Privacy policy

1. Scope

Hourpip helps you keep your own work-hour records. This policy covers the app and the services that sign you in, synchronize your records and prepare account exports. It also covers this website, hourpip.com, including its contact form. Websites and external services you choose to open have their own privacy policies. This policy does not describe their independent practices.

2. Information we handle

We handle the following information:

• Account information: your email, name when provided, an optional profile photo you choose, sign-in method, provider identifier and session information. Only the selected photo is uploaded, not your photo library.
• Your records: school, campus city and program details, study dates and calendars, jobs, work entries and notes, planned shifts, timer events, confirmations, calendar corrections and export history.
• Settings and device information: language, time zone, notification, privacy and Find work settings (including the alert for new shifts near your campus), an app installation identifier, platform, app version, notification tokens and permission status.
• Messages you send us: if you contact us by email or through the contact form, we receive what you send, such as your name, email address and message.
• Technical information: the service processes technical request information and diagnostic events to operate and protect the service.
• App usage information: anonymous events about the screens and features you use in the app (section 3), with your app language, your campus region, whether Find work is on, and device details such as model, operating system, app version and approximate country.

Hourpip does not request your study permit, UCI, SIN, banking details or device location permission. Avoid putting these in notes or support messages.

3. Why we use it

We use this information to authenticate you, keep and synchronize your records, calculate and display your hour summaries, apply your study calendar, deliver enabled reminders, prepare exports, handle corrections and support requests, and prevent abuse or resolve technical problems.

To understand how the app is used and improve it, the app records anonymous usage events: which screens are opened and when a feature is used, such as the timer, entries, plans, exports, sign-in, settings and the Find work shifts you open or hand off to Aukazi. These events are tied to a random identifier for your installation of the app, never to your account, name or email, and never include your hours, durations, jobs, notes or school. No advertising identifier is collected, nothing is used for advertising and there is no tracking across other companies’ apps or websites. This website sets no cookies, has no analytics and loads nothing from other companies. Server diagnostics (section 4) are separate from usage analytics and are used only to keep the service working.

Find work suggests open shifts from Aukazi, the temp-work platform that Les Entreprises Aukazi Inc. also operates. To list them, the app sends your campus city to the Hourpip service, which asks Aukazi for open shifts in that city. That request includes no account, device, name, email or hours information, and the Hourpip service keeps the results for 5 minutes. Whether a shift fits your remaining hours for the week is worked out on your phone, so your hours never leave Hourpip.

If you ask to be told when shifts arrive near your campus, that choice is saved with your synced settings. The Hourpip service then uses your stored campus city to check Aukazi for new shifts and sends at most one notification for each batch of new shifts. You can turn Find work off in Settings → Show Find work. While it is off, nothing is requested from Aukazi for you and these alerts stop. Section 5 explains what Aukazi receives when you open a shift.

4. Service providers

Service providers process only the information needed for their role:

• Hosting: the account service and its database run on a virtual private server (VPS) that we manage with Dokploy.
• Cloudflare R2 stores, in private storage, temporary account-export files, profile photos and encrypted daily backups of the database.
• Resend delivers sign-in and verification code emails.
• Apple or Google verifies your identity when you select that sign-in method.
• Apple Push Notification service and Google Firebase Cloud Messaging deliver messages to your devices using notification tokens. Synchronization messages use record references rather than your work-hour entries.
• Sentry receives server error reports. They are scrubbed first and never include request contents, hours, notes, names or emails.
• Google Analytics for Firebase receives the anonymous app usage events described in section 3, with a random installation identifier and device details. It does not receive your account, hours, notes, name or email, and its advertising features are turned off.
• Aukazi supplies the open shifts listed in Find work. It receives only the campus city with each request (section 3).

This website is served as static files; its host processes ordinary connection information to deliver the pages. These services may also process technical connection information under their own policies. The website uses no advertising or analytics providers. Contact us for details about the providers used for your account.

