Worky, Inc. ("Worky", "we", "us") provides Crew Hub at useworky.com/crewhub, a workspace used by employees and crew members of businesses that use Worky (each an "Employer"). This policy explains what information we collect from crew users, how we use it, and the choices you have. For our general product policy, see Worky's Privacy Policy.

1. Who controls your data

Your Employer is the controller of the data you create or submit through Crew Hub (jobs, time entries, photos, notes). Worky processes that data on the Employer's behalf to provide the Service. Direct access, deletion, or correction requests should generally go to your Employer first; you may also contact us at privacy@useworky.com.

2. Information we collect

Account information

Your Employer adds you to Crew Hub with your name, phone number, email, position, and role. We use your phone number to send a one-time sign-in code (OTP) by SMS.

Authentication data

When you sign in, we generate a session token stored in a secure cookie (and mirrored in your device's local storage on iOS to survive app restarts). We log the timestamp and the IP address of sign-in attempts for security purposes.

Job and time data

Jobs assigned to you, schedules, clock-in / clock-out events, hours, breaks, photos you upload, notes, and job completion details.

Location data

When the location feature is enabled by your Employer, Crew Hub collects your device's GPS location while you are clocked in to a job, to verify on-site presence and to power the live map your Employer sees. Location is not collected when you are clocked out, when the app is closed, or when location permission is denied. You can revoke location permission at any time from your device settings; some features (live map, geofenced clock-in) will then be unavailable.

Device and usage data

Logs, IP address, browser, device type, app version, and pages viewed for security, debugging, and analytics.

Push notifications

If you allow push notifications, we register a device token with Firebase Cloud Messaging (Android) or Apple Push Notification service (iOS) to send job assignments, schedule changes, and reminders.

3. How we use information

Authenticate you and keep your session secure.
Show your schedule, jobs, hours, and routes.
Record clock-in / clock-out events and report hours to your Employer.
Verify on-site presence and power the live map for your Employer.
Send transactional SMS (sign-in codes) and push notifications.
Protect against fraud and abuse.
Comply with legal obligations.

4. Sharing

We share information only with:

Your Employer and users they authorize within their Worky account.
Sub-processors that operate the Service: Supabase (database / auth), Cloudflare (hosting / edge), Twilio (SMS), Resend (email), Firebase / APNs (push), Google Maps (maps and directions), Stripe (payroll-related payments where applicable).
Authorities when required by law.
An acquirer in the event of a merger or acquisition, subject to this policy.

We do not sell personal information and we do not use crew data for advertising.

5. Data retention

Time entries, job records, and location history are retained for as long as your Employer's account is active, or as required by labor and tax laws. Sign-in codes expire within minutes. Session tokens expire after 7 days of inactivity. When your Employer removes you from their account, your personal contact data is removed within 30 days, except where retention is required by law.

6. Security

All traffic is encrypted with TLS. Data at rest is encrypted. Access to production systems is restricted and audited. Sign-in is by one-time code; we never store your password.

7. Your rights

Depending on your jurisdiction (GDPR, CCPA, etc.) you may request access, correction, deletion, portability, or restriction of your personal data. Because your Employer is the controller of most Crew Hub data, please contact them first. You can also email privacy@useworky.com and we will route your request appropriately.

8. Children

Crew Hub is not directed to children under 16 and is intended for adult workers.

9. International transfers

Worky is operated from the United States. By using Crew Hub you consent to the transfer of your information to the United States and other countries where our sub-processors operate.

10. Changes

We may update this policy. Material changes will be notified by email, SMS, or in-product notice at least 7 days before taking effect.

11. Contact

Worky, Inc.
Email: privacy@useworky.com

Crew Hub Privacy Policy