Privacy Policy

Effective 2026-09-27. This policy covers the HoursOwed app, the time card calculator and this website, run by Luna Kuzniatsova (trading as Flow Lab) (“we”), who decides how the data described here is used. Contact: trading.flowlab@gmail.com.

The short version

Your shifts, hours and pay rates stay on your device. We do not have a server that receives them, we do not use advertising, and we do not set cookies. We count visits to this website, and a few anonymous steps in the web app, with GoatCounter, which uses no cookies and does not store IP addresses.

What stays on your device

Everything you enter in the app or the calculator — times, breaks, hourly rate, settings — is saved in your browser’s local storage on your device (the app uses keys starting with hoursowed., each calculator its own key). It is not sent to us. If you clear your browser data or remove the app, it is gone. A backup is a file you save yourself from the app; we never receive a copy.

Payments and your subscription

HoursOwed Pro is sold through Gumroad, which acts as the merchant of record. When you pay, Gumroad collects your email, name, country and payment details and processes them under its own privacy policy. We can see your order in our Gumroad account (email, name, country, plan, status) to give support and handle refunds. We do not see your full card number.

Gumroad gives you a license key on the receipt page and by email. To unlock Pro, the app sends the key and our product ID to Gumroad’s license service (api.gumroad.com); the first time on a device it also asks Gumroad to count one use of the key. Gumroad replies with the purchase status, plan, the buyer’s email and a link to manage the subscription, and the app keeps these on your device only. Like any server, Gumroad also sees your IP address. Your shifts are never part of these requests.

Website hosting

This website is hosted on GitHub Pages. Like any web server, GitHub may log technical data such as your IP address when you open a page; see the GitHub Privacy Statement. We do not receive these logs.

Visit statistics (this website)

To see which pages are useful, this website uses GoatCounter. For each page view it records the page address, the site you came from, browser and operating system, screen width, country, language and a random visit ID. Your country is worked out from your IP address, but the IP address is not stored; to tell visits apart, GoatCounter keeps it together with the browser details in memory for up to 8 hours and turns it into a random ID. No cookies or local storage are used for this, and the numbers we see are totals, not profiles of people. Your times in the calculator are never sent. In the web app a few steps are counted the same way — for example “app opened”, “first shift added”, “Pro screen shown”, “checkout started” — as a step name only; your shifts, hours, pay and settings are never sent. If your browser sends Do Not Track, the app counts nothing.

Email

If you write to us, we keep your message and email address to answer you and for our records, and delete them on request unless we must keep them (for example, for a refund or tax record).

Why we use it (legal bases)

Order and license data: to provide what you bought and give support (performance of a contract) and to keep tax and accounting records (legal obligation). Your emails to us: to answer you (our legitimate interest in replying, or steps before a contract). Visit statistics: our legitimate interest in knowing which pages help people, with no cookies and no stored IP addresses.

How long we keep it

Order records are kept by Gumroad and by us as long as tax and accounting law requires. Emails are kept for up to 2 years after the conversation ends, unless you ask us to delete them sooner or a refund or legal matter requires longer.

Who else handles it, and where

Gumroad (payments and licenses) and its payment processors, Google (our email, Gmail), GitHub (website hosting) and GoatCounter (visit statistics). Some of these companies are based in the United States, so data you send them may be processed outside your country, under their own safeguards such as standard contractual clauses. We do not sell or share your personal information for advertising, and we do not use it for profiling.

Your rights

You can ask us what data about you we hold, to correct it, delete it or receive a copy in a portable format, and you can object to or ask us to limit its use, by writing to trading.flowlab@gmail.com. For payment data, you can also contact Gumroad directly. If you are in the EU, UK or California, you have these rights under the GDPR, UK GDPR or CCPA, and you can complain to your local data protection authority.

Children

HoursOwed is not directed at children under 13, and we do not knowingly collect their data.

Changes

If we change this policy, we will update the date at the top. If a change affects what leaves your device, we will say so in the app before it takes effect.