Privacy Policy

Last updated: 06/05/2026

1. Data Controller

BTJP
Contact: support@btjp.fr

2. Data Collected

MobileTimeSheet collects the following data:

Identification data: email address
Professional data: time logs (working hours), events/interventions, expense reports (fuel, toll, other)
Photos: expense receipts (stored securely)
Notification token: for push notifications (FCM)
Technical information: device type, unique device identifier (for session management)

3. Purpose of Processing

Data is used exclusively for:

Managing schedules and interventions
Tracking working hours
Managing expense reports
Sending notifications related to assigned events
Authentication and account security

3b. Third-Party Calendar Integrations

The application offers optional synchronisation with third-party calendar services:

Google Calendar

When you connect your Google Calendar account, the application requests access to the following scopes:

https://www.googleapis.com/auth/calendar.readonly — read your calendars to select the target calendar
https://www.googleapis.com/auth/calendar.events — create and update intervention events in your calendar

These accesses are used solely to synchronise your professional interventions into your Google Calendar. Google Calendar data is not stored on our servers, except for the encrypted OAuth access token required for synchronisation and the selected calendar identifier.
You can revoke this access at any time from your Google account: myaccount.google.com/permissions.

Use of Google APIs is subject to the Google Privacy Policy. MobileTimeSheet complies with the Google API Services User Data Policy, including restrictions on sensitive data.

Apple iCloud Calendar

When you connect your iCloud account, the application uses your Apple ID and an App-Specific Password to access your calendars via the CalDAV protocol.

Read the list of your iCloud calendars to select the target calendar
Create and update intervention events in your selected calendar

Your Apple ID and App-Specific Password are stored encrypted on our servers and are never shared with third parties. You can revoke access at any time by deleting the App-Specific Password from appleid.apple.com.

4. Data Sharing

Data is not sold or transferred to third parties.
It is only accessible by members of the company the user belongs to (administrators and managers).

5. Retention Period

Data is retained for the duration of account use.
It is deleted upon request or when the account is deleted.

6. Security

Data is stored on secure servers. Passwords are encrypted using industry-standard algorithms. Communications are encrypted via HTTPS.

7. User Rights

In accordance with GDPR, you have the following rights:

Right of access to your data
Right of rectification
Right to erasure (right to be forgotten)
Right to data portability

To exercise these rights, contact: support@btjp.fr

8. Contact

For any questions regarding this policy:
support@btjp.fr