Privacy Policy

Last Updated: November 18, 2025

1. Introduction

RosterRocket ("we," "our," or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our mobile application (the "App").

By using RosterRocket, you agree to the collection and use of information in accordance with this policy.

2. Information We Collect

2.1 Information You Provide

When you use RosterRocket, you may provide us with:

• Account Information: Name, email address, mobile phone number, and profile photo
• Organization Data: Company/team name, staff details, roster groups, and duty codes
• Roster Data: Work schedules, shift assignments, hours worked, leave records
• Staff Information: Employee names, contact details, roles, hire dates, hourly rates

2.2 Automatically Collected Information

• Device Information: Device type, operating system version, unique device identifiers
• Usage Data: App features used, session duration, interaction patterns
• Firebase Analytics: Anonymous usage statistics to improve app performance

2.3 Push Notification Tokens

We collect Firebase Cloud Messaging (FCM) tokens to send you roster notifications and updates.

3. How We Use Your Information

We use the collected information for:

• Core Functionality: Creating and managing rosters, scheduling shifts, tracking hours
• Synchronization: Syncing data across your devices via Firebase
• Notifications: Sending push notifications about roster updates and changes
• Analytics: Generating reports on hours worked, labor costs, and workload fairness
• Customer Support: Responding to your inquiries and providing assistance
• App Improvement: Analyzing usage patterns to enhance features and performance
• Compliance: Meeting legal and regulatory requirements

4. Data Storage and Security

4.1 Local Storage

Your data is stored locally on your device using SwiftData (Apple's native database framework). This data remains on your device and is protected by iOS security features.

4.2 Cloud Storage

We use Firebase Firestore (Google Cloud Platform) to sync your data across devices. Your data is:

• Encrypted in transit using TLS/SSL
• Encrypted at rest on Google's servers
• Stored in secure data centers with industry-standard protections
• Organized by unique organization IDs to prevent unauthorized access

4.3 Security Measures

• PIN-based authentication (last 4 digits of mobile phone)
• Firebase Authentication for secure user sessions
• Organization-based access control (staff can only view their own organization's data)
• Role-based permissions (managers vs. staff members)

5. Data Sharing and Disclosure

5.1 Within Your Organization

Your roster data is shared with other members of your organization (managers and staff) as necessary for the app's functionality.

5.2 Third-Party Services

We use the following third-party services:

• Firebase (Google): Cloud database, authentication, analytics, and push notifications
• RevenueCat: Subscription management and payment processing (does not store payment details)

5.3 We Do NOT Sell Your Data

We do not sell, rent, or trade your personal information to third parties for marketing purposes.

5.4 Legal Requirements

We may disclose your information if required by law, court order, or government regulation.

6. Your Rights and Choices

6.1 Access and Update

You can access and update your personal information directly in the app through the User Profile section.

6.2 Data Export

Managers can export roster and staff data to CSV format at any time through the app's Settings.

6.3 Data Deletion

You can request deletion of your data by:

• Deleting your account through the app settings
• Contacting us at rosterrocket@zohomail.com

Upon deletion, your data will be removed from our servers within 30 days, except where retention is required by law.

6.4 Push Notifications

You can disable push notifications through your device's iOS Settings at any time.

7. Children's Privacy

RosterRocket is not intended for use by children under 13 years of age. We do not knowingly collect personal information from children under 13. If you believe we have collected information from a child under 13, please contact us immediately.

8. International Data Transfers

Your data may be transferred to and stored on servers located outside your country of residence. By using RosterRocket, you consent to the transfer of your data to countries that may have different data protection laws than your jurisdiction.

Firebase servers are located in Google Cloud Platform data centers worldwide, with data residency options available.

9. Data Retention

We retain your data for as long as:

• Your account is active
• Needed to provide you with services
• Required by law or for legitimate business purposes

Free tier users: Roster history retained for 12 months

Premium users: Extended history retention (>12 months)

10. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. We will notify you of any material changes by:

• Posting the new Privacy Policy in the app
• Updating the "Last Updated" date
• Sending a push notification (for significant changes)

Your continued use of the app after changes constitutes acceptance of the updated policy.

11. Contact Us

If you have questions or concerns about this Privacy Policy or our data practices, please contact us:

• Email: rosterrocket@zohomail.com
• Support: Help Center

12. California Privacy Rights (CCPA)

If you are a California resident, you have additional rights under the California Consumer Privacy Act (CCPA):

• Right to know what personal information is collected
• Right to know if personal information is sold or disclosed
• Right to say no to the sale of personal information (we do not sell data)
• Right to access your personal information
• Right to request deletion of personal information
• Right to equal service and price (no discrimination)

To exercise these rights, contact us at rosterrocket@zohomail.com

13. European Privacy Rights (GDPR)

If you are in the European Economic Area (EEA), you have rights under the General Data Protection Regulation (GDPR):

• Right to access your personal data
• Right to rectification of inaccurate data
• Right to erasure ("right to be forgotten")
• Right to restrict processing
• Right to data portability
• Right to object to processing
• Right to withdraw consent

To exercise these rights, contact us at support@rosterrocket.app