Office Hours Privacy Policy
Last updated September 14, 2026
The short version
- This is a hobby project, not commercial software. One person built it. There's no company, no support team, and no guarantees.
- We keep what the app needs to work: your sign-in ID, your name, your phone number, and your Crew.
- Your address book stays on your phone. For the people you pick, we upload a scrambled (hashed) copy of their number and the name you have them saved under. Nothing else from your contacts leaves your phone.
- No ads. We don't sell your data and don't plan to, but see section 4.
- You must be 18 or older.
- Office Hours is not offered in the European Union, the European Economic Area, the United Kingdom, or Switzerland. If you're there, please don't use it.
- You can delete your account any time: in the app under Profile, or by email.
If any of this doesn't sit right with you, please don't use Office Hours. The Terms apply too.
1. Who runs Office Hours
Office Hours is an independent, non-commercial project run by an individual, not a company. It's a beta, provided as is. It can change or shut down at any time.
2. What we collect
- Sign-in ID. You sign in with Google (or, on iPhone, Apple). We store the account ID that Google or Apple gives us. They also tell us your email address when you sign in, but we don't store it, and we never see your password.
- Name and phone number. You type these in, and they only go to people you connect with through Office Hours. Your Crew sees your name when you have office hours. When someone claims your office hours, the two of you get each other's name and number so the call can happen. If you ask someone for a call and they approve it, they get your name and number when you claim their Ping, so they can call you. Their number isn't given to you.
- Your Crew. For each person you pick, a hashed copy of their phone number and the name you chose for them. The names are only ever shown to you, so your lineup looks the same on each of your devices. Giving the app access to your contacts is optional.
- Call requests. When you ask someone for a call, what you fill in is stored and shown to that person: your note (which also appears in their notifications), how soon you'd like to talk, when you're free, and your company, role, and LinkedIn URL if you add them.
- Push token. A token from your phone so we can send you notifications.
- Usage events. Records of when office hours open, when Pings go out, Claims, call attempts, and what kind of error happened, so we can keep the app working. These don't contain phone numbers or contact details.
- Server logs. The companies that host Office Hours may log technical details of requests, like IP addresses.
We also have broad latitude to use analytics and trackers to understand the Service, improve the Service, or just because we like weird charts (weirdcharts.com).
3. What we don't collect
No location, photos, microphone, or advertising IDs. The app has no ad or crash-reporting tools in it. Calls go through your phone's regular dialer and invites go through your own texting app, so we never see those calls or messages. We don't know what you talk about, and we don't want to.
4. Who handles your data
A few companies run the pieces Office Hours is built on:
- Cloudflare hosts the app's server.
- Supabase hosts the database.
- Google handles Google sign-in and delivers notifications (Firebase Cloud Messaging).
- Apple handles Sign in with Apple and delivers notifications to iPhones.
We don't sell or rent your data, and we don't plan to. But you know what? Never say never. So if the idea, in the abstract, of someone "selling your data" rubs you the wrong way, DO NOT USE THIS APP.
5. Security
Data travels between the app and our server over HTTPS, and your sign-in session is stored encrypted on your phone. No system is perfectly secure, and we can't promise yours will never be exposed. We try hard, and we're quite good at this. But GPT-6 was able to capture Hugging Face's flag, so if you're the kind of person who is concerned about your phone number showing up on the web attached to your name, DO NOT USE THIS APP.
6. Deleting your data
Delete your account in the app under Profile, then Delete account. That removes your sign-in IDs, your name and phone number, your sessions and push tokens, your Crew and the Crews you're in, and the Ping and usage records that identify you. Past office hours stay in our records with your identity removed. If you can't get into the app, ask by email.
7. Changes
If this policy changes, we'll update it here and change the date at the top.