5. Sharing and disclosures

Hourpip does not sell your personal information or send your work records to employers, schools, Aukazi or government agencies as a routine part of the service. Access may be needed to operate the service or respond to your support request. Information may be disclosed when legally required or necessary to address fraud or a security incident, subject to applicable law. When you export or share a report, you choose the recipient and that recipient controls the copy. When you open a shift in Find work, its page on aukazi.com opens in your browser. Aukazi then receives the shift reference, your language, the fact that you came from Hourpip and ordinary browser connection information, and Aukazi’s own privacy policy applies there. Other external links can pass their destination reference and ordinary connection information to the destination service.

6. Where information is processed

Information is stored on your device and processed by the account service and its providers. Processing is not guaranteed to remain in Canada: Cloudflare R2 does not offer storage limited to Canada, and providers may process information in other countries, where local laws and lawful access requirements may differ. Contact [email protected] for information about processing locations and safeguards.

7. Security and device storage

The production service uses encrypted HTTPS connections, authenticated account access and encryption for selected sensitive fields stored by the server, such as emails, names and notes. Database backups are encrypted before they are stored. This is not end-to-end encryption; the service can process your records to provide its functions. Sign-in credentials use the device’s secure credential storage. A local copy of records and pending changes remains in app storage for offline use and is not separately encrypted by Hourpip. Protect your device with its lock and security updates. Exported or shared files may remain outside the app. No system can guarantee absolute security.

8. Retention and deletion

Account records are kept while your account is active so that you can retrieve and synchronize them. A profile photo is kept until you replace or remove it, or delete your account. Temporary account exports expire after 24 hours and are then queued for cleanup.

After a verified account-deletion request, access is revoked immediately and server account data, including exports and your profile photo, is scheduled for permanent removal within 30 days. Encrypted database backups are deleted automatically 30 days after they are made, so copies of a deleted account in backups expire within 30 days. You delete your account in the app, in Settings → Your data → Delete account; section 9 explains the other ways to request deletion.

Routine maintenance removes expired sign-in challenges after about one day and mutation receipts, request-replay and audit records after 30 days. Older synchronization history and deleted-record markers are cleaned up after 180 days, while current records remain available. These periods depend on cleanup jobs completing; copies you exported or shared are not deleted by Hourpip. Provider logs and support correspondence may have separate retention periods; contact us for details. Uninstalling the app does not delete your account, and we cannot promise that it removes these copies.

9. Your choices and privacy rights

You can review and correct your records in the app, export account data in Settings → Your data, change reminder and notification-detail settings, and withdraw notification permission in your device settings. Delete your account in the app, in Settings → Your data → Delete account, to stop account processing. If you no longer have the app, request deletion at api.hourpip.com/delete-account or by writing to [email protected]; write to us as well if you cannot sign in.

You may ask [email protected] for access, correction, deletion, information about a disclosure, or help withdrawing consent. We may verify your identity before acting and explain any legal limitation on a request. We answer written requests within 30 days. Withdrawing information needed to run an account may prevent us from providing it. You may also contact the Office of the Privacy Commissioner of Canada, the Commission d’accès à l’information du Québec or the privacy authority with jurisdiction over your situation.

10. Young people

Hourpip is intended for students who can understand how their information is used. It is not designed for children under 13. If you believe a child has provided personal information without appropriate permission, contact us so we can review the situation and remove information where appropriate. A parent or guardian can help a young person understand these choices.

11. Policy changes

We update the date when this policy changes. Before introducing a new purpose or disclosure that requires your consent, we must explain the change and obtain the consent required by applicable law. Reading this policy or accepting the Terms of use does not waive your privacy rights.

12. Contact and complaints

Send privacy questions, requests or complaints to [email protected]. Tell us enough to identify the concern, but do not email a study permit, UCI, SIN or bank information. Our website is hourpip.com.

Under Québec’s privacy law, Les Entreprises Aukazi Inc. has a person in charge of the protection of personal information, who can be reached at the address below. If you are not satisfied with our answer, you may contact a privacy authority named in section 9.