Privacy Policy

What we collect

Only what running the service requires:

• Account data: your name, email address, and a password stored as an argon2 hash that cannot be turned back into your password. If you sign in with Google, we receive only your name, email address and picture from Google.
• Work content: the boards, tasks, comments, updates, files you upload and team chat. This content belongs to the organization you work in, and its authorized members can see it according to their permissions.
• Technical data: IP address and browser or device type, kept in sign-in and security logs to protect your account.
• A push token (FCM) if you enable notifications, used only to deliver task alerts to your device.
• Aggregate usage events (for example: a board was created) so we can see which features are used and improve them.

We do not collect location data or your contacts, and we do not read your files for any purpose other than showing them to you and your team.

Android permissions

• Camera and photo library: requested only at the moment you choose to attach a photo to a task or message. There is no background access.
• Files: to pick a file you upload yourself.
• Notifications: to alert you about tasks assigned to you and updates on them.
• Internet: to reach our servers.

How we use it

To run the service: show your boards, deliver your notifications, protect your account, and answer you when you contact support. We do not sell your data, and we do not use your work content for advertising.

Who we share it with

• Members of your organization, according to each person’s permissions.
• Hostinger — the hosting provider our servers and database run on.
• Google Firebase — to deliver push notifications to your device, if you enable them.
• Google — if you choose to sign in with a Google account.
• Competent authorities, where the law requires it.

No other third party receives your data.

Retention

We keep your account data for as long as the account exists. Security logs are kept for up to 12 months. On deletion, the next section applies.

Deleting your account

You can delete your account yourself from inside the app: More → Settings → Delete account. Or from the web, at enworkly.com/delete-account.

Permanently deleted: your login and password, your registered push devices, your notifications, the messages you wrote in chat, your assistant conversations, and your time entries.

Kept: the boards and tasks you worked on, because they belong to the organization and deleting them would erase your colleagues’ work — but your name is unhooked from them, so they are no longer attributed to you. If you are the last member of an organization, that organization and all its content are deleted with you.

If you own an organization that still has other members, you must transfer ownership before deleting, so the whole team’s work is not lost.

Your rights

You can request a copy of your data, its correction, its deletion, or object to its processing. Write to us and we will act within 30 days.

Children

The service is made for the workplace and is not directed at anyone under 16.

Changes to this policy

If this policy changes materially, we will tell you in the app or by email before the change takes effect.

Contact

For any question or request about your privacy: support@enworkly.com