Wochenwerk privacy policy

Updated 13 November 2026. This policy covers the app Wochenwerk for iPhone and Android and the office area in the browser. It does not cover other Tearoom apps.

Who is responsible

Wochenwerk is a tool for craft businesses. The company that uses Wochenwerk and invited you, that is your employer, is responsible for the data of its employees. Please ask it first about your data.

Tearoom provides the app and runs the server on behalf of the company (processing on behalf of a controller, Art. 28 GDPR): Mathis Koblin, Tearoom, Halfinger Straße 23, 83123 Amerang, Germany. Privacy contact: apps@tearoom.one. See also the imprint.

In short

There is no advertising, no analytics and no tracking. A phone is connected to a company only through an invitation from its office; there is no public sign-up. The data is stored on the company’s server at Tearoom and, so that the app works without a connection, on your phone.

What data the app processes

  • Your name, a short name and your function in the company, as the office enters them.
  • The weekly plan: on which construction site or with which status (for example vacation, sick, vocational school) you are planned on which day. Everyone in the company sees the whole weekly plan. Reasons for an illness are never recorded.
  • Your working hours: start, end, break and site per day, and when they were entered or changed.
  • Receipts you photograph: the photos, a PDF made from them, and what you add voluntarily (kind, amount, purpose, paid yourself). Each receipt is sent as a PDF by email to the company’s invoice address.
  • For office accounts: email address and an encrypted password; for each connected phone a device name and a secret device key.
  • A change log of who changed what and when, so that corrections can be traced.

Stored on your phone

The plan, your hours and receipts not yet sent are kept in the app’s private storage so that it works without a connection. The device key is kept in the system’s protected keychain. The evening reminder to enter your hours is scheduled by the app on the phone itself; nothing is sent to an outside service for it.

Server and transfer

The server is located at netcup GmbH in Germany and is run by Tearoom. The app talks to it only over encrypted connections. PDFs are created on this server; it sends emails through Tearoom’s own mail server to the addresses the company sets.

Permissions

Camera, to scan the invitation’s QR code and to photograph receipts; without it the code can be typed in. Notifications, optional, for the evening reminder. Internet, to sync with the server. The app does not ask for your location.

TestFlight

While you use a test version through Apple’s TestFlight, Apple processes installation details, crash reports and feedback you send through TestFlight under its own terms and passes them on to Tearoom.

Retention and deletion

How long working hours and receipts are kept is set by the company according to the statutory retention periods. When you leave the company, the office deactivates your access and your phone is disconnected. If you delete the app, the data on the phone is gone; what has already reached the server stays with the company.

Legal bases

The processing serves the employment relationship and the company’s duty to record working hours and receipts (Art. 6(1)(b) and (c) GDPR in conjunction with Section 26 BDSG). Notifications only with your permission (Art. 6(1)(a) GDPR), which you can withdraw at any time in the phone’s settings.

Your rights

You have the right of access, rectification, erasure, restriction, data portability and objection, and the right to lodge a complaint with a supervisory authority. Please contact your company for this; Tearoom supports it. Contact Tearoom: apps@tearoom.one.