1. Overview

Competent Management ("we," "us," or "our") is a workforce management platform designed for small to mid-size shift-based businesses. This Privacy Policy explains what information we collect, how we use it, and your rights regarding your data.

By using Competent Management at competentmanagement.com, you agree to the practices described in this policy.

2. Data We Collect

We collect the following categories of information:

Account & Identity

• Full name and email address (used to create and identify your account)
• Firebase Authentication UID (internal identifier)
• Company name and industry
• Manager kiosk PIN (stored in your company's settings, not linked to Firebase Auth)

Employee Data (entered by account owners/managers)

• Employee names, positions, pay rates, and employment status
• Employee kiosk PINs (used for time clock access)
• Assigned roles and permissions

Operational Data

• Punch logs (clock-in and clock-out timestamps)
• Schedules and shift assignments
• Payroll estimates (calculated, not processed — we do not handle payments)
• Tickets, time-off requests, shift swaps, and callout records
• Invite codes and team member onboarding records

Settings & Preferences

• App appearance settings (dark mode, accent color, compact view)
• Payroll configuration (overtime thresholds, pay periods, multipliers)
• Scheduling preferences and portal access settings
• Company logo (stored as a base64 data URL in your browser and Firestore)

3. How We Use Your Data

We use the information we collect to:

• Authenticate and identify users across sessions
• Display schedules, punch logs, payroll estimates, and employee records
• Send invite codes and onboard team members to your company
• Deliver in-app notifications (tickets, callouts, schedule changes)
• Persist your settings and preferences across devices
• Enforce role-based access controls within your company's workspace
• Operate and improve the platform

We do not use your data to serve advertisements, build behavioral profiles, or share with data brokers.

4. Data Storage & Security

All application data is stored in Google Firebase (Firestore and Firebase Authentication), which provides encrypted storage and secure access controls. Data is stored in Google Cloud infrastructure and protected by Google's security standards.

We enforce Firestore Security Rules to ensure that users can only access data belonging to their own company. Company data is scoped under a unique company ID and is not accessible to other companies on the platform.

While we implement reasonable security measures, no system is completely secure. We encourage you to use a strong password and to keep your account credentials private.

5. localStorage & Browser Data

Competent Management uses your browser's localStorage to store the following locally on your device:

• App settings (dark mode preference, accent color, compact view)
• Company logo data URL
• Cached payroll and scheduling preferences
• First-visit flags used to trigger guided tours

This data never leaves your device unless explicitly synced to Firestore when you save settings. Clearing your browser's site data will remove locally stored preferences.

We do not use cookies for tracking or advertising purposes.

6. Third-Party Services

We use the following third-party services to operate the platform:

• Firebase Authentication — user identity and session management (Google LLC)
• Cloud Firestore — database storage for all company and user data (Google LLC)
• Google Fonts — loading typefaces used in the app interface
• QRCode.js — client-side QR code generation for employee portal access (no data transmitted)
• Font Awesome — icon library loaded via CDN

We do not integrate with payment processors, advertising networks, or social media platforms. Each third-party service is governed by its own privacy policy.

7. Analytics

We may use Umami Analytics, a privacy-focused, cookieless analytics tool, to understand aggregate usage patterns such as page views and feature usage. Umami does not collect personally identifiable information and does not use cookies or cross-site tracking.

No individual user behavior is tracked or sold.

8. Data Retention

We retain your data for as long as your account is active. If you close your account or request deletion:

• Your Firebase Authentication record will be deleted
• Your company's Firestore data (employees, schedules, punch logs, settings) will be permanently removed upon request
• localStorage data on your device is not automatically cleared — you can clear it manually through your browser settings

9. Your Rights

Depending on your location, you may have the right to:

• Access — request a copy of the data we hold about you
• Correction — request that inaccurate data be corrected
• Deletion — request that your data be permanently deleted
• Portability — request your data in a portable format
• Objection — object to certain uses of your data

To exercise any of these rights, contact us at the email below. We will respond within 30 days.

10. Children's Privacy

Competent Management is intended for use by businesses and their adult employees. We do not knowingly collect data from anyone under the age of 13. If you believe a minor has provided us with personal information, please contact us and we will promptly delete it.

11. Changes to This Policy

We may update this Privacy Policy from time to time. When we do, we will update the "Last Updated" date at the top of this page. Continued use of the platform after changes are posted constitutes acceptance of the updated policy.

For significant changes, we will make reasonable efforts to notify account owners directly.

12. Contact Us

If you have questions, concerns, or requests regarding this Privacy Policy or your data, please contact us: