Privacy Policy

Last updated: August 13, 2026

This Privacy Policy explains how Workly LLC, a Wyoming limited liability company with its address at 1021 E Lincolnway, Suite #9696, Cheyenne, Wyoming 82001, United States ("Workly," "we," "us," or "our"), collects, uses, and shares information in connection with the Workly websites (including getworkly.io), the Workly web application, and the Workly mobile applications for iOS and Android (including the app published as "Workly Invoice Maker") (collectively, the "Service").

By using the Service, you acknowledge this Privacy Policy. Our Terms of Service also apply to your use of the Service.

1. Our Two Roles: Your Data vs. Your Customers' Data

Workly is a tool that professionals use to run their business, so we handle two different kinds of personal information, in two different roles:

• Account Data — Workly as controller. Information about you, the Workly user: your account, device, usage, payments, and communications with us. For this data, Workly decides how and why it is processed, and this Privacy Policy describes those practices in full.
• Client Data — Workly as processor / service provider. Information about your customers that you enter or upload into the Service — for example, their names, phone numbers, email and street addresses, appointment details, and invoice or estimate line items. For this data, you are the controller (or the equivalent role under your local law): you decide what to collect and how to use it. Workly processes Client Data only on your behalf and on your instructions, to provide the Service to you, and does not use it for advertising or sell it. Section 9 describes how we handle Client Data.

If you received an invoice or estimate from a business that uses Workly, or booked an appointment with one, that business is responsible for your personal information. Please direct privacy questions and requests to that business first; Section 9 explains more.

2. Information We Collect

2.1 Information you provide

• Account information: your name, email address, and password, or the identifiers provided when you sign in with Apple or Google. Sign in with Apple may provide a private relay email address instead of your real one, at your choice.
• Business profile: details you choose to add about your business, such as business name, logo, address, phone number, website, and tax or registration numbers to display on your documents.
• Content you create: invoices, estimates, customer records, appointments and schedule entries, notes, photos, attachments, and settings (this content includes Client Data — see Sections 1 and 9).
• Payment feature information: if you enable payment acceptance, Stripe collects identity and business verification information (such as legal name, date of birth, government ID details, tax ID, and bank account details) directly from you under Stripe's own privacy policy. Workly does not receive your full bank or ID details; we receive information such as your Stripe account status and capabilities, and transaction and payout metadata (amounts, dates, statuses, fees).
• Communications: the contents of messages you send us, such as support requests and feedback, and related contact details.
• Feedback you send us: when you rate a calculator or tool and choose to leave a comment, we receive the comment text and, if you choose to provide it, your email address so we can reply. Providing an email address is optional.

2.2 Information collected automatically

• Device and app information: device model, operating system and version, app version, language and region settings, and identifiers such as device identifiers, and — subject to your permission settings — advertising identifiers (IDFA on iOS, Google Advertising ID on Android).
• Usage and diagnostics: how you interact with the Service (screens viewed, features used, taps and similar events), performance data, and crash logs.
• Approximate location: we may infer your approximate location (such as country or region) from your IP address, for example to configure regional settings, pricing, and analytics.
• Precise location (optional): the mobile apps ask for permission to access your device's precise location for the Scheduling feature, to show your position together with upcoming visits on a map. If you decline or later revoke access in your device settings, the map still works — it just won't show your own position. We do not use your precise location for advertising and do not build a history of your movements.
• Web data: when you use getworkly.io or the web application, we collect log data (IP address, browser type, pages visited, referring pages, timestamps) and use cookies and similar technologies (see Section 6).

2.3 Information from other sources

• App stores and payment platforms: Apple, Google, and Stripe provide us with information about your purchases and subscription status (for example, that a subscription is active, in trial, renewed, or refunded). We do not receive your full payment card numbers.
• Sign-in providers: Apple and Google provide basic profile information when you use them to sign in.
• Attribution partners: our attribution and advertising partners (see Section 5) provide us with information about how you found the app, such as the ad campaign or channel that led to the install.

