Privacy Policy — Crompton WorkFlow

Last updated: 6 July 2026

Crompton WorkFlow ("the App") is an internal time-tracking and activity-reporting tool built and operated by Crompton Concepts ("we", "us", "our") for use by our own employees and contractors. This policy explains what data the App collects, how it is used, and who can see it.

This is not a consumer app — it is provided to a closed set of individuals authorised by Crompton Concepts as a condition of their work. If you have received access to this App without being a current Crompton Concepts worker, please contact us at the address below.

1. Who this applies to

Anyone who signs in to Crompton WorkFlow (web or mobile) using a Crompton Concepts–approved account, and anyone who installs the optional Windows background activity recorder.

2. What we collect

Account information. When you sign in with Google Sign-In, we receive your name and email address from Google to identify your account and grant access.

Manual time entries. Project, task/description, start and stop times, and duration for any timer you start and stop yourself, or any manual entry you add.

Automatic activity log (Windows only, opt-in installer). The background recorder only runs while you have an active, started project timer in the App — it does not run just because you are signed in, and it stops the instant you stop the timer. During that window, it reads the name of your active application and its window title roughly every 15 seconds, and pauses automatically after 2 minutes of no keyboard/mouse input. This is rolled up into a simplified daily log showing which app/window and how many minutes — not full keystrokes, screenshots, or screen recordings. The recorder also records the machine name it runs on.

Sign-in sessions. Timestamp of sign-in and sign-out to the app, tied to your account, for attendance/activity reporting.

Admin-entered data. Your role and an internal labour cost rate may be set by an administrator for internal cost reporting. This is visible only to admins, never to other staff.

Data we do not collect. We do not collect screenshots, keystrokes, browsing history, webcam/microphone data, or activity outside your sign-in sessions. We do not collect precise device location. Mobile installs do not run the background activity recorder — that is Windows-only.

3. How we use this data

We do not sell your data, and we do not use it for advertising.

4. Who can see your data

We do not share your data with any other third party, and never for marketing purposes.

5. Data retention and deletion

Manual entries you delete are soft-deleted (hidden, not immediately destroyed) so administrators can correct mistakes; they are excluded from your visible history and reports once deleted. Activity log and account data is retained for as long as you have an active account with us, and for a reasonable period afterward for record-keeping, unless you request earlier deletion.

To request a copy of your data or deletion of your account data, email labs@cromptonapps.com, or see our account deletion request page for details on what's deleted and how long it takes.

6. Security

Access to data is controlled by Firebase Authentication and Firestore security rules that default-deny and restrict each user to their own records, with a separate admin allow-list for organisation-wide access. Data in transit is encrypted (HTTPS/TLS). No method of transmission or storage is 100% secure, but we take reasonable steps to protect your information.

7. Children's privacy

This App is a workplace tool intended for use by adult employees and contractors of Crompton Concepts. It is not directed at, and we do not knowingly collect data from, children.

8. Changes to this policy

We may update this policy as the App changes. Material changes will be communicated to users via the App or by email. The "Last updated" date above reflects the most recent revision.

9. Contact us

Crompton Concepts
Email: labs@cromptonapps.com