Privacy Policy — Wageproof

Last updated: 2026-11-03 · Covers Wageproof 1.2.x and 1.3.0 as explained below.

Wageproof (bundle identifier xyz.bogtsi.wageproof) is made by Bogdan Tsiganiuk, an individual developer. Contact: bogdan.tsiganiyk@gmail.com

Version scope. Basic jobs, shifts, pay comparisons, exports, backups and weekly fingerprints apply where available in your installed version. Off-the-clock notes and photos, schedule evidence, tipped-pay answers, job-ending records, Year-End Pay Check and local reminders described below are additions in 1.3.0. They apply only after you install 1.3.0 and use those features; they are not data flows of live 1.2.x installations. Neither version implements calendar access, iCloud sync or widgets.

Español: https://bogtsi.xyz/wageproof/es/privacy

In case of differences, the English text governs. En caso de diferencias, prevalece el texto en inglés.

The short version

Wageproof has no account or sign-in and no server of ours for your work records. Your hours, rates, job settings, notes, photos and entered paystub figures stay in the app's storage unless you share them or your device backs them up. The app does not upload these records to us. Purchases and app updates do use online services. If you email support, we receive what you send. These exceptions are explained below.

Collection and tracking

We do not run an advertising SDK, a separate usage-analytics SDK or a crash-reporting SDK in Wageproof. We do not request an advertising identifier (IDFA) or tracking permission, and do not use your data for cross-app advertising tracking. This does not mean that no data leaves your phone: Apple, RevenueCat, Expo and services you choose can process the data described below. RevenueCat provides purchase reporting as well as purchase management.

What stays on your device

• Your jobs: name, pay rate, workweek start, pay period, state selection and rounding policy.
• Your shifts: start and end times, breaks, notes, tags and timestamped edit history.
• In 1.3.0, off-the-clock notes: what you did, when you say it happened, when the app saved it and an optional photo.
• In 1.3.0, answers and records for schedule pay, tipped pay, a job that ended and Year-End Pay Check, with their saved versions and dates.
• Digital fingerprints computed for the records covered by the relevant integrity chain.
• Paystub figures you enter for comparison.
• Display preferences, including language, and, in 1.3.0, reminder settings.

These records are written to the device's app storage, not our own database. Delete App removes that local storage; Offload App does not. Device backups and files you shared are separate copies and may remain.

Photos and camera (1.3.0)

An off-the-clock note can have one optional photo.

• When you tap to take or choose a photo, iOS may ask for camera or photo-library permission. The app asks then, not at launch. If you decline, you can still save a note without a photo.
• The selected photo is copied into Wageproof's storage on the device. Wageproof does not upload it. Choosing a library photo does not change or delete the original in your library.
• Wageproof records no audio and does not use the microphone.
• Photos may be included in a notes PDF or a manual backup you share. They may also be included in a device backup, depending on your iOS and backup settings.
• Removing a photo from a note asks the app to delete its stored picture file. The note's history keeps the fact that a photo was attached and its fingerprint. If deletion fails, a file may remain in app storage until that storage is deleted. Copies in your photo library, backups or exports are not removed.

Notifications (1.3.0)

Wageproof can show payday reminders, reminders for a shift running a long time, final-paycheck reminders and a monthly prompt to review last month's tips.

• These are local notifications scheduled by iOS from information on your phone. Wageproof does not request a push token or use a remote push service for them, and sends no reminder records to us.
• Permission is requested when you switch on a reminder in Settings, not during background rescheduling. If you decline, the rest of the app still works. Change permission in iOS Settings → Notifications.
• Notification text is general: it contains no pay figures or note text. Local notification data can include internal job and period identifiers so tapping a payday reminder opens the right record. It uses no sound or badge.

Online services and sharing

1. Exports and manual backups. Share PDF, Share CSV and Export backup build files and hand them to the iOS share sheet. A notes PDF or backup can contain notes and photos. You choose the destination, such as Mail, Files, iCloud Drive or another app. We receive no automatic copy. Backup files are readable JSON, not password-protected or encrypted by Wageproof. Treat them and exports as sensitive; their destination's access and retention rules apply.
2. Device backup. Depending on your settings, Apple's iCloud device backup or a computer backup may include app data. Those are Apple's or your backup provider's services under their terms, not Wageproof sync. Wageproof does not implement iCloud sync.
3. Apple and RevenueCat. Apple handles payments; we do not receive your payment-card details. RevenueCat manages and reports purchase history, subscription status and Pro access for us. Its SDK is configured when the app starts, not just when you buy. It uses a generated app-user identifier (also shown as Support ID), purchase and receipt/transaction information, and technical app/device information needed to provide the service. Network services also receive connection information such as an IP address. We can view purchase records and the app-user identifier in RevenueCat. Wageproof does not send RevenueCat your work records, entered pay, notes or photos. It does not set your name or email as customer attributes. If you share a Support ID with us, we can connect your request to that purchase record. See https://www.revenuecat.com/privacy and https://www.apple.com/legal/privacy/.
4. Expo app updates. The app can contact Expo's update service to check for and download compatible app code and assets. Requests include technical update information such as platform and app runtime version; the service also receives connection information such as IP address. Wageproof does not attach your work records to update requests. See https://expo.dev/privacy.
5. Support and links. If you email us, we and our email provider receive your address and anything you include. Send only what is needed; do not send a backup, photo or pay record unless you want us to see it. Opening legal pages or an official source opens a website whose provider receives normal web-request information and applies its own policy.

Retention and your choices

Work records remain on your device until you remove the app's data or replace it through restore. Ordinary edits keep history; off-the-clock notes cannot be deleted individually in the app. Removing a job does not delete its shifts or notes. Restore replaces the device's records with the backup, rather than merging, and may replace newer history. It requires confirmation and warns about unreadable entries; a failure partway can leave mixed old and restored data. See the Terms for details.

We cannot retrieve, correct or delete local work records we never received. Delete App (not Offload App) to remove local app storage, and separately delete backups and exports you control. Deleting the app does not cancel an Apple subscription or automatically delete purchase records held by Apple or RevenueCat. Their retention policies apply. We keep support messages as needed to handle the request and related support, subject to applicable legal obligations. For access, correction or deletion requests about information we do hold, or questions about service-provider data, email us. Rights and any required retention depend on applicable law; we will handle requests accordingly.

Children

Wageproof is not directed at children. We do not knowingly request children's personal information. If you believe a child sent us information, contact us.

Changes

If this policy changes, we update the date above. Settings → Legal links to the current policy. The version scope above distinguishes 1.2.x from the 1.3.0 additions.