3. How We Use Information

We use Account Data to:

• Provide the Service: create and maintain your account; authenticate you; sync your data between your devices and the web app; generate, store, and transmit your documents; operate scheduling and maps; and provide customer support.
• Process payments: manage subscriptions and billing through Apple, Google, and Stripe; enable payment acceptance through Stripe Connect; detect and prevent fraud and abuse.
• Improve and develop the Service: understand how the Service is used, diagnose crashes and bugs, test features, and develop new functionality. For this purpose we use usage and diagnostics data, and we analyze information derived from content (such as document counts, invoice amounts, and payment patterns) in aggregated or de-identified form that does not identify you or your customers.
• Measure and run marketing: measure the performance of our advertising campaigns, attribute installs and purchases to marketing channels, and — where permitted — build audiences for our own marketing on advertising platforms. You can opt out of ad-related processing as described in Sections 7 and 8.
• Communicate with you: send transactional messages (such as receipts, renewal reminders, security alerts, and service announcements) and, where permitted by law, marketing communications about Workly, which you can opt out of at any time.
• Protect Workly and others: enforce our Terms of Service, secure the Service, prevent fraud and misuse, and establish, exercise, or defend legal claims.
• Comply with law: meet our legal, tax, accounting, and regulatory obligations and respond to lawful requests.

Legal bases (UK/EEA users). Where the UK GDPR or EU GDPR applies, we process Account Data: to perform our contract with you (providing the Service, billing, support); for our legitimate interests (securing and improving the Service, preventing fraud, measuring and marketing our own services) balanced against your rights; with your consent where required (for example, precise location access, the iOS App Tracking Transparency permission, non-essential cookies, and marketing emails), which you may withdraw at any time; and to comply with legal obligations.

4. How Long We Keep Information

• Account Data and content: kept while your account is active. If you delete your account, we delete or anonymize your Account Data and content within 90 days, except as noted below. Copies may persist in encrypted backups for a limited period before being purged on a rolling basis.
• Transaction and billing records: retained as required for tax, accounting, and audit purposes (typically up to 7 years).
• Analytics and diagnostics data: retained for up to 26 months, then deleted or aggregated.
• Support communications: retained for up to 24 months after the matter is closed.
• Legal holds: we may retain information longer where necessary to comply with law, resolve disputes, or enforce our agreements.

5. How We Share Information

We do not sell your personal information for money, and we do not share Client Data or the contents of your documents with advertisers. We share information as follows:

5.1 Service providers (subprocessors)

We use trusted third parties to operate the Service. They may process information only to provide their services to us. Our core providers include:

• Google LLC — Firebase (authentication, cloud database and storage hosted in the United States, Google Analytics for Firebase, Crashlytics crash reporting): Firebase privacy
• Stripe (payment processing for web subscriptions and for payments you accept from your customers): Stripe privacy
• RevenueCat, Inc. (subscription management and receipt validation): RevenueCat privacy
• Adapty Tech Inc. (subscription analytics and paywall management): Adapty privacy
• AppsFlyer Ltd. (mobile install and marketing attribution): AppsFlyer privacy
• Google Workspace (business email and support communications).

5.2 Advertising and measurement partners

To measure and improve our own marketing, we share limited data — such as advertising identifiers (where permitted by your settings), IP-derived approximate location, and app events like installs, trials, and purchases — with advertising platforms, including Meta (Facebook) via the Meta SDK and server-side APIs, and Google advertising services: Meta privacy, Google privacy. These partners may use this data as independent controllers under their own policies. This kind of disclosure may be considered "sharing" or a "sale" under some U.S. state laws — see Section 8.1 for how to opt out. We never share the contents of your invoices, estimates, or customer records with advertising partners.

5.3 Platforms you connect through

Apple and Google process data when you download the apps, sign in with their services, make in-app purchases, or use device features such as maps and notifications, under their own privacy policies.

5.4 Recipients you choose

When you send or share an invoice, estimate, payment link, or appointment through the Service, we transmit it to the recipients you designate.

