cookies for marketing purposes.

• Right to Access: Request a copy of all data we have about you.
• Right to Rectification: Correct any inaccurate information.
• Right to Erasure: Delete your account and all associated data permanently.
• Right to Data Portability: Export your data in a machine-readable format.
• Right to Object: Object to certain types of data processing.

You can exercise these rights directly within the app (Settings → Delete Account / Clear Everything) or by contacting us at privacy@orary.app.

8. Data Retention

• Active Accounts: We retain your data for as long as your account is active.
• Deleted Accounts: All data is permanently removed within 30 days of account deletion.
• Backup Copies: Backup copies may persist for up to 90 days, then are permanently deleted.

9. Children's Privacy

Orary is not intended for use by individuals under the age of 16. We do not knowingly collect personal information from children.

10. International Data Transfers

Your information may be processed in countries other than your own. We ensure appropriate safeguards are in place, including standard contractual clauses approved by relevant authorities.

11. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of significant changes by posting a notice in the app or sending an email. We encourage you to review this policy periodically.

12. Contact Us

For questions, concerns, or privacy requests:

• Email: privacy@orary.app
• Support: support@orary.app

We aim to respond to all privacy inquiries within 30 days.