Legal

Privacy Policy

Effective 1 August 2026 · Last updated 1 August 2026

RosterArc is designed so that your core roster and pay information stays on your device. This policy explains what the app handles, when optional iCloud sharing is used, and the choices available to you.

Short version: no advertising SDKs, no behavioural analytics, no account required, and no sale of personal information.

1. Who this policy applies to

This policy applies to the RosterArc iPhone app and the website at rosterarc.pages.dev (together, the “Service”). RosterArc is an independent planning product for users aged 16 and over. It is not operated by an employer, mine operator or government agency.

Privacy questions and requests can be sent to w6828179@gmail.com.

2. Information stored on your device

The app may store the information you enter, including:

roster name, optional site label, start date, time zone, notes and work/rest cycle;
pay-planning assumptions such as hourly rate, hours, loading, travel hours and superannuation setting;
home state or territory, reminder preferences, appearance and calendar settings;
partner display name, share codes and a locally cached copy of a connected partner roster; and
an optional JSON backup or iCalendar (.ics) schedule that you choose to export.

This information is saved in the app’s protected local storage. RosterArc does not operate an account database and does not receive this local information. Your device backup settings may cause Apple to include app data in an encrypted iCloud or computer backup under Apple’s terms.

3. Optional partner sharing through iCloud

RosterArc Pro lets you publish an anonymous eight-character code so another RosterArc user can compare rest days. When you use this feature, the app sends only the schedule data needed for the comparison: a roster cycle, start date and time-zone identifier. Before upload, the app replaces the roster name and removes the site label and notes. It never includes your email address, pay assumptions or precise location.

Shared schedule records are stored in an Apple CloudKit public database under a hard-to-guess code. Anyone who has the correct code can retrieve that schedule. Do not post the code publicly. Records include an expiry date of up to one year and can be removed earlier by deleting the code or resetting app data while signed in to iCloud.

Apple processes CloudKit data as a service provider under Apple’s privacy terms. Availability also depends on your iCloud account and Apple’s service.

4. Purchases and subscriptions

Apple processes payments, trials, renewals, cancellations and refunds. RosterArc receives entitlement information needed to unlock Pro, such as whether a valid subscription exists, but does not receive your full payment-card details. Apple’s privacy policy applies to App Store transactions.

5. Notifications, holidays and widgets

Notifications: if you grant permission, fly-day reminders are calculated and scheduled locally using Apple’s notification system.
Widgets: a minimal snapshot containing the roster label, today’s shift and next transition is written to an app-group container shared only with the RosterArc widget extension.
Public holidays: holiday rules are bundled with the app and calculated locally. No request containing your state selection is sent to us.

6. Website data

The website does not use advertising cookies, analytics scripts, social tracking pixels or contact forms. Cloudflare may process standard network and security information—such as IP address, user agent, request time and requested path—to deliver the site, prevent abuse and maintain security. Cloudflare’s privacy policy governs its processing.

If you email support, Google and your email provider process the message. We use the message and reply address only to handle the request, prevent abuse and keep reasonable support records.

7. Legal bases and purposes

Where privacy law requires a legal basis, information is handled to provide features you request, perform the subscription agreement, respond to support enquiries, comply with law, and pursue legitimate security and product-support interests. Permission-based features, including notifications and publishing a partner code, remain optional.

8. Disclosure, sale and international processing

RosterArc does not sell or rent personal information and does not use it for cross-context behavioural advertising. Information may be processed by Apple (app distribution, subscriptions, iCloud and notifications), Cloudflare (website hosting and security), Google/Gmail (support email), and professional advisers or authorities where reasonably necessary or legally required. These providers may process data outside Australia under their own safeguards and terms.

9. Retention and deletion

Local app data remains until you edit it, use “Delete all data”, or uninstall the app.
Exported backups remain wherever you choose to save or share them.
Published partner records remain until removed or expired, subject to Apple’s operational backups and retention.
Support email is retained only as long as reasonably necessary to resolve the issue, maintain support history, meet legal duties or prevent abuse.

You can delete local data from More → Delete all data. To remove a published code, use the in-app deletion/reset flow while iCloud is available. Subscription cancellation does not automatically delete app data.

10. Security

RosterArc uses iOS file protection, Apple-managed StoreKit purchase verification, CloudKit transport protections and random share codes. No system can guarantee absolute security. Keep share codes private, secure your Apple Account and avoid placing sensitive personal information in optional labels or notes.

11. Your rights

Depending on your location, you may have rights to access, correct or delete personal information, object to or restrict processing, withdraw consent, or complain to a regulator. Most app data is directly accessible and controllable on your device. For information contained in support email or for help with a CloudKit code, contact us with enough detail to locate the record. We may need to verify that you control the relevant email address or code.

Australian users may contact the Office of the Australian Information Commissioner if a privacy concern is not resolved.

12. Children

The Service is not directed to children under 16, and we do not knowingly collect their personal information. A parent or guardian who believes a child has contacted us should email support.

13. Changes

We may update this policy to reflect feature, provider or legal changes. The effective date above will change, and material changes may also be communicated in the app. Continued use after an update means the revised policy applies to future use.

14. Contact

Email: w6828179@gmail.com
Product: RosterArc
Primary market: Australia