Counted — time & pay tracker for hourly and shift workers · Counted App LLC
Effective date: September 16, 2026Counted is made by Counted App LLC, a California limited liability company. We call ourselves Counted, we, or us. This Policy explains what we collect when you use the Counted mobile app or visit countedapp.com, what we do with it, who else sees it, how long we keep it, and what you can do about any of it. The app and the website together are the Service.
This summary is here because you should not have to read the whole Policy to learn the important things. The rest of the Policy is the part that governs, and it says the same things at greater length.
1.1 The app and the website. This Policy covers the Counted mobile app on iPhone and Android, and it covers countedapp.com, including anything you send us from it. If we ever add another way to reach Counted, this Policy will cover that too, and we will say so.
1.2 Where we offer Counted. We offer Counted in the United States. If we ever offer it elsewhere, the privacy laws of that place will apply as well and we will update this Policy before we do.
1.3 Where it does not reach. It does not cover Apple, Google, or any other company's own handling of your information under their own policies, and it does not cover a website we link to. Those are theirs and they are governed by their terms.
1.4 Our Terms. This Policy is part of our Terms of Use.
Everything below comes from you, from your device with your permission, or from Apple and Google in the case of your subscription status. We do not buy information about you, and we do not gather it from anywhere else.
| What we collect | What that means in Counted | Service providers who receive it | How long we keep it |
|---|---|---|---|
| Identifiers | Your email address, your account identifier, and the identifier the app uses for your installation. | Supabase. Resend, only to send you the confirmation and password-reset emails for your own account. | While your account is active, and for up to thirty days after you ask us to close it. |
| Your work and pay records (professional and employment-related information) | The heart of Counted. Your hours and shifts, pay rate, overtime and premium rules, breaks, holidays, time-off balances, tips, expenses, employer or contract details, and your own notes. | Supabase, for backup and sync only | On your device until you delete it. In your cloud backup while your subscription is active and for ninety days after it ends, or for up to thirty days after you ask us to close your account. |
| Your pay figures (financial information) | Your pay rate and the pay figures Counted estimates from it. This is your own wage information about yourself. It is not payment card information, which we never receive at all. | Supabase, for backup and sync only | The same as your work records above. |
| Your household money (financial information) | If you use the Budget pack, what you type there: your rent and other bills, one-off spending, money you set aside, and the take-home pay you enter yourself. This is your household money rather than your work pay. | Supabase, for backup and sync only | On your device until you delete it. In your cloud backup while your subscription is active and for ninety days after it ends, or for up to thirty days after you ask us to close your account. |
| Photos and files you add (visual and electronic information) | Receipt photos and the paystubs, schedules and other documents you choose to save. None of them is part of your cloud backup. A receipt photo goes to AWS Textract to be read when you scan one, and a screenshot you attach to a problem report reaches us. Nothing else here leaves your device. What is backed up is the description of a saved document, which the next row describes. | AWS Textract, only when you scan a receipt and only to read the text on it. | On your device until you delete it. A screenshot you send us is covered by the problem report row below. |
| What you name your saved documents | For each document in your vault: what kind it is, the title you gave it, its date, the employer you filed it under, and for a PDF the file name it already had. The document itself stays on your device. The description of it does not. | Supabase, for backup and sync only | On your device until you delete it. In your cloud backup while your subscription is active and for ninety days after it ends, or for up to thirty days after you ask us to close your account. |
| Location information | If you use mileage in Auto mode and grant the permission, the position your phone captures when you mark the start and the end of a drive. Address mode uses the addresses you type and no permission at all. | Mapbox | We do not store your device location. We store the distance and the address you typed, with your work records. |
| A payroll contact you save | The name and work email of the person you send a pay reconciliation letter to, which you type in yourself. | Supabase, for backup and sync only | With your records, until you delete the contact or your account. |
| Your date of birth, in part | Only if you use the Union pack and enter the day and month of your birthday so that Counted can count it as a contract holiday. We do not ask for the year. If you add your birthday to a year of holidays, it is stored in that list as a full date. | Supabase, for backup and sync only | On your device until you delete it. In your cloud backup while your subscription is active and for ninety days after it ends, or for up to thirty days after you ask us to close your account. |
| Your name and where you work | The name you enter when you set up a profile, and the employer you name on it. You can keep up to ten profiles, each with its own name and employer. | Supabase, for backup and sync only | On your device until you delete it. In your cloud backup while your subscription is active and for ninety days after it ends, or for up to thirty days after you ask us to close your account. |