5.5 Legal and safety

We may disclose information if we believe in good faith that it is required by law or legal process (such as a subpoena or court order), or that disclosure is necessary to protect the rights, property, or safety of Workly, our users, or others, to investigate fraud or security issues, or to respond to a lawful government request.

5.6 Business transfers

If Workly is involved in a merger, acquisition, financing, reorganization, or sale of all or part of its assets, information may be transferred as part of that transaction, subject to this Privacy Policy or an equivalent standard of protection.

5.7 With your consent

We share information for other purposes when you direct us to or otherwise consent.

6. Cookies and Similar Technologies (Web)

On getworkly.io and the web application we use cookies, local storage, and similar technologies to keep you signed in, remember preferences, measure site traffic, and (where you allow it) measure advertising. Where required by law, we ask for your consent before setting non-essential cookies, and you can change your choice at any time through the cookie settings on the site. You can also control cookies through your browser settings; blocking essential cookies may prevent parts of the Service from working. We honor Global Privacy Control (GPC) signals as an opt-out of "sale"/"sharing" where required by applicable law.

7. Your Choices

• Access, update, delete in-app: you can view and edit your business profile and content in the apps and web app, and you can delete your account (and the Account Data and content associated with it) in the app settings or by emailing [email protected].
• Marketing emails: use the unsubscribe link in any marketing email, or contact us. We will still send transactional messages about your account.
• Push notifications: control these in your device settings.
• Precise location: grant or revoke location access in your device settings at any time.
• Advertising identifiers: on iOS, we request permission through App Tracking Transparency before using the IDFA for cross-app measurement — declining means we do not access it; you can also change this in Settings → Privacy & Security → Tracking. On Android, you can delete or reset your Advertising ID and opt out of ads personalization in your device settings.
• Analytics: you can limit analytics-related processing through your device-level settings above; for the website, use the cookie settings.

8. Your Privacy Rights

Wherever you live, you may request access to, correction of, a copy of, or deletion of your Account Data by emailing [email protected] or using the in-app tools. We may need to verify your identity (and, for agent requests, the agent's authority) before acting, and we will respond within the time required by applicable law. We will not discriminate against you for exercising your rights.

8.1 United States state privacy rights (including California)

If you live in California or another U.S. state with a comprehensive privacy law, you may have the rights to: know/access the personal information we have collected about you; correct inaccurate information; delete your information; obtain a portable copy; and opt out of "sales," "sharing," and targeted advertising. We do not use or disclose sensitive personal information for purposes that require a "limit use" right.

In the last 12 months we have collected the categories of personal information described in Section 2 (identifiers; commercial information such as subscription and transaction records; internet and app activity; approximate and — with permission — precise geolocation; professional information you add to your business profile; and inferences for analytics), from the sources described in Section 2, for the purposes described in Section 3, and disclosed them as described in Section 5. The only category "sold" or "shared" (as those terms are defined in state law) is identifiers and internet activity disclosed to advertising/measurement partners (Section 5.2).

To opt out of sale/sharing/targeted advertising: decline the App Tracking Transparency prompt on iOS (or disable it in iOS Settings), opt out of ads personalization / reset your Advertising ID on Android, use the cookie settings or a GPC-enabled browser on our websites, or email [email protected] with "Opt out of sale/sharing" and we will apply it to the data linked to your account. We do not knowingly sell or share the personal information of anyone under 16. If we deny a rights request, you may appeal by replying to our decision; California residents may also contact the California Privacy Protection Agency or Attorney General.

8.2 Canada

We collect, use, and disclose personal information with consent or as otherwise permitted by PIPEDA and applicable provincial laws. You may withdraw consent (subject to legal or contractual restrictions), and you may request access to or correction of your personal information, by contacting [email protected]. You may also complain to the Office of the Privacy Commissioner of Canada.

