BrightnookPrivacy Policy for Paycheck: Overtime & Net Pay
In short
- Paycheck: Overtime & Net Pay has no account, no sign-up and no chat. We do not know who you are.
- Your settings and progress are stored only on your device. So are simple usage counters (which features you use); they never leave your phone, and you can view or delete them in Settings.
- The app is free and financed by ads from Google AdMob. On first start (in the EEA, UK and Switzerland) a consent dialog asks whether ads may be personalised. You can change your choice at any time in the app's settings.
- All of these services are provided by Google. Data is transmitted encrypted (HTTPS).
- If you send us a problem report or idea from the app (a "ticket"), we receive only what you choose to send plus a little technical context, and we answer inside the app. We never ask for your e-mail address.
- You can ask us at any time to delete data or to tell you what we hold: support@brightnook.eu.
1. Who is responsible (controller)
The controller under the EU General Data Protection Regulation (GDPR) is:
Silicon Raccoon Holding UG (haftungsbeschränkt)
Hopfenstraße 28
85283 Wolnzach, Deutschland
E-mail: support@brightnook.eu
Phone: +49 177 7121080
We are not required to appoint a data protection officer. Questions about this policy go to the e-mail address above.
2. Data that stays on your device
The app saves your settings (sound, vibration) and your game progress (current level, coins, unlocked items) in the app's private storage on your device. It also stores your choice from the consent dialog. None of this is sent to us. Uninstalling the app deletes it.
If the app offers backup or export (for example a JSON backup or CSV files), these files are created only when you ask for them and only on your device. You choose where they go (share sheet or a file you pick); the app does not upload them and we never receive them. The app also keeps a few automatic backup copies in its private storage on the device, and Android may include the app's data in your Google backup if you have device backup switched on; that is a feature of your phone and Google account, not something we receive.
Legal basis: this storage is strictly necessary to provide the app you asked for (Section 25(2) no. 2 of the German Telecommunications Digital Services Data Protection Act, TDDDG; Art. 6(1)(b) GDPR).
The app does not ask for any Android permissions beyond network access and the advertising-ID permission that the ad SDK requires. It does not access your location, contacts, camera, microphone, photos or files.
3. Advertising (Google AdMob)
To keep the app free we show ads. Ads are delivered by Google AdMob, a service of Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland ("Google").
When an ad is requested, the Google Mobile Ads SDK built into the app sends data to Google, including:
- your device's advertising ID (resettable in Android settings) and app set ID,
- your IP address and basic device data (model, operating system version, language, screen size, app version),
- which ads were shown, viewed or tapped, and the consent choices you made.
Google uses this data to select, deliver and measure ads and to prevent fraud. Google may combine it with data from other apps and websites and uses it also for its own purposes; Google is therefore an independent controller for that processing. Details: Google Privacy Policy and How Google uses information from sites or apps that use its services.
Personalised ads are shown only if you have agreed to that in the consent dialog. Legal basis: your consent (Art. 6(1)(a) GDPR, Section 25(1) TDDDG). You can withdraw consent at any time with effect for the future (see section 4).
If you do not consent, Google shows non-personalised ("limited") ads that do not use the advertising ID for personalisation. Even then your IP address and basic device data are processed to deliver the ad and for fraud prevention. Legal basis: our legitimate interest in financing a free app (Art. 6(1)(f) GDPR).
You can also reset or delete your advertising ID in Android: Settings → Privacy → Ads. Google's own controls for ads are at adssettings.google.com.
4. Consent management (Google UMP)
The consent dialog is provided by Google's User Messaging Platform (UMP), a consent management platform that follows the IAB Europe Transparency & Consent Framework (TCF 2.2). It records your choices in a "TC string" that is stored on your device and passed to Google's ad system. To display the dialog, the app sends your IP address and basic app and device information to Google. Legal basis: Art. 6(1)(c) and (f) GDPR (documenting consent is a legal obligation and in our legitimate interest).
You can review or change your choices at any time in the app: Settings → Privacy settings. The dialog lists all ad technology partners that would receive data.
5. Anonymous usage statistics (Aptabase)
To see how much the app is used and which features are used, the app counts a few things in memory while it is open (nothing is stored on your device for this) and, when you leave the app, sends a short summary to Aptabase (EU servers): the app and its version, how long the session lasted, how often a few features or game levels were used, your phone's operating system and version, and the app language. No single clicks, no inputs you typed, no name, no email, no advertising ID, no device ID, no cookies, no user ID. If the upload fails, the summary is discarded.
