Honest Days
Privacy Policy
Last updated 1 August 2026.
Draft pending review. This policy describes what the software actually does, and it is accurate as written. It has not been reviewed by a lawyer, and it does not yet name a legal entity, a jurisdiction, or a data-protection contact. Have it reviewed before launch.
The short version
Honest Days stores the time entries, expenses, clients, and invoices you enter, so that it can show them back to you and turn them into invoices. Nobody but you can read them. We do not sell them, and we do not use them to train anything.
What we collect
Account information
Your email address and display name, from the sign-in method you choose (email and password, Google, or Apple). Authentication is handled by Firebase Authentication; we never see or store your password.
The data you enter
Everything you record in the app: organizations, clients and their contact details, projects, task types and rates, time entries, expenses, discounts, invoices, and payments. You control all of it. Some of it — a client's name and address — is information about other people that you have chosen to store; you are responsible for having a basis to do so.
Subscription status
Whether your subscription is active, when it renews, and which store it came from. Payment card details are never sent to us: purchases are processed by Stripe, Apple, or Google Play, and we receive only the entitlement result.
Operational logs
Server logs recording that a request happened — the endpoint, a timestamp, an error if one occurred, and the IP address of requests to public invoice links. These are used to keep the service working and to rate-limit abuse. They are not used to build a profile of you.
What we do not collect
- No advertising identifiers, and no third-party advertising or analytics trackers on this site.
- No location data.
- No access to your device's contacts, photos, or files beyond what you explicitly attach.
Who can see your data
Your data is readable only by your own account. This is enforced at the database level: every read is checked against the account that owns the organization, and no client application can write to the database directly — every change goes through a server function that verifies who you are first.
The exception you control: an invoice you mark public can be opened by anyone holding its share link. The link contains a long random token, is excluded from search engines, and shows only what appears on the invoice itself — never your other clients, your other invoices, or your account details. Setting an invoice back to private stops the link working immediately.
Where your data lives
On Google Cloud infrastructure in the United States (Firestore in the nam5
multi-region, Cloud Functions in us-central1). Data is encrypted in transit and
at rest by the platform. If you are outside the United States, using the service means your
data is stored there.
Sub-processors
We rely on these services, and no others, to run Honest Days:
- Google Firebase / Google Cloud — hosting, database, authentication, file storage.
- Stripe, Apple, Google Play — subscription billing, depending on where you subscribed.
- An email delivery provider — to send an invoice when you ask us to. The message includes the invoice, its PDF, and the recipient address you entered.
How long we keep it
For as long as your account exists. Financial records are kept rather than quietly removed, because you are likely to need them: archiving a client hides it from the app without deleting the invoices underneath.
Deleting your account
You can delete your account from within the app. This is a real deletion, not a deactivation: every organization you own, and every client, project, time entry, expense, discount, invoice, payment, and generated PDF beneath it, is removed, followed by your sign-in account itself. It runs in the background and typically finishes within minutes.
It cannot be undone, and we cannot recover it for you. Export or download anything you want to keep first. Deleted data may persist in encrypted infrastructure backups for a short period before those backups rotate.
Your rights
Depending on where you live, you may have the right to access, correct, export, or delete your personal data, and to object to certain processing. The app gives you all of these directly: your data is visible and editable in the app, invoices export as PDFs, and account deletion is self-service. For anything the app does not cover, contact us.
Children
Honest Days is a tool for running a business and is not directed at children under 13. We do not knowingly collect data from them.
Changes
If this policy changes in a way that materially affects you, we will say so in the app before the change takes effect, rather than silently updating the date at the top.