8.3 United Kingdom and European Economic Area

Where the UK GDPR or EU GDPR applies, you have the rights to access, rectify, and erase your personal data; to restrict or object to processing (including processing based on legitimate interests, and direct marketing at any time); to data portability; and to withdraw consent at any time without affecting prior processing. The legal bases we rely on are described in Section 3. To exercise your rights, contact [email protected]. You also have the right to lodge a complaint with your supervisory authority — in the UK, the Information Commissioner's Office (ico.org.uk); in the EEA, your local data protection authority.

8.4 Australia

We handle personal information consistently with the Australian Privacy Principles under the Privacy Act 1988 (Cth). You may request access to or correction of your personal information by contacting [email protected]. If you are not satisfied with our response, you may complain to the Office of the Australian Information Commissioner (oaic.gov.au).

8.5 New Zealand

We handle personal information consistently with the Privacy Act 2020. You may request access to or correction of your personal information by contacting [email protected], and you may complain to the Office of the Privacy Commissioner (privacy.org.nz).

9. Client Data — Information About Your Customers

When you enter information about your customers into Workly, we process it solely as your service provider/processor:

• On your instructions only. We use Client Data only to provide the Service to you — storing it, syncing it across your devices, generating your documents, and sending them to the recipients you choose. We do not use Client Data for advertising, do not sell it, and do not disclose it except to the subprocessors listed in Section 5.1 (as needed to host and operate the Service), to recipients you designate, or as required by law. The only other use we make of it is in aggregated or de-identified form that does not identify you or your customers, as described in Section 3.
• Your responsibilities. As the party who decides what Client Data to collect and how to use it, you are responsible for complying with the privacy laws that apply to you — including telling your customers how their data is used, having a lawful basis where required, and honoring their requests.
• Requests from your customers. If your customer contacts us about their data, we will refer them to you and reasonably assist you in responding through the Service's features (viewing, correcting, exporting, and deleting records). If you delete a customer record or your account, the corresponding Client Data is deleted from our production systems as described in Section 4.
• Payments by your customers. If your customer pays an invoice through a payment feature, their payment details are collected and processed by Stripe as described in Stripe's privacy policy; Workly receives transaction metadata but not full card numbers.
• Data processing terms. Where the UK GDPR, EU GDPR, or similar laws apply, our Data Processing Agreement, available at getworkly.io/dpa, is incorporated into our Terms of Service and governs how we process Client Data on your behalf. Questions: [email protected].

10. Security

We use technical and organizational safeguards designed to protect information, including encryption in transit, access controls, and reputable cloud infrastructure. Internal access to the contents of your account (including Client Data) is limited to what is necessary to provide support you request, operate, maintain, and secure the Service, investigate abuse, or comply with law. No method of transmission or storage is completely secure, so we cannot guarantee absolute security. Use a strong, unique password and protect access to your devices; contact us immediately at [email protected] if you suspect unauthorized access to your account.

11. International Data Transfers

We are based in the United States, and the Service is hosted on infrastructure located in the United States (including Firebase, hosted in the US). If you use the Service from outside the United States, your information is transferred to and processed in the United States and in other countries where we or our service providers operate, which may not provide the same level of data protection as your home jurisdiction. Where required for transfers from the UK, EEA, or Switzerland, we rely on appropriate safeguards, such as the applicable standard contractual clauses (and the UK Addendum or International Data Transfer Agreement) with our service providers, and transfers to providers certified under the EU-U.S. Data Privacy Framework and its UK and Swiss extensions.

12. Children

The Service is a business tool that is not directed to children, and our Terms of Service require users to be at least 18. We do not knowingly collect personal information from children under 13 (or the higher minimum age required in your jurisdiction). If you believe a child has provided us personal information, contact [email protected] and we will delete it.

13. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. If we make material changes, we will notify you — for example, in the apps, on getworkly.io, or by email — before the changes take effect, and we will update the "Last updated" date above. Your continued use of the Service after the updated policy takes effect means the updated policy applies to you.

14. Contact Us

Workly LLC
1021 E Lincolnway, Suite #9696
Cheyenne, Wyoming 82001, United States

Privacy requests: [email protected]
General support: [email protected]
Legal: [email protected]
Website: https://getworkly.io