Aptabase receives your IP address with the request, uses it only briefly to determine the country, and does not store it. To tell visits apart it derives a random identifier from the IP address and device/app data that is replaced every 24 hours and cannot be traced back to you or linked across days.
Legal basis: our legitimate interest in improving the app (Art. 6(1)(f) GDPR). You can object at any time by switching off Settings → Share anonymous usage statistics; nothing is sent after that, and you can keep using the app fully.
6. Support tickets (Report a problem or idea)
Only if you choose to send a ticket from the app (Report a problem or idea), the app sends: a random ticket number created on your device, the type (wrong result, bug, idea, other), the message you typed (up to 500 characters), the app version, the app language, your Android version and a little context that helps us reproduce the problem (for example country and tax options and, for a wrong-result report, a rounded income band and the percentage difference, never your exact pay). Please do not write names, exact pay or other personal data in the message; we do not need it.
The ticket goes through a small relay that we run on Cloudflare (Cloudflare, Inc., USA) and is stored as an issue in our private repository on GitHub (GitHub, Inc., a Microsoft company, USA), where only we can read it. The relay keeps your IP address for up to two days only to limit the number of tickets per day (abuse protection) and does not store it with the ticket. We reply in the same issue; the app fetches our answer and the version that fixes the problem by ticket number when you open Your tickets and shows it there. The list of your tickets is stored on your device only. We never contact you by e-mail about a ticket because we do not know your address.
Legal basis: performing the support you ask for (Art. 6(1)(b) GDPR) and our legitimate interest in fixing errors (Art. 6(1)(f) GDPR). Retention: we delete a ticket when it is solved, at the latest after 12 months; on request earlier (give us the ticket number). Cloudflare and GitHub process the data on our behalf (data processing agreements, EU-U.S. Data Privacy Framework certifications and standard contractual clauses).
7. Transfers outside the EU
Our contract partner is Google Ireland Limited in the EU. Google also processes data on servers of Google LLC in the United States. Google LLC is certified under the EU-U.S. Data Privacy Framework, which the European Commission has recognised as providing adequate protection (Art. 45 GDPR); in addition, Google's standard contractual clauses (Art. 46(2)(c) GDPR) apply.
Support tickets pass through Cloudflare, Inc. and GitHub, Inc. in the United States; both are certified under the EU-U.S. Data Privacy Framework and offer standard contractual clauses.
8. Recipients
Apart from the services described above (Google, Aptabase, Cloudflare and GitHub for support tickets), we pass data to nobody. We do not sell data. We disclose data to authorities only when we are legally required to.
9. Your rights
Under the GDPR you have the right to:
- access the personal data we hold about you (Art. 15),
- have inaccurate data corrected (Art. 16),
- have data erased (Art. 17) or its processing restricted (Art. 18),
- receive data you provided in a portable format (Art. 20),
- object to processing based on legitimate interests (Art. 21),
- withdraw any consent at any time with effect for the future (Art. 7(3)); the easiest way is Settings → Privacy settings in the app,
- lodge a complaint with a supervisory authority (Art. 77). The authority responsible for us is the Bayerisches Landesamt für Datenschutzaufsicht (BayLDA), Promenade 18, 91522 Ansbach (https://www.lda.bayern.de/); you may also complain to the authority at your place of residence.
To exercise these rights, e-mail support@brightnook.eu. Because the app has no accounts, we cannot look you up by name; to find data about your device at Google we may need identifiers such as your advertising ID, which you can read in Android under Settings → Privacy → Ads.
10. Deleting your data
- On your device: uninstall the app, or clear the app's storage in Android settings. This removes settings, progress and the consent choice.
- At Google: resetting your advertising ID (Settings → Privacy → Ads) disconnects previously collected ad data from your device; Google's own deletion controls are described in the Google Privacy Policy.
- Tickets: your ticket list on the device disappears with the app data. To have a ticket deleted from our system, e-mail us the ticket number.
- By request: e-mail support@brightnook.eu with the subject "Paycheck: Overtime & Net Pay data deletion". We will delete analytics and crash data we can associate with the identifiers you give us and confirm within one month.
11. Children
Paycheck: Overtime & Net Pay is not directed at children under 13 and is listed on Google Play for ages 13 and over. We do not knowingly collect personal data from children. In Germany a person must be 16 to consent to data processing themselves (Art. 8 GDPR); if you are younger, please ask a parent or guardian before you accept the consent dialog. If you believe a child has given us data, write to us and we will delete it.
12. Changes to this policy
We update this policy when the app, the services it uses or the law change. The current version is always at https://brightnook.eu/privacy/overtime_calc.html; the date at the top shows when it was last changed. Older versions are available in the source repository history.