Cost2Work is operated by Cost2Work ("we", "us"), Via Torino, Milano, the data controller for the personal data described below. For any question about this policy or your data, contact us at francesco.venuti.job@gmail.com.
2. What we collect
Account data: email address and display name, from either Google Sign-In or an email/password you choose.
Profile & onboarding data: what you track (money/time/energy), your commute mode and its costs, how many days a week you go into the office, your typical daily schedule, and any additional expenses you choose to log.
Daily check-in data: day-by-day corrections to the above (e.g. an actual commuting cost that differed from your estimate) and, if you track Energy, a daily mood/energy rating.
Reminder preferences:whether you've turned on push and/or email reminders, which days you want them, your device's push notification token, and your timezone (so a reminder arrives at your actual end of day).
Technical data:data your browser stores locally to make the app work offline and remember an in-progress signup (service worker cache, local storage) — this stays on your device and isn't sent to us.
3. Why we process it
To provide the service you signed up for— calculating and tracking the cost of your commute is the entire point of the app, so this processing is necessary to perform our contract with you. It isn't based on consent and isn't something you can opt out of while keeping an account; if you no longer want it, you can delete your account at any time (Settings → Account → Delete Account).
To send you reminders (push and/or email) — based on your consent, given (and revocable at any time) via the toggles in Settings. Turning both off stops all reminder processing immediately.
To keep the service secure and working— e.g. restricting each account's data to that account only — based on our legitimate interest in running a functioning, secure product.
4. Who we share it with
We don't sell your data or share it with advertisers. We use a small number of service providers ("subprocessors") to run Cost2Work, each acting on our instructions:
Google Firebase / Google Cloud Platform— sign-in, database, hosting, and push notification delivery. Data is processed on Google's infrastructure, which can include locations outside the EU/EEA (e.g. the United States), under Google's standard contractual clauses for such transfers.
Resend— delivers the daily reminder email, if you've turned that on. Based in the United States, under its own standard contractual clauses for EU data transfers.
5. How long we keep it
We keep your data for as long as your account is active. If you delete your account (Settings → Account → Delete Account), your profile, check-ins, and reminder preferences are deleted; this cannot be undone.
6. Your rights
Under GDPR (and equivalent laws elsewhere), you have the right to access, correct, export, or delete your personal data, to object to or restrict certain processing, and to withdraw consent at any time (Settings covers reminders; account deletion covers everything else). You can also lodge a complaint with your local data protection authority — in Italy, the Garante per la Protezione dei Dati Personali. To exercise any of these rights directly, contact us at francesco.venuti.job@gmail.com.
7. Cookies & local storage
Cost2Work doesn't use analytics, advertising, or tracking cookies. The only browser storage it uses is strictly technical: keeping you signed in, caching pages for offline use, and holding an in-progress signup draft on your own device. If that ever changes, we'll ask for your consent before anything non-essential is set.
8. Security
Your data is transmitted over encrypted connections (HTTPS) and stored with access rules that restrict every account's data to that account alone. No method of transmission or storage is 100% secure, but we take reasonable measures to protect your information.
9. Children
Cost2Work isn't directed at children and we don't knowingly collect data from anyone under 16.
10. Changes to this policy
If we make a material change to what we collect, why, or who we share it with, we'll update the effective date above and ask every user to review and accept the new version before continuing to use the app.