HourMint

Privacy Policy

Effective date: 23 September 2026

1. Who is responsible for HourMint

HourMint is a trading name used by Jake Richards, a UK sole trader and the data controller for HourMint.

Business address: 2 New Buildings Farm, Ashley Drove, Henley, Marlborough, Wiltshire, SN8 3RH, United Kingdom.

Privacy: privacy@hourmint.app
Support: support@hourmint.app

ICO data protection fee registration: ZC230416.

2. What HourMint stores locally

Job names, hourly rates and rate history, shifts, breaks, gross-earnings calculations, payday schedules and forecasts, goals, future shifts, converter entries and most app settings are stored on your device by default.

HourMint does not require a cloud account for its core shift, earnings, payday, goal or working-time features. Core calculations are performed from local data.

Deleting HourMint or clearing its local storage may remove this data. HourMint V1 does not provide HourMint-operated cloud backup or cross-device sync. Device backup and transfer features are controlled separately by Apple, Google or your device provider.

3. Purchases and HourMint Pro

Apple App Store or Google Play processes the store transaction. HourMint uses RevenueCat to validate purchases and operate HourMint Pro.

RevenueCat may process purchase history, product identifiers, transaction or receipt information, entitlement state, limited technical information and a random pseudonymous HourMint installation identifier that HourMint supplies as the RevenueCat App User ID.

That identifier is not an email address, phone number or advertising identifier. HourMint does not attach employer names, hourly rates, earnings, shift history, goal values or other work records to RevenueCat customer metadata.

4. Optional analytics

Behavioural analytics are off by default. If you deliberately enable “Help improve HourMint”, HourMint sends a tightly allowlisted set of product-interaction events to PostHog's EU Cloud together with the pseudonymous installation identifier, platform, semantic app version, Pro status and coarse usage-count buckets.

Analytics events exclude employer or job names, hourly rates, earnings, goal names or amounts, converter item names or prices, exact shift timestamps, payday dates, support/free-form text, raw deep-link values and store prices.

HourMint's production PostHog project is configured for events-only analytics. Session replay, autocapture, console capture, performance capture, exception autocapture, heatmaps and dead-click capture are disabled. IP anonymisation is enabled, and HourMint also disables PostHog GeoIP enrichment on each event.

The lawful basis for optional analytics is consent. You may withdraw consent at any time in Settings. Turning analytics off stops future capture and deletes any unsent analytics events queued by HourMint on the device.

5. Creator attribution

Creator attribution is not required for core HourMint functionality. If the feature is enabled and you deliberately enter a creator code, the service may process the creator code and the same pseudonymous installation identifier to record the referral. It does not receive your employer, hourly rate, shifts, earnings or goals.

If creator attribution remains disabled in the production build, this processing does not occur.

6. Notifications, support and sharing

HourMint can schedule local reminders. Reminder design avoids putting your hourly rate, earnings amount or employer/job name in scheduled lock-screen notification content.

HourMint does not silently upload support reports. The in-app support tool creates a report on-device and opens the native share interface; nothing is sent until you choose a destination.

If you contact HourMint, the information you choose to send is used to answer your request, diagnose problems, protect the service and keep appropriate records. Do not send passwords, authentication codes or full payment-card information.

Shift receipts and converter share cards are rendered locally. Once you choose another app, person or service as the destination, that destination's privacy practices apply.

7. Purposes, lawful bases and what is optional

You do not have to enable optional analytics or creator attribution to use HourMint's core local features. If you choose to buy or restore HourMint Pro, the store and entitlement information described above is necessary to process and verify that purchase and provide the paid features.

Transaction and entitlement information is obtained from Apple App Store or Google Play through the RevenueCat purchase service. Other remote information described here is obtained from you or from your use of the relevant HourMint feature.

Where HourMint relies on legitimate interests, those interests are operating, supporting and protecting a small consumer software service in a proportionate way.

8. Who receives data

HourMint does not sell personal data. Depending on the feature you use, limited remote processing may involve:

Information may also be disclosed where required by law or reasonably necessary to establish, exercise or defend legal claims.

9. International processing

Some providers and subprocessors may process limited information outside the United Kingdom. RevenueCat's current processor documentation identifies US-based subprocessors and contractual protections for UK personal data.

Where a restricted transfer under UK data-protection law occurs, HourMint relies on the applicable provider contract and lawful transfer safeguard, such as an approved UK transfer mechanism where required. You can request more information about relevant safeguards from privacy@hourmint.app.

10. Retention and deletion

Local HourMint work data remains on your device until you edit or delete it, clear app storage or uninstall the app, subject to any device backup you control.

Support correspondence is normally retained for no more than 24 months after the last relevant interaction, unless longer retention is reasonably necessary for a dispute, security/fraud issue or legal obligation.

Purchase and transaction records may be retained by Apple, Google and RevenueCat under their service and legal requirements. Optional PostHog analytics records are kept only for as long as reasonably necessary to understand product use, improve HourMint and investigate product issues, and are reviewed for deletion or de-identification when they are no longer needed for those purposes. A shorter automated deletion period has not yet been configured in PostHog.

You can request deletion of developer-controlled remote personal or pseudonymous records where applicable by contacting privacy@hourmint.app. Deleting remote records is separate from deleting local app data and cannot require Apple or Google to erase records they independently must retain.

11. Your data-protection rights

Depending on the processing and lawful basis, your rights may include access, correction, erasure, restriction, objection and data portability. Where processing is based on consent, you can withdraw that consent at any time without affecting processing that was lawful before withdrawal.

To exercise a right, contact privacy@hourmint.app. HourMint may need enough information to verify and respond to the request, but will not ask for unnecessary work/pay data.

Your right to object: where HourMint relies on legitimate interests, you have the right to object to that processing in circumstances provided by data-protection law. Contact privacy@hourmint.app and explain what processing you object to.

You also have the right to complain to the UK Information Commissioner's Office at ico.org.uk.

12. Advertising, tracking and automated decisions

HourMint V1 does not use IDFA or another advertising identifier, does not build a cross-company advertising profile and does not sell your work/pay data.

HourMint does not use your personal data to make automated decisions that have legal or similarly significant effects on you.

13. Age

HourMint V1 is intended for adults aged 18 and over. It is not designed or marketed as a children's service and does not intentionally ask for date of birth or use age profiling.

14. Security

HourMint is designed to minimise work/pay information leaving the device and to separate core calculations from optional remote services. No system can guarantee absolute security.

15. Changes

This policy shows its effective date. If HourMint materially changes how personal data is used, this policy will be updated before the new processing starts and additional notice will be provided where required.