Privacy Policy

Last updated September 28, 2026

This policy explains what the ezpz.work apps (iPhone, Android, desktop and web) collect, why, and the choices you have. ezpz.work turns evidence of your work into time records. It does not show ads, does not track you across other companies' apps or websites, and does not sell personal data.

Who we are

ezpz.work is operated by EZPZ Yazılım ve Teknoloji İhracat İthalat Limited Şirketi, İskele Mah. 617 Cad. B No: 7/1, Burhaniye, Balıkesir, Türkiye ("we"). We are the data controller for the account and sync data described below. Contact: ceo@ezpz.codes.

What we collect

• Account data. Your email address, an account identifier and sign-in tokens. On iPhone, tokens are kept in the Keychain; on Android, they are encrypted with a key held in the Android Keystore that cannot be exported from the device.
• Work records. Time entries, clients, tasks, notes and settings you create or edit, synced between your devices.
• Call records for contacts you select. For phone numbers, contacts or WhatsApp chats you explicitly choose to follow: the contact identifier and label you chose, call time, duration, direction and outcome. We do not record call audio. Contacts you do not select are ignored.
• Device identifier. A random identifier created by the app so sync can tell your devices apart. It is not an advertising identifier.

What stays on your phone

• WhatsApp connection. If you link WhatsApp, the linked-device keys are stored only on your phone and are never included in backups: on iPhone they are excluded from iCloud and device backups; on Android they are kept in storage that Android never backs up, and the app turns off Android backup entirely. Message text is never stored; limited message context for followed chats is kept on the device and deleted when you unfollow a chat or unlink WhatsApp.
• Contact picker (iPhone). The iPhone app only receives contacts you pick in Apple's contact picker. It does not read your address book. The Android app does not request access to your contacts.
• Microphone (iPhone). Used only during WhatsApp Business calls you choose to make or answer. Audio is not recorded or stored by us. The Android app does not request microphone access.
• Background capture (Android). On Android, the app keeps your linked WhatsApp connection running in the background so calls with contacts you follow are captured while the phone is locked. A persistent "Capturing WhatsApp calls" notification is shown while this runs. It captures call events only; message text is never stored and no audio is recorded.

How we use data

Only to provide the service: signing you in, syncing your records across devices, building time records from the calls and work you select, and responding to support requests. Our legal basis is performance of our contract with you and, where required, your consent, which you can withdraw at any time by unselecting contacts, unlinking WhatsApp or deleting your account.

Service providers

• Supabase: account authentication and database hosting for synced records.
• Meta Platforms (WhatsApp Business Platform): only if you use the official WhatsApp Business API features; messages and call events for your business number are delivered to us by Meta.
• Google Cloud: hosting for this website.
• Apple: iPhone app distribution and, if you use them, Apple services such as the contact picker.
• Google: Android app distribution through Google Play.

These providers process data on our instructions. Data may be processed outside your country, including in the EU and the United States, with appropriate safeguards.

Retention and deletion

We keep account data and synced records while your account is active. You can delete individual entries in the app. To delete your account and all synced data, email ceo@ezpz.codes from your account's email address; we complete deletion within 30 days, except where the law requires us to keep something longer. Uninstalling the iPhone or Android app removes the data stored only on that device, including the WhatsApp linked-device keys.

Your rights

Depending on where you live (including under the GDPR and Türkiye's KVKK), you can request access to, correction, export or deletion of your personal data, object to or restrict processing, and complain to your data protection authority. Email ceo@ezpz.codes and we will respond within 30 days.

Children

ezpz.work is a work tool and is not directed at children under 16. We do not knowingly collect their data.

Security

Data is encrypted in transit, tokens are stored in the iPhone Keychain or encrypted with the Android Keystore, and access to synced records is limited to your account. No system is perfectly secure; tell us at ceo@ezpz.codes if you find a problem.

Changes

We will update the date above when this policy changes and notify you in the app for material changes.