PolyHour Privacy Policy

Effective from 22 October 2026 · Home page · Open PolyHour

PolyHour is a work-time tracking app for 3D artists (a Windows version and a browser version). This policy describes what data the app processes and for what purpose.

Data controller and contact

The data controller is Dominik Pańko, Gdańsk, Poland, the creator of the PolyHour app. Contact in all matters concerning data: support@polyhour.app.

What data we process

• Account: email address and account ID (sign-in with email or with Google, handled by Firebase Authentication).
• Pro launch list (optional): if you sign up on the website, we store your email address, the language you chose, the date and the text of your consent. We will send you one message about the launch of PolyHour Pro and nothing more. The legal basis is your consent (Art. 6(1)(a) GDPR), which you can withdraw at any time by writing to support@polyhour.app; we will then delete the address. We keep the address for no longer than one month after the launch of Pro.
• Numbers on the home page: once a day we calculate totals across all accounts (hours, projects, the number of people who have recorded anything) and show them on the website. These are totals only, without anyone's individual data.
• App download count: when you click “Download for Windows”, the server increases the download count for that day and that button (home page or download page). We do not store your IP address, your browser or any other data about you.
• Visit statistics for the polyhour.app website: we count visits using Cloudflare Web Analytics. The tool does not use cookies, does not store anything on your device and does not track you across websites; we see only aggregate data, e.g. the number of visits, pages, traffic source, country and device type.
• Data you enter in the app: projects, time entries, tasks, settings and statistics of time spent in programs (auto-tracking in the Windows version counts the time spent in selected programs and the names of open files). The data is stored locally on your device and in your private document in Google Cloud Firestore, so that your computer and browser stay in sync.
• Google Calendar (optional): if you connect PolyHour to Google Calendar, the app creates a separate “PolyHour” calendar and saves your scheduled tasks in it, and carries changes made to events in that calendar back to the tasks. The app uses the calendar.app.created scope, which gives access only to calendars created by PolyHour. It cannot see your other calendars or events.
• Payments for Pro: purchases are handled by Stripe as the seller (merchant of record). Card details, billing address and receipts are processed by Stripe in accordance with the Stripe Privacy Policy; PolyHour does not see your card number. From Stripe we receive only what is needed to switch Pro on: the customer, subscription and payment IDs, the plan and the end date of the paid period. We store them in Firestore (entitlements, stripeCustomers, stripePayments), in locations accessible only to the server; your app can only read its own plan.

What we use data for

Solely to make the app's features work: displaying your data and synchronising it between your devices, synchronising tasks with the “PolyHour” calendar, and switching on the Pro version after a purchase. We do not sell data, we do not use it for advertising, profiling or training models, and we do not share it with anyone other than the infrastructure providers (Google Firebase / Google Cloud), which store it on our behalf, and Stripe as regards payments.

Data from Google APIs

PolyHour's use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements. Synchronisation is performed by the PolyHour server (Google Cloud Functions), so it works on every device. The refresh token for access to Google Calendar is stored in Firestore in a location accessible only to the server and is deleted (and revoked at Google) when you disconnect the calendar or delete your account.

Retention and deletion

• We keep data for as long as you use the app.
• In the app: Settings → Data Management → Factory Reset deletes your data from the device and from the cloud (the account remains).
• You can disconnect access to Google Calendar in the app (Planner → Google Calendar → Disconnect) or at myaccount.google.com/permissions. You can delete the “PolyHour” calendar in Google Calendar.
• Deleting your account: in the app, Settings → Data Management → Delete account. The account and all data are deleted immediately and permanently (from the cloud and from the device). Instructions and other methods: account deletion. You can also write to the address given above — we will delete the account within 30 days.

Your rights

You have the right to access your data, to have it rectified, erased or transferred (CSV export in the app), and to lodge a complaint with the President of the Personal Data Protection Office (Prezes Urzędu Ochrony Danych Osobowych). The legal basis for processing is the performance of a contract, i.e. providing the app service (Art. 6(1)(b) GDPR); we also keep data about purchases for as long as tax and accounting laws require (Art. 6(1)(c) GDPR). The data is stored on Google Cloud servers; it may be processed outside the EEA on the basis of Google's standard contractual clauses.

Security

Data in Firestore is accessible only to the signed-in account owner (Firestore security rules). Connections are encrypted (HTTPS).

Changes

We will announce significant changes to this policy on this page.