Privacy policy.

Work and pay records

The app stores the jobs, rates and pay rules, shifts, breaks, tips and other earnings, notes, planned shifts, and paycheck comparisons you enter. It processes them on your device to record work, estimate gross pay, compare paycheck entries, and create reports or backups you request.

Cernori does not upload these records to its purchase-verification service or provide automatic work-record cloud synchronization. The app does not request location, contacts, or advertising-identifier permission. Advertising and work-record analytics SDKs are not integrated. Google's billing component has its own technical diagnostics, described below; Android and Google services may also process diagnostics according to their settings and policies.

Exports, backups, and copies

You choose where to save or share reports and complete backups using Android's file and share interfaces. These files can contain private work and pay information. A person, app, or storage provider you select handles the copies under its own practices. A CSV or PDF is a report, not a complete restorable backup.

Android system or device-transfer backups may include app data according to your settings. Purchase proofs, their encryption keys, and complimentary-access grants are excluded from Cernori work backups and Android backup. Restoring store access does not restore work records.

Optional reminders

With your permission, planned shifts can use local Android notifications and supported system scheduling services. A reminder may display a job name and shift time on the Lock Screen. You can edit or remove planned reminders in the app and control notification permissions and previews in Android settings.

Google Play purchases and verification

Where subscriptions are enabled, Google Play handles payment and renewal. Cernori does not receive your payment-card number. The app uses Google Play purchase information and its billing library to check Pro access. Google processes its own store, account, payment, device, and service information under Google’s privacy policy.

The Google Play billing library can send technical billing diagnostics to Google through Google's transport component. These include billing operation results, app and billing-library versions, a randomly generated billing-client instance identifier, and device, software, network, and locale information. This processing is separate from your work records and Cernori's purchase-verification service.

To verify a purchase, the app sends Cernori's verification service the app package name, product identifier, purchase token, and a random request challenge. The service queries Google Play for that purchase's subscription state and validity period. It returns a signed verification result. Work records, pay entries, report or backup contents, location, and advertising identifiers are not part of this request.

The service does not keep raw purchase tokens or request bodies in an application database or request log. It processes these credentials in memory for verification. To limit abuse, it gives its host a hash of the purchase token for a rate counter with an approximately one-minute counting window. This counter is separate from transient processing of raw purchase credentials.

Cloudflare hosts the service and also processes connection metadata such as network addresses, requested paths, and technical request information under Cloudflare’s privacy policy. Application request logging is disabled; this does not mean the hosting provider processes no technical data. Cernori uses this service for subscription functionality and fraud prevention, not advertising or work-record analytics.

On your device, the app retains a signed proof of subscription status encrypted with Android Keystore until replaced or removed. It is excluded from work and Android backups. A valid offline proof retains only its verified subscription period; it does not invent a renewal. Access is refreshed on return to the app and periodically while it is open. Google's purchase and refund records are separate from these local proofs and are retained under Google's policies and applicable requirements.

Complimentary access and store protection

If you enter a complimentary Hours access code, the app checks it locally and saves only the matching configured fingerprint outside work and Android backups. It does not save the entered code or send it to Cernori. Removing this grant does not cancel a paid subscription.

Google Play distribution can include Google's automatic installer protection. Google adds checks to distribution files to verify installation through Play. Its documentation says this protection works offline, while checks after prolonged Play Store disconnection may require connectivity. Read about Google Play automatic protection. Google's own services process information under Google's policies.

Retention, deletion, and your choices

Local work records remain on your device until you remove them or remove the app's data. Removing the app removes its local data, subject to copies retained in Android backups. Exported files, shared copies, and external backups must be removed from those destinations separately. Cernori does not hold a server copy of your work records that it can recover or delete for you.

You can remove complimentary access in the app. Clearing app data removes local purchase proofs, but does not cancel a subscription or delete Google's purchase records. Manage Google Play subscriptions to cancel a subscription. See the Android subscription terms.

To request deletion of personal information held by Cernori, email support@cernori.com with the subject Android data deletion request. Name Cernori Hours Tracker for Android and describe the information you want removed. Do not include payroll records, payment-card details, passwords, or a complete purchase token. We may ask for information needed to verify your request. There is no Cernori account to close.

The verification application does not retain raw purchase credentials after the request. Its separate purchase-token hash rate counter expires after approximately one minute. Local work records, external copies, and Google purchase records must be managed through the destinations described above. We retain support correspondence only as needed to respond, handle the request, and meet applicable obligations; if a record must be retained, we will explain the reason and applicable retention period in our response.

Depending on your location, you may also have rights to request access, correction, restriction, or portability of personal information Cernori holds, or to object to its processing. We do not sell your personal information or use it for targeted advertising.

Contact and changes

support@cernori.com — include your app version and what you were trying to do. Please do not send passwords, payment details, or an unredacted pay stub.

If you email Cernori, we receive your email address and whatever you include. Support email is hosted in Google Workspace. Please share only information needed for your request. This policy will be updated when the Android app's data handling changes.