Privacy Policy

For Chalk (com.chalk.chalk) on Google Play.
Effective 10 August 2026 · Last updated 10 August 2026

1. Who publishes this app

Chalk is published on Google Play by the organisation named below, which is the data controller for the purposes of this policy.

2. What data we collect

None. Chalk has no server, so there is nothing for it to send data to. Specifically, the app does not collect:

• Names, email addresses, phone numbers or any other contact details.
• Location, device identifiers, advertising IDs or installed-app lists.
• Usage analytics, crash telemetry, session recordings or diagnostics.
• Photos, files, contacts, calendars, microphone or camera input.
• Payment information of any kind. Chalk is free and contains no purchases.

3. Records about other people

This section matters more in Chalk than in most offline apps, because the records you keep are largely about other people: the workers on your bench, their pay rates, the weekdays they are available, their tickets and expiry dates, and whether they turned up. Chalk is a tool for the business that employs or supplies them.

Those records never leave the device, and we never see them. But you are the controller of that information in your own right, and your obligations to the people in it — telling them what you hold, keeping it accurate, keeping it no longer than you need it — are yours, not ours. Chalk gives you the tools to meet them: any record can be edited, archived or deleted, and Settings → Clear all data removes everything at once.

4. How your data is used

Entirely on the device, and only to show you your own records. All of the arithmetic Chalk performs — hours worked, cost, revenue, spread, fill rate, turn-up percentages, ticket countdowns, clash detection, streaks and goals — is computed locally from what you entered. No calculation is performed on a server, and no result leaves the device.

5. Data sharing

We share nothing, because we hold nothing. There are no third parties with which any data is shared: no advertising networks, no analytics providers, no crash-reporting services, no data brokers and no cloud storage.

The only way information leaves your device is when you choose to export it: a JSON backup, a shifts CSV, a bench CSV or a per-client timesheet is written into the app's own storage and handed to the Android share sheet, where you decide what to do with it. That action is initiated by you, and its destination is your choice. A timesheet you send to a client will contain your workers' names and hours — that disclosure is yours to make and to justify.

6. Data security

Business records are stored in a local database on the device. The stores holding personal and commercially sensitive information — workers, tickets, clients and assignments — are encrypted at rest with AES-256, and the encryption key is held in the Android system keystore rather than in the app's own files.

Because nothing is transmitted, there is no data in transit to intercept and no server-side store that could be breached. The security of the records ultimately rests on the security of your device, so a screen lock and up-to-date system software remain worthwhile.

7. Data retention and deletion

Your records are kept on the device for as long as you keep them. We retain nothing, so there is nothing on our side to delete.

• Delete individual records — an order can be deleted from the board with an undo, and a worker or client can be archived and restored.
• Delete everything — Settings → Clear all data wipes every client, worker, ticket, order, assignment and preference immediately and irreversibly.
• Uninstall — removing the app removes its local database and its keystore entry with it.

Export a backup first if you want to keep a copy: deletion cannot be undone and we have no copy to restore from.

8. No user accounts

Chalk has no registration, no login, no password and no profile. You are not identified to us in any way, and we could not link app data to a person even if we wanted to.

9. Children’s privacy

Chalk is a dispatch record book for a working labour-supply business and is intended for adults. It is not directed to children, contains no content designed to appeal to children, and collects no data from anyone regardless of age. Because no personal information is ever collected, no information can be collected from a child under 13 (or the equivalent minimum age in your jurisdiction), which satisfies COPPA and equivalent rules by construction.

10. Your rights

Data-protection law gives you rights of access, correction, deletion, restriction, objection and portability. In Chalk these are not requests you have to make of us — you exercise them directly, because you hold the data:

• Access — every record is visible in the app.
• Correction — any record can be edited in place.
• Deletion — per record, or all at once in Settings.
• Portability — Export produces open JSON and CSV files that you own.

11. Third-party services

Chalk contains no third-party SDKs. There is no advertising library, no analytics library, no crash reporter, no social sign-in, no A/B testing framework and no attribution tracker. The app is built with open-source Flutter components that run locally and make no network calls of their own.

12. Permissions

Chalk declares exactly one Android permission:

Chalk requests no access to location, camera, microphone, contacts, calendar, storage, notifications or any other protected resource. In particular there is no notification permission, because reminders in Chalk are an in-app list rather than a push.

13. Google Play Data safety declaration

Our Data safety entry on the Play listing states: no data collected and no data shared. That declaration is accurate and complete — it is a description of the architecture, not a promise about how we behave.

14. Changes to this policy

If this policy changes we will update the page and the "last updated" date above. Because the app is offline by design, any change would follow a change in the app itself and would be described in the Play release notes. Continuing to use Chalk after an update means you accept the revised policy.

15. Contact us

Questions about this policy or about how Chalk handles information can be sent to the publisher directly. We answer every message ourselves.

16. Legal basis and jurisdiction

Data controller. COZYMOST ACCOMMODATIONS LTD, at 2 Frederick Street, London, England, WC1X 0ND, United Kingdom, is the sole data controller for Chalk. There is no joint controller and no processor, because no processing takes place outside your own device.

GDPR (EU/EEA and UK). Chalk performs no processing of personal data by the controller: the app neither collects nor transmits personal data, so no lawful basis under Article 6 is engaged and no international transfer occurs. Where you use Chalk to hold records about your own workers, you are the controller of that processing.

CCPA/CPRA (California). We collect no personal information and therefore sell or share none. There is nothing to opt out of, and exercising a "Do Not Sell or Share" right would have no effect because no such activity exists.

Other jurisdictions. The same facts apply wherever you are: an app that transmits nothing cannot process, disclose or transfer your data.