| Purchase information (commercial information) | Which subscription you hold and whether it is active. Apple and Google tell us this. You do not. | None | Three years from the date you agreed to the subscription, or one year after it ends, whichever is longer. California law requires us to keep this record. |
| What you tell us when you report a problem | Your account email address, your account identifier, what you write, the version of Counted you are running, and what your browser reports about itself. A screenshot if you attach one. | Supabase, which hosts our support records | Ninety days after we close the matter, the message and any screenshot both. Sooner if you ask. |
| Diagnostics (network activity information) | Anonymous crash reports and usage events, tied to a random per-installation identifier and never to you. This is built but switched off, and we are not collecting it today. | None today | Not applicable today. If we turn it on, we will update this Policy first, and you will be able to switch it off. |
2.1 If you write to us. The website has no form on it and collects nothing by itself. The buttons that offer to notify you open your own mail app with a message addressed to us, so nothing reaches us unless you send it. The same is true when you write to us for help under Section 8.6 or to make a request under Section 9. What we receive is whatever your message contains, which will include the address you send it from. We use it to answer you and for nothing else, we keep it with our support records, and we delete it on the schedule in the table above. If you write to ask us to tell you when Counted launches, we use your address for that alone and delete it once we have.
2.2 The payroll contact you save. If you use pay reconciliation, you can save the name and work email of the person you send your letter to, so that you do not have to type them again. Counted stores those details with your records and backs them up the same way. We use them only to address the letter you write and to show them to you again for reuse. We do not contact that person, and we do not market to them.
2.3 When you report a problem. If you use Report a problem while signed in, we receive the account email address you signed in with, your account identifier, what you write, the version of Counted you are running, and the technical description your browser sends about itself. If you attach a screenshot, that image is stored separately in a private area that you and our support staff can open and nobody else. You cannot remove it from inside the app, so if you want it gone before then, write to us. A screenshot is a picture of whatever was on your screen, so it will often show your hours and your pay. Choose what you send with that in mind. We use all of it only to answer you and to fix what you reported.
2.4 What we do not collect. The only names and personal details Counted holds are the ones you type in yourself, which are described in Sections 2.2 and 2.3. We do not collect your payment card, your bank details, your Social Security number, your immigration status, your health information, or your device contacts. We do not collect your location in the background, ever. Your device position is used only in the Auto mode of the mileage feature, only when you mark the start or the end of a drive, and only if you grant the permission. Address mode uses no permission and no device position, because you type the addresses yourself.
2.5 The camera. Counted asks for the camera only when you choose to photograph a receipt or a document you want to save, and only at the moment you do it. It is never used in the background and it is never used on any other screen. Before a receipt image leaves your device to be read, Counted tells you what is about to happen and asks you first, and you can always enter a receipt by hand instead.
3.1 What is sensitive here. California law treats certain information as sensitive and defines the term specifically. Three kinds of it can pass through Counted. Your account login credentials, meaning your email address together with your password, are sensitive. Your precise location is sensitive, and we only ever receive it if you turn on mileage and grant the permission. And if you record union or collective-bargaining details, union membership is sensitive as well.
3.2 What we do with it. We use each of these only to do the thing you asked Counted to do. Your credentials sign you in. Your location produces a driving distance and is not kept. Your union or contract details apply the right pay rules to your own hours.
3.3 Why there is no separate control for it. California gives people a right to limit how a business uses sensitive information, and the right exists for businesses that use it for something beyond delivering the thing the person asked for. That does not describe us, for two independent reasons. The first is that we use each of these only to perform the feature you turned on, which is exactly the use an ordinary person expects when they turn it on. California's own rules give the example of an app using someone's precise location to give them directions, which is our mileage feature almost word for word. The second is that we do not use or disclose any of it to work out anything about you as a person. We do not build a profile of you and we do not infer your characteristics. Either reason alone would be enough, so we do not offer a separate option to limit our use of sensitive information, because there is no other use to limit. If that ever changes, this Policy will change first.
Every use below is either something you asked for or something running the Service requires. There is no other category.
Six companies are involved in running Counted. Three of them act on our instructions, receive only what their job needs, and may not use your information for their own purposes. Each keeps its own operational record of the work it did for us, which is ordinary and is not a use of your information for its own ends. Mapbox is different, and so are Apple and Google. Sections 5.3 and 5.5 explain how. This list names the companies we engage directly, not the infrastructure providers they use to run their own services. We do not pay any of them for your information, and none of them pays us for it.
5.1 Supabase. Supabase provides account sign-in and the cloud backup and sync of your records. It holds your email address, your account identifier, and the work records you have backed up. Your data is encrypted while it travels and while it sits there, and access is scoped so that your account reaches only your own data.
5.2 AWS Textract. When you attach a receipt photo to an expense that has no amount yet, Counted sends the image to Amazon's Textract service to read the text on it, so that Counted can fill in the merchant, the total, the date and the line items instead of making you type them. This happens as soon as you attach the photo, and the date it reads replaces the one you picked, so check both. We have opted out of Amazon's use of our content to develop or improve its services, using an organization-wide opt-out policy applied across our whole Amazon account, which means Textract reads the image, returns the text, and does not keep it for its own ends. You never have to use this. You can always enter a receipt by hand.
5.3 Mapbox. When you ask for a driving distance, Counted sends Mapbox what it needs to measure it. In Address mode that is the addresses you typed. In Auto mode it is the position your phone captured when you marked the start and the end of the drive. We keep the distance and the labels you typed, and never the coordinates or your device location, but Mapbox receives them in order to do the measurement. Mapbox is not in the same position as the three companies above. It decides for itself how to use what it receives, and its own policy says that includes improving its mapping products. What it does not do, under the terms that apply to us, is sell personal data, build a profile of you, or track you across billing cycles.
5.4 Resend. Resend delivers the small number of emails Counted has to send you about your own account: the message that confirms your address when you sign up, and the link that lets you set a new password. It receives your email address and what those messages say. It does not receive your hours, your pay, your records, or your photos. It acts on our instructions and is not permitted to use your address for its own purposes. We send no marketing through it. We have switched off the link tracking it offers, so opening one of these emails tells us nothing about you.
5.5 Apple and Google. Apple and Google sell every subscription and process every payment. They receive your payment details directly, and we never do. What they send us is confirmation of which subscription you hold and whether it is active.
5.6 When the law requires it. We will disclose information if the law requires us to, or where we need to in order to protect our legal rights, the Service, or someone's safety. If we ever receive a demand for your information, we will tell you unless the law forbids it.
5.7 If Counted is ever sold. If we are acquired or merge with another company, your information may transfer as part of that. The Terms of Use go with it, including the promises in Section 7 of the Terms, and we will tell you when your information moves to anyone new.
5.8 When you share something yourself. Counted lets you send things you have recorded to other people. You can pass your union contract terms to a coworker as a code their phone reads, and you can send a summary card of your hours and pay from your phone to anyone you choose. Your device builds each of these and hands it straight to the other person or to your phone’s own sharing menu. Nothing in that exchange reaches us and we never hold a copy. Two things are worth knowing before you send. The card always carries your name and your employer, and prints the notes for the period you picked, and there is no way to leave that line off. The contract code carries your union or local, your employer, your contract dates and your wage scale, and it is not encrypted, so anyone holding the image can read it. What you send is your own record rather than a document from your employer or your union, whoever receives it can change it, and once it has left your device you cannot take it back.
6.1 On your device first. Counted keeps your records on your device. The cloud copy is a backup of that, not the other way around.
6.2 How it is protected. Information travels over encrypted connections and is encrypted where it is stored. Access is scoped so that an account can reach only its own data. No system is perfectly secure. If something happens that affects your information, we will tell you promptly.
6.3 If your subscription ends. Your records stay on your device, readable and exportable, at no charge, and we will not delete, lock, or withhold them because you stopped paying. We keep your cloud backup for ninety days after the subscription ends. Before we delete the cloud copy we will send you a notice with a one-tap export so that you can take your own copy first. After the ninety days we may delete the cloud copy, which does not touch the copy on your device. Section 7 of the Terms of Use sets this out in full, including the things we cannot promise around.
7.1 We do not sell your information. We have never sold personal information and we do not. Selling has a specific meaning under California law, which reaches disclosures made for money or for other valuable consideration, and we do not do it in that sense or in any ordinary sense either.
7.2 We do not share it for advertising. We do not share your personal information for cross-context behavioral advertising, which is the other thing California law defines and regulates. We run no advertising in Counted, we use no advertising software development kits, and we have no advertising partners.
7.3 Nobody tracks you through us. No other party collects personal information about your activities over time and across different websites or apps when you use Counted. There is nothing embedded in the app or the site that would let them.
7.4 Do Not Track. Some browsers send a Do Not Track signal. We do not respond to it, because we do not do the tracking it is meant to stop. There is nothing for the signal to switch off.
7.5 We do not use your records to train anything. We do not use the information you enter to develop, train, or improve any machine learning or artificial intelligence system of our own, and we do not give it to anyone else for that purpose. The companies that hold your records for us are limited by their agreements with us to doing the work we ask of them and may not use your information for their own ends, and Section 5.2 describes the further control we have put in place with Amazon so that receipt images are not used to develop or improve its services. Mapbox is not in that position, and Section 5.3 describes what it receives and what it may do with it.
8.1 Look at it and change it. Everything Counted holds about your work is visible in the app, and you can edit or delete any of it yourself, at any time, without asking us. If you need to correct your account email or anything else that will not change from inside the app, write to us and we will fix it.
8.2 Take it with you. You can export everything to CSV or PDF at any time, at no charge, whether or not your subscription is active.
8.3 Delete it. You can delete individual entries in the app at any time. To close your account and delete what we hold, use the account deletion option inside the app, which is the quickest way and does not need us. You can also do it from countedapp.com without installing anything, or write to support@countedapp.com if you would rather ask a person. Closing your account also deletes any problem reports you sent from inside the app, and the screenshots attached to them. If you have written to support by email instead, there is no account behind that message, so ask us and we will delete it. However you ask, we delete rather than deactivate, we finish within thirty days, and we confirm when it is done. Anything the law requires us to keep, such as the subscription consent record in Section 2, we keep and nothing else.
8.4 Permissions. Camera and location are used only for features you choose to use, and your device settings control both. Turning either off does not affect the rest of Counted.
8.5 Diagnostics. Counted collects no diagnostics automatically. The feature that would do so is built and switched off, and while it is off nothing is written from it. What is written is narrower, and it is not automatic. When you report a problem, the report carries the version of Counted you are running and what your browser reports about itself, and those are stored with your report in our support records, which Section 2.3 describes, because we cannot fix what you report without knowing what you were running. Your choice of the two diagnostics settings is saved with your other settings so that it is ready if we ever switch the feature on. If we do, we will update this Policy first, the reports will be anonymous, and you will be able to switch them off in Settings under Privacy.
8.6 How to reach us about any of it. Write to support@countedapp.com. We will not ask you to create an account you do not have or to explain why you are asking.
9.1 What this section is. California gives residents a set of privacy rights, and the largest of those laws does not currently apply to a company our size. We have written this Policy to that standard anyway, because it is the right standard and because we would rather build it now than bolt it on later. What follows is what we do, and we hold ourselves to it whether or not a statute makes us.
9.2 What you can ask for. You can ask us what personal information we have collected about you, where it came from, why we collected it, and who received it. You can ask us to correct it. You can ask us to delete it. Section 2 answers most of this in advance, and Section 8 tells you how to do the rest yourself, in the app, without asking anyone.
9.3 Selling, sharing, and sensitive information. We do not sell your personal information and we do not share it for cross-context behavioral advertising, so there is nothing for you to opt out of. Section 3 explains the sensitive information that passes through Counted and why we do not offer a separate limit option for it.
9.4 We will not treat you differently for asking. Exercising any of these rights costs you nothing, changes nothing about your subscription, and will never result in a worse Service or a worse price.
9.5 How to make a request. Write to support@countedapp.com from the email address on your account, which is how we will know it is you. If you cannot use that address, tell us and we will find another way to confirm it. You may use an authorized agent, and we will ask for proof that you authorized them.
Counted is for people who are at least 18 years old. It is not directed to anyone younger, and we do not knowingly collect information from anyone younger. If we learn that an account belongs to someone under 18, we will delete the account and the information in it. If you believe someone under 18 has given us information, write to support@countedapp.com and we will take care of it.
We will update this Policy when what we do changes, and we will update it before the change takes effect rather than after. When we do, we will post the new version at countedapp.com and in the app with a new effective date at the top. If the change is material, meaning it affects what we collect, what we do with it, or who receives it, we will tell you directly, either in the app or by email to the address on your account, at least thirty days before it takes effect. Every previous version stays available on request.
Counted App LLC
2108 N St, Ste N, Sacramento, CA 95816
support@countedapp.com