Privacy Policy

Effective: 8 September 2026 · Last updated: 21 September 2026

HelperPay is an on-device reference and record-keeping tool for Hong Kong ID 407 foreign-domestic-helper pay and leave. This policy covers the HelperPay web, iOS and Android apps.

Leave entries may include a category (such as sick leave), date and duration. They stay with your local payroll records and are included when you export or share a payroll backup. Avoid entering diagnoses or sensitive medical details in notes, and protect exported files. These leave details are not sent to the subscription provider.

Data stored on your device

Helper and employer names, contract terms, wages, calendar entries, notes, payments, approvals and settings stay on your device. Payment screenshots stay in the app’s local database. HelperPay has no account server, so the developer cannot view or recover this data.

Each helper’s tracking start date is a local display preference included in payroll backups. It separates current tasks from earlier history, does not change the contract or payments, and is not uploaded.

Corrections to contract dates and holiday terms retain before/after values, reasons and times in payroll backups; this correction history contains no PINs. During helper receipt review, the selected language and unsubmitted name/PIN are used only in the open form's memory, not saved as language preferences or transmitted. The name and time of a submitted acknowledgement remain part of the receipt record.

Usage statistics and technical diagnostics

Firebase Analytics and Crashlytics are enabled by default in the iOS and Android apps to understand app usage, improve features and diagnose faults. Google Firebase processes a randomly generated app-installation identifier, app/device/OS information, app lifecycle and general feature events, purchase/subscription events, approximate location derived from a masked IP address, and crash and other technical diagnostic information. Data may be processed outside Hong Kong and retained according to Google's service settings and legal requirements.

The mobile apps do not send helper or employer names, wages, calendar dates, notes, payment content, PINs, documents or screenshots to Firebase. They do not collect advertising identifiers, set a Firebase user ID/user properties, or track users across apps or websites. You can turn off future usage and crash reporting under Settings → Privacy controls. The web version separately uses GoatCounter; web analytics remain off by default and send coarse events only after opt-in.

Sharing, backups and external links

• A JSON file containing records and screenshots is created only when you choose Export backup. You choose where that file is saved or shared.
• Email, WhatsApp, Hong Kong Government pages and the official calculator open only when you tap their links. Those providers apply their own privacy terms.
• HelperPay does not sell personal data and contains no advertising SDK.

Your controls

In Settings you can disable mobile usage and crash reporting or web anonymous statistics, export a complete backup, or choose Erase all data. Disabling mobile reporting resets Analytics identifier data on the device and deletes unsent crash reports; information already transmitted remains subject to Google's retention and deletion arrangements. Erasing permanently removes all local HelperPay records and screenshots from the current device unless you kept a separate backup. Removing the app or clearing website data also removes local records.

Security and retention

Data remains on the device until you delete it. Optional PINs are shared-device controls inside the app, not device-level encryption. Protect the phone with a device passcode and keep backups secure.

Contact

Privacy questions: [email protected]