Privacy Policy

Last updated: 5 September 2026

This policy explains how Workplanned collects, uses and protects personal data. Workplanned is a workforce-management app (scheduling, on-site check-in and hours tracking) run by KP Devs.

1. Who we are

2. Controller and processor

When a company signs up and adds its own team, that company is the data controller for its employees' data, and KP Devs acts as a data processor on the company's behalf. A Data Processing Agreement (DPA) is available to business customers. For the account owner's own account details and for this website, KP Devs is the data controller.

3. What we collect

• Account & company: your name, email address, a securely hashed password, and your company name.
• Team members: when an owner adds crew, we store each person's name, email and role.
• Work data: job titles and addresses, schedules, service/plan types, check-in and check-out times, and calculated hours.
• Location (only when the GPS check-in feature is on): the device's coordinates at the moment of check-in, used to measure the distance to the job address.
• Company logo: an image you choose to upload.
• Technical: a session token and your light/dark theme preference are stored in your own browser. Our hosting provider keeps standard server access logs.

4. Why we use it (legal basis)

• To provide the service - accounts, scheduling, check-in, hours (performance of a contract).
• GPS at check-in - to confirm presence at the work address, only when a company enables it (legitimate interest of the employer / the company's instruction).
• Security - we log failed sign-in attempts to prevent abuse (legitimate interest).

5. What we do NOT do

We do not show advertising, we do not use Google Analytics or any third-party tracking, and we do not sell or rent your personal data to anyone.

6. Who we share it with

We only share data with the service providers we need to run Workplanned:

• Our hosting provider - stores the application and database on our behalf.
• DAWA (Danish Address Web API, api.dataforsyningen.dk) - a Danish public service. When you type an address, the text you type is sent there to find matches. No account data is sent.

We do not currently use an online payment processor (upgrades are arranged manually). If that changes, we will update this policy first.

7. How long we keep it

We keep your data for as long as your account is active. When you delete a team member or close a company account, the personal data is deleted or anonymised without undue delay, and removed from routine backups within a short period. Security logs (failed sign-in attempts) are kept only briefly.

8. Your rights

Under the GDPR you can ask to: access your data, correct it, delete it, restrict or object to processing, and receive a copy in a portable format. Owners can also export and delete their company's data directly in the app. To make a request, email gdpr@workplanned.io. We respond within one month.

9. Cookies & local storage

We use only essential browser storage: a session token to keep you signed in, and your theme preference. We do not use tracking or advertising cookies, so there is no cookie banner to click through.

10. Where your data is processed

Workplanned is operated from Denmark and your data is processed within the EU/EEA. [Confirm hosting region.]

11. Complaints

If you believe we have mishandled your data, you can complain to the Danish Data Protection Agency (Datatilsynet, datatilsynet.dk).

12. Changes

We may update this policy. The "last updated" date above shows the latest version, and we will tell account owners about significant changes.