1. Data stored on your device

Store names, employee profiles, brand names and logos, shifts, leave and unavailable-date records, schedules, calendar settings, and appearance preferences are saved on the current device. Employee phone numbers, email addresses and photos are optional. You can reposition and zoom profile photos before cropping. Images are resized, and source metadata such as photo locations is removed. The system photo picker only provides images you choose; the app does not request access to your entire photo library or contacts. Saving schedule images requests add-only photo permission to write the current preview to Photos.

2. Collection and sharing

• We do not require an app account, upload employee contact details or chosen images to a developer-operated server, or access your contacts or precise location.
• We do not use advertising, cross-app tracking, or third-party analytics.
• We do not sell your scheduling data. iCloud sync is provided by Apple and is subject to its iCloud terms and privacy policy. Your private database is not visible to the developer through the developer portal.

iCloud sync

When sync is enabled, employee contact details, photos and brand information are also saved in your private iCloud database. Images sync separately. After an image is replaced or removed, its old file may remain in local cache and your private cloud to support other devices that have not synced yet. Uninstalling deletes local cache. Automatic data backups do not contain image files; restoring a backup retains current photos and logos. Schedule images you choose to share can contain your brand logo and store name, but not employee phone numbers or email addresses.

Pro supports iCloud sync, which is on by default after unlocking and can be turned off in Settings → iCloud Sync. Local scheduling remains available without an iCloud account, an internet connection or sufficient cloud storage. Language, appearance and the currently selected store stay on each device. When the Apple Account changes, sync is paused and local data is retained to avoid uploading one account’s data to another. We do not read your Apple Account email or password.

3. Feedback email

The Feedback option opens your email app. Only the message and attachments you choose to send are delivered through your email provider and used to respond to your request.

4. Deletion and retention

Deleting an employee or shift prevents it from being used in new schedules and clears related schedules from the next day onward. Employee and shift names remain in past schedules on this device so published schedules stay complete. Deleting a store permanently removes its employees, shifts, schedule history, and unpublished changes. With sync enabled, deletions also sync to other devices using the same Apple Account. Turning sync off keeps existing local and iCloud data. Uninstalling removes local data but does not automatically delete data already synced to iCloud. After reinstalling, enable sync with the same Apple Account to retrieve cloud data. Unsynced local changes cannot be recovered from iCloud. A local migration backup is kept before initial sync; this local backup is also removed when you uninstall.

5. Updates and contact

We will update this policy when features or data practices change. Questions may be sent to bob.xiamr@gmail.com.