Privacy Policy

Last updated: 2 April 2026

1. Who we are

Just Work is operated by Regenerator Online ("we", "us", "our"). We are registered in the United Kingdom. This policy explains how we collect, use, store and protect your personal data when you use the Just Work mobile application and related services (the "Service").

2. What data we collect

Account data

• Phone number (used for authentication via Firebase)
• Business name and type
• Business address (optional)
• Email address (optional)
• VAT registration status and VAT number (if applicable)
• Currency preference

Job and financial data

• Job names, quotes, budgets and status
• Cost records (amounts, VAT, categories, dates, descriptions)
• Income and payment records
• Worker names and hourly rates
• Labour entries (hours worked, rates)

Receipt and photo data

• Photos of receipts and invoices that you capture or upload
• Text extracted from those images using on-device optical character recognition (OCR)
• Extracted amounts, dates, descriptions and categories

Subscription data

• Your subscription tier (Free, Paid, Pro or Founder)
• Billing period (monthly or annual)
• Subscription status (managed by Apple App Store or Google Play)

Device and usage data

• Device type and operating system version
• App version
• Crash logs and error reports
• General usage patterns (e.g. which features are used most frequently)

We do not collect precise location data.

3. How we use your data

• Providing the Service (job tracking, cost management, reporting, export) — legal basis: contract performance
• Syncing your data across devices and providing backup — legal basis: contract performance
• Processing subscription payments via App Store / Google Play — legal basis: contract performance
• Improving the Service (better OCR, smarter categorisation, bug fixes) using anonymised and aggregated data — legal basis: legitimate interest
• Generating anonymised industry benchmarks and insights — legal basis: legitimate interest
• Responding to support requests — legal basis: contract performance
• Service-related communications (important updates, billing issues) — legal basis: contract performance
• Marketing communications — legal basis: consent (opt-in only)

Anonymised aggregate analysis

We may analyse anonymised, aggregated data to improve our product and generate industry insights (for example, average material costs in a region or common spending categories). When we do this:

• No individual user, business or job is identifiable in the aggregated data
• We only produce insights when the underlying dataset includes a sufficient number of users to prevent identification
• Receipt images are never shared externally; only structured, anonymised data is aggregated
• You may opt out of aggregate analysis by contacting us at privacy@usejustwork.com

What we do not do

• We do not sell your personal data to third parties
• We do not share identifiable data with third parties for their own marketing purposes
• We do not use your receipt images for any purpose beyond your own account and anonymised data extraction
• We do not train AI or machine learning models on your identifiable data without your explicit consent

4. Third-party services

• Firebase Authentication (Google LLC) — user sign-in via phone number. Data shared: phone number, authentication tokens.
• Google ML Kit (Google LLC) — on-device receipt text recognition. Data shared: none (processing happens entirely on your device).
• App Store / Google Play (Apple Inc. / Google LLC) — subscription billing. Data shared: payment and subscription data (managed by the store, not by us).
• Cloud hosting provider (UK-based, TBC) — data storage and sync. All synced data is encrypted in transit and at rest.

5. Where we store your data

Your data is stored locally on your device in an encrypted database. When sync is enabled, your data (including photos) is uploaded to servers located in the United Kingdom. Data is encrypted in transit (TLS) and at rest.

We do not transfer your personal data outside the United Kingdom or the European Economic Area. If this changes in the future, we will update this policy and ensure appropriate safeguards are in place.

Firebase Authentication is provided by Google LLC. Authentication data may be processed in Google's data centres, which include locations outside the UK. Google operates under appropriate safeguards for international data transfers.

6. How long we keep your data

• Active accounts: data retained for as long as your account is active
• After account deletion: personal data deleted within 30 days of your deletion request
• Backup copies: removed within 90 days of account deletion
• Anonymised aggregate data: retained indefinitely (contains no personal data)

7. Your rights

Under UK GDPR, you have the right to:

• Access your personal data — request a copy of the data we hold about you
• Rectification — ask us to correct inaccurate data
• Erasure — ask us to delete your data ("right to be forgotten")
• Restriction — ask us to limit how we process your data
• Data portability — receive your data in a structured, machine-readable format
• Object — object to processing based on legitimate interest, including aggregate analysis
• Withdraw consent — where we rely on consent (e.g. marketing), you can withdraw it at any time

To exercise any of these rights, contact us at privacy@usejustwork.com. We will respond within 30 days.

If you are not satisfied with our response, you have the right to lodge a complaint with the Information Commissioner's Office (ICO) at ico.org.uk.

8. Data security

We take appropriate technical and organisational measures to protect your data, including encryption of data in transit and at rest, secure authentication via Firebase, local database encryption on your device, and access controls limiting who within our organisation can access user data.

No system is completely secure. If we become aware of a data breach that affects your personal data, we will notify you and the ICO as required by law.

9. Children's privacy

Just Work is not designed for or directed at anyone under the age of 16. We do not knowingly collect personal data from children. If you believe a child has provided us with personal data, please contact us and we will delete it.

10. Changes to this policy

We may update this privacy policy from time to time. When we make material changes, we will notify you through the app or by email. The "Last updated" date at the top of this page will always reflect the most recent revision.

11. Contact us

If you have any questions about this privacy policy or how we handle your data:

Email: privacy@usejustwork.com
Website: usejustwork.com