Privacy Policy

The short version

Honest Days stores the time entries, expenses, clients, and invoices you enter, so that it can show them back to you and turn them into invoices. Nobody but you can read them. We do not sell them, and we do not use them to train anything.

Who we are

Honest Days is provided by BioRust Studios, LLC, 3038 Aventino Ln, Tavares, FL 32778, United States. For anything in this policy, write to bioruststudios+honestdays@gmail.com.

What we collect

Account information

Your email address and display name, from the sign-in method you choose (email and password, Google, or Apple). Authentication is handled by Firebase Authentication; we never see or store your password.

The data you enter

Everything you record in the app: organizations, clients and their contact details, projects, task types and rates, time entries, expenses, discounts, invoices, and payments. You control all of it. Some of it — a client's name and address — is information about other people that you have chosen to store; you are responsible for having a basis to do so.

Subscription status

Whether your subscription is active, when it renews, and which store it came from. Payment card details are never sent to us: purchases are processed by Google Play, or by Apple on iOS, and we receive only the entitlement result.

Operational logs

Server logs recording that a request happened — the endpoint, a timestamp, an error if one occurred, and the IP address of requests to public invoice links. These are used to keep the service working and to investigate abuse. They are not used to build a profile of you.

What we do not collect

• No advertising identifiers, and no third-party advertising or analytics trackers, in the app or on this website.
• No location data.
• No access to your device's contacts, photos, or files beyond what you explicitly attach.

This website loads nothing from a third party — no font service, no tag manager, no embedded video. Visiting it tells no one but us that you did.

Who can see your data

Your data is readable only by your own account. This is enforced at the database level: every read is checked against the account that owns the organization, and no client application can write to the database directly — every change goes through a server function that verifies who you are first.

The exception you control: an invoice you share creates a link that anyone holding it can open. The link contains a long random token, is excluded from search engines, and shows only what appears on the invoice itself — never your other clients, your other invoices, or your account details.

Where your data lives

On Google Cloud infrastructure in the United States (Firestore in the nam5 multi-region, Cloud Functions in us-central1). Data is encrypted in transit and at rest by the platform. If you are outside the United States, using the service means your data is stored there.

Sub-processors

We rely on these services, and no others, to run Honest Days:

• Google Firebase / Google Cloud — hosting, database, authentication, file storage, and this website.
• Google Play — subscription billing and purchase verification on Android. Apple does the same on iOS.

How long we keep it

For as long as your account exists. Financial records are kept rather than quietly removed, because you are likely to need them: archiving a client hides it from the app without deleting the invoices underneath.

Deleting your account

You can delete your account from within the app. This is a real deletion, not a deactivation: every organization you own, and every client, project, time entry, expense, discount, invoice, payment, and generated PDF beneath it, is removed, followed by your sign-in account itself. Most accounts are gone before the confirmation finishes; a very large one is completed in the background, usually within minutes.

It cannot be undone, and we cannot recover it for you. Save the PDFs of anything you want to keep first. Deleted data may persist in encrypted infrastructure backups for a short period before those backups rotate.

Step-by-step instructions, and what to do if you can no longer sign in, are on the account deletion page.

Your rights

Depending on where you live, you may have the right to access, correct, export, or delete your personal data, and to object to certain processing. The app gives you all of these directly: your data is visible and editable in the app, invoices export as PDFs, and account deletion is self-service. For anything the app does not cover, contact us.

Children

Honest Days is a tool for running a business and is not directed at children under 13. We do not knowingly collect data from them.

Changes

If this policy changes in a way that materially affects you, we will say so in the app before the change takes effect, rather than silently updating the date at the top.

Contact

BioRust Studios, LLC
3038 Aventino Ln
Tavares, FL 32778
bioruststudios+honestdays@gmail.com