WorKudos is a work-time app for companies: a Windows desktop app that records work time with each person's consent, and a website where people see their days, timesheets and reports. It is provided by [Legal name of the service provider], [Postal address] ("we", "us").

This policy covers people who use WorKudos at work, the owners and managers who run it for their company, and visitors to our website.

Your work data belongs to your employer. A company chooses to use WorKudos for its people and decides how (for example whether screenshots are on, and how long data is kept). For that data the company is the controller (in India, the "Data Fiduciary"), and we are its processor: we keep and show the data for the company, following its settings and this policy, and use it for nothing else.

We are responsible for the account data of owners and managers who sign up, for data about visits to our website, and for running the service safely.

If you use WorKudos at work, your employer should tell you why it uses it. The app also shows everyone a plain notice of what is recorded, and asks them to agree, before it records anything.

Account details: name, work email, company, role and team; a password stored only in scrambled (hashed) form; your 2-step sign-in setup; the browsers and PCs you are signed in on; and, if you choose to be remembered on a device, the network you signed in from, by its address range only (for example 203.0.113.x), for 30 days.

Work data, only between Start Work and End Work:

• Your work state for each minute (working, on a break, inactive or offline) and how many of its seconds counted as work.
• The names of the apps you use and of the websites you visit (for example github.com, never the full address).
• Your breaks, meetings, notes, the project you pick, your timesheet changes and your leave (the dates, the type and your note; no medical details are needed).
• Whether a calling app is using the microphone, so call time counts as a meeting. The sound is never recorded.
• Which known AI agent programs (for example Claude Code or Codex) are working, by program name only.
• Whether your input came from your own keyboard, mouse or touchpad or from a program, so only real work counts. Never which keys, where the pointer is, or what is on the screen.
• Screenshots, only if your company turns them on: a few per hour at random times while you work at the PC, never during breaks, meetings or time away. Chats and password managers are made unreadable on your PC before a picture is saved. You can see yours, delete a few as personal, and they are deleted after 30 days.

Kudos, if your company uses it: each work day's star, worked out from the work data above (which of its five good habits you met: starting on time, focus, a break, a full day, ending the day yourself); the kudos you give and get (who, to whom, for which day, the ready reason and when, never typed words); and your Kudos choices (joining the board, hiding your wins).

What we never record: anything you type (keystrokes, passwords, messages), window titles, full web addresses, search terms, what you ask AI tools, program command lines, sound, or anything outside work time.

Website visitors: when you sign in, a cookie keeps you signed in, and your browser remembers your light or dark choice. We use no analytics, advertising or tracking cookies. Our servers keep short technical logs (such as the address and time of a request) to keep the service secure.

We use personal data only to:

• provide WorKudos: record work time, show days, timesheets and reports;
• keep accounts and the service secure, and prevent misuse;
• send the emails the service needs (invitations, sign-in and password emails);
• answer you when you contact us; and
• meet our legal duties.

We don't sell personal data, use it for advertising, or use it to train AI models. Nothing about anyone's work is decided automatically: when time doesn't count, the person sees why on their own day and can ask their manager to review it.

Where the law asks for a legal basis (for example the GDPR in the EU and UK): for account and website data we rely on our contract with your company and our legitimate interest in running a secure service; for work data, your employer decides its basis, and the app asks everyone to agree before it records anything.

• You can see all of your own data, for any date.
• Your manager sees their own team's data; your company's owner sees everyone's. Rates and amounts are shown only to owners and managers.
• If your company uses Kudos, only you see your star's pieces. Your team (the people in it and its manager) and the owner see your wins: full stars, new stickers and the kudos you get, never a missing piece, your hours or your apps. You can hide them. The board ranks only the people who join it, and nobody sees who is last. Nobody is ranked by AI use.
• We look at a company's data only to run and support the service, when the company asks us to, or when the law requires it.
• The services we use (below) keep the data for us and may not use it for anything else.

• Google Cloud: our server, database, screenshots and daily jobs, in the Iowa region, United States.
• Vercel: the website's files, served from locations around the world.
• Google (Gmail): the emails the service sends.

So data is stored in the United States, whatever country you are in. Where the law asks for safeguards for such transfers (for example from the EU or the UK), we rely on those our providers offer, such as the European Commission's Standard Contractual Clauses. We will update this list before we add a new service.

• Work data: for as long as your company chooses ("Keep activity data"). By default it is kept until the company deletes it or closes its account.
• Screenshots: 30 days, or less if the company keeps work data for less.
• Approved timesheets and each project's hours (numbers only, no app or website names) may be kept longer as billing records.
• Stars and stickers: each day's star (which habits were met, no times or app names) is kept with your account, so streaks and stickers last. Kudos are kept as long as work data.
• Remembered sign-in networks: 30 days after they were last used.
• When a company closes its account, its data is deleted within 30 days. Nightly copies of the database, kept for safety, roll over within 7 days.

• Every connection is encrypted.
• Sign-in uses 2-step verification.
• The database has no public address and can only be reached by our server.
• Each company's data is kept apart, and people see only what their role allows.
• Desktop app updates are signed, so the app installs only updates from us.

Depending on where you live, you can:

• see your data (in WorKudos you can already see all of your own);
• have it corrected;
• have it deleted, unless the law asks us or your employer to keep it;
• get a copy to take elsewhere;
• object, or withdraw your consent: tell your company's owner, and tracking stops for your account;
• name someone to act for you; and
• complain to a data protection authority (for example in your EU country, the UK's ICO, or India's Data Protection Board).

For work data, please ask your employer first, as they decide about it. We will help them answer. For anything else, or if you can't reach them, write to us at privacy@workudos.com. We answer within 30 days, and never treat you differently for using your rights.

California residents: we don't sell or share personal information, and you have the rights to know, correct and delete described above.

If personal data is lost or reached by someone who shouldn't have it, we tell the companies affected without delay, so they can tell their people, and we report it to the authorities where the law requires.

WorKudos is for work and is not meant for anyone under 18.

When this policy changes, we update its version and date here and tell company owners about important changes before they apply. If what the desktop app records changes, everyone is shown the new notice and asked to agree again.

Write to privacy@workudos.com with any question, request or complaint about privacy. Our grievance officer, [Name of the grievance officer], answers within 30 days.

Postal address: [Legal name of the service provider], [Postal address].

See also our terms of service.