Privacy policy

Updated October 2026

This policy covers Olynors at olynors.com and the Olynors Android app. Both connect to the same workplace service. For privacy questions, contact contact@olynors.com. If your account is managed by an employer or organization, its administrator also controls the workplace records it adds to Olynors.

Information handled by Olynors

• Account and profile: your name, email address, password hash, account ID, role, approval status, and profile details you or your administrator provide, such as phone number, department, job title, and profile photo.
• Workplace records: teams, projects, assignments, targets, submissions, reviews, comments, chat messages, attachments, offer letters, and related activity history.
• Employment and pay: employment details, salary amounts, extra-work earnings, payslips, and payment references where your organization uses these features.
• Service and notification data: session and security tokens, sign-in and activity timestamps, notification preferences, and push subscription identifiers if you enable notifications. Hosting and browser providers may process technical connection information to deliver and secure the service.

Why this information is used

Olynors uses this information to authenticate users, apply access permissions, manage work, deliver files and messages, calculate and display workplace reports and payslips, provide requested notifications, and maintain service security. New accounts require administrator approval.

Access and service providers

Access within Olynors follows your organization’s roles and permissions. Authorized administrators and managers can access the records their roles permit. Olynors uses Hostinger for its database and private file storage. Configured email providers and browser push providers process the information needed to deliver email and website push notifications. The native Android app connects directly to the live service over HTTPS and does not bundle advertising or analytics SDKs. The earlier Android 1.0 release displayed the website using a compatible browser.

Optional HR contact through WhatsApp

Your administrator can save HR WhatsApp numbers and assign an HR contact to employees. Employees receive only their configured HR contacts, using their team HR when no direct assignment is set. Choosing Chat on WhatsApp opens WhatsApp or WhatsApp Business with that number and an editable message draft. You decide whether to send it. Olynors does not automatically send WhatsApp messages or upload workplace files to WhatsApp. Your WhatsApp identity and messages are handled by WhatsApp under its own terms and privacy policy when you use it.

Device permissions and local storage

Notifications are optional and can be controlled through Olynors and your device’s settings. The native Android app can periodically check for work notifications in the background when you enable this feature; Android may delay these checks to save battery. These checks use the same account session as the app. Uploading or saving a file opens your device’s file picker so you can choose what to share or where to save; the app does not request broad device-storage access. The app does not request access to contacts, location, microphone, or camera.

The native Android app stores its sign-in session and account metadata encrypted using a key held by Android Keystore. It does not store your password or maintain a local copy of your workplace database. Background notification checks retain notification IDs on the device to avoid duplicate alerts. Your browser separately stores website sign-in cookies and preferences. The website service worker caches public branding and an offline page; it does not persist authenticated pages, API responses, or business files in its offline cache. PDF and image previews use a temporary private cache that is cleared when the preview closes or the app starts again. Files you deliberately download remain on your device until you remove them.

Security

Connections to Olynors use HTTPS. Passwords are stored as salted hashes, and session cookies are HTTP-only. The Android package connects to the production website and does not contain database passwords or private server credentials.

Retention

Records are kept while needed to operate the workplace service. Your organization can configure working task-file cleanup for 7, 15, or 30 days after approval. Final deliveries remain until an administrator deletes them. Other employment, payroll, audit, chat, project, and backup records have separate operational or retention requirements; the task-file timer does not apply to all personal data. Contact support and your organization’s administrator for the retention period applicable to a specific record.

Your choices and deletion requests

You can edit available profile details, change your password, and adjust notification settings in Olynors. You can request deletion of your Olynors account and associated personal data from the account deletion page, including without installing or signing in to the app. Support will verify ownership and coordinate removal with your organization. Records needed for applicable employment, accounting, legal, or security obligations may require retention; support will explain any applicable exception and its retention period. Removing the Android app alone does not delete your Olynors account.