DillyDone — Privacy Policy
The short version
- DillyDone has no accounts and no server. Your shifts, clients, notes and rates are stored only on your phone.
- We add no analytics or tracking SDK of our own. Firebase Analytics is not in the app.
- Your timesheet data leaves the device only when you export it yourself through the system share sheet.
- The free version shows ads. The advertising SDK never receives your timesheet content. Buying DillyDone Pro removes ads entirely.
- Crash reports are off unless you turn them on in Settings, and never include timesheet content, client names or notes.
This policy explains how HMB Software LLC (“HMB Software,” “we”) handles information in the DillyDone apps for iPhone and Android (the “App”). By using the App you agree to this policy and to our Terms of Use.
1. Who we are
DillyDone is published by HMB Software LLC. Privacy questions: privacy@hmb-software.com.
2. What the App does
DillyDone is a time clock. You clock in, optionally start and end breaks and meetings, assign time to clients and work items, and clock out. The App adds the results up into daily and weekly totals and can produce a timesheet as a PDF or CSV file. Everything it records is created by you on the device.
3. Information the App handles
Your timesheet data
Shifts, segments, work items, clients, notes, hourly rates and preferences live in a local SQLite database (dillydone.db) in app-private storage on your device. There are no accounts, there is no HMB backend, and there is no synchronisation. We never receive this data and we cannot read it.
Exports and sharing
Your data leaves the device only when you explicitly export a PDF or CSV report, or a JSON backup, and hand it to another app through the system share sheet. Where that file goes is then up to you and the app you chose. We are not a party to it.
Purchases
DillyDone Pro is a one-time purchase handled entirely by Google Play Billing or Apple StoreKit. We never see your payment details. The App stores a cached entitlement flag locally; the store remains the authority and is re-checked at launch.
App settings check
Each time the App starts it asks Google Firebase Remote Config for a small settings file, which is how we turn monetization behaviour on or off without shipping an update. To make that request, Firebase gives your installation of the App a random identifier (a Firebase installation ID) and sends it with the request, so Google receives that identifier and your device’s network address, as it would for any request to a server. No timesheet content is sent.
Crash reports (optional, both platforms)
Firebase Crashlytics is present in the App but collection is disabled in the app manifest and Info.plist. Nothing is collected unless you turn crash reporting on in Settings. Even then, a crash report never includes timesheet content, client names, work item descriptions, notes or report contents.
Advertising
Users on the free tier see banner ads on the main screens, and may choose to watch a rewarded video to unlock an export. The Google Mobile Ads SDK is initialised lazily — only for users without DillyDone Pro, and only after the Google User Messaging Platform consent flow has been completed where required by law. The ads SDK receives no timesheet content of any kind.
On Android the App includes the advertising ID permission (com.google.android.gms.permission.AD_ID) that the Google Mobile Ads SDK requires, so a resettable advertising identifier may be used to serve and measure ads. You can reset or delete that identifier in your device settings, and buying DillyDone Pro stops the ads SDK from being initialised at all.
What we do not collect
We do not collect your name, email address, phone number, contacts, calendar, photos or location. The App requests no location permission. We operate no analytics product: the App’s internal analytics seam is a no-op in this build, and the event names it allows can never carry client names, notes, timestamps, rates or durations.
4. Ads and DillyDone Pro
The free version is supported by banner ads and by a rewarded video you choose to watch when exporting. Ads are never placed in front of clocking in or out, starting or ending a break or meeting, saving your work, or recovering an interrupted shift. DillyDone Pro is a one-time, non-consumable purchase — not a subscription — that removes all advertising and adds billing rates, rounding, billable value and the advanced reports.
5. Children
DillyDone is a tool for working adults tracking their own hours. It is not directed at children under 13, and we do not knowingly collect personal information from children.
6. Retention and deletion
We do not hold a copy of your data, so there is nothing for us to retain or delete. Deleting an entry or a day in the App removes it from the local database. Uninstalling the App removes the database with it. There is no “download my data” pack because we do not have your data — the export feature in the App is the complete copy.
7. Your rights
If you believe we hold personal information about you, email privacy@hmb-software.com. For this App the usual answer is that we do not. You can withdraw advertising consent, reset your advertising identifier, or turn crash reporting off at any time.
8. Third parties
The App uses operating-system APIs for storage, file sharing and notifications, governed by Apple’s and Google’s own policies. HMB Software does not insert a third-party analytics or tracking SDK.
The App includes the Google Mobile Ads SDK and Google’s User Messaging Platform for the advertising described in section 3. Neither is initialised for a user who owns DillyDone Pro.
The App includes Google Firebase Remote Config, and the Firebase Installations library it depends on, for the settings check described in section 3. That runs at every launch on both platforms. Firebase Analytics is not included.
The App includes Google Firebase Crashlytics for the optional crash reporting described in section 3. It stays dormant unless you turn crash reports on.
Purchases are processed by Google Play Billing on Android and Apple StoreKit on iOS.
9. Apple Privacy Nutrition Labels and Google Play Data safety
HMB Software collects no timesheet data. The Android Data safety form declares what third-party SDKs in the App collect: Device or other IDs — covering the advertising identifier used by the Google Mobile Ads SDK and the Firebase installation ID sent by the settings check — together with app interactions, diagnostics and crash logs, for advertising, app functionality and fraud prevention. Crash logs are declared as optional and collected only with your consent. The Play listing declares that the App contains ads and a one-time in-app purchase. The same advertising and settings-check collection applies on iPhone.
10. Changes
If we update this policy we will change the date above. The current version lives at https://www.hmb-software.com/dillydone/privacy.
11. Contact
HMB Software LLC
Email: privacy@hmb-software.com
Site: https://www.hmb-software.com