Privacy policy

Your employer or the business that invited you decides what workplace information is recorded in its Rosterly workspace and is responsible for that information. Rosterly processes it on the workplace’s behalf to provide the service.

For questions about this policy or your information: Email alexander.turkmani@gmail.com.

Account: your email address, name and a password stored only as a salted scrypt hash. If your workplace uses cloud sign-in, your sign-in is handled by our authentication provider and we store its account identifier.

Work records: your role, skills, locations, shifts, shift swaps and release requests, clock-in, break and clock-out times, timesheet corrections and approvals, leave and unavailability requests with the reason you enter, tasks, team announcements and read receipts, and a record of actions taken in the workspace.

Pay: base hourly rates entered by managers. Rates are visible only to managers and are used to estimate wages and export approved hours.

Workplace documents: documents and policies your managers add, including any files they upload (stored with your workspace and visible to its members), and which policies you have acknowledged.

Profile photo (optional): if you add one, it is re-encoded on our server, which removes location and other embedded metadata.

Subscription: for the workspace owner, the plan, its status and renewal date, and a reference from Google Play or Stripe identifying the purchase. Payment card details are entered with Google Play or Stripe and never reach Rosterly.

Device: your Light or Dark theme choice is stored on your device. Your sign-in session is kept in secure device storage in the app, or in a secure cookie on the web.

Please do not put medical or other sensitive details in leave reasons or announcements; a short description is enough.

Rosterly has no advertising, no third-party analytics or tracking SDKs, and does not access your location, contacts, camera, microphone or files beyond a photo you choose. We do not sell personal information.

To run your workplace’s workspace: showing rosters, recording time, routing requests to managers, sending in-app and phone notifications, estimating base pay and exporting approved timesheets for payroll; and to keep the service secure, including limiting repeated sign-in attempts.

People in your workplace see information according to their role: managers see the full roster, timesheets, leave and pay rates; employees see published shifts, team names and photos, announcements and their own records.

Service providers that host Rosterly: Vercel (website delivery and request routing) and Fly.io (application server and database, hosted in Sydney, Australia). If your workplace enables cloud sign-in, Supabase handles authentication. If you choose Google sign-in, Google confirms your identity.

Payments: Google Play (subscriptions bought in the Android app) and Stripe (subscriptions bought on the website) process payments and tell Rosterly the subscription status. Each handles your payment details under its own privacy policy.

Phone notifications: if you allow notifications in the Android app, the notification text (for example that a roster was published or a request was decided) and a device token are sent through Expo’s push service and Google Firebase Cloud Messaging to your phone. Signing out or deleting your account removes the device token.

If your workplace enables the roster assistant, Google’s Gemini service receives only anonymous staffing totals (hours and coverage counts). It never receives names, contact details or individual records.

We disclose information if required by law. Because providers may operate outside your country, your information may be processed in Australia, the United States or other countries with appropriate safeguards.

Information is kept while your account and workspace exist. Recent history is shown in the app; older records stay available to managers for payroll.

You can delete your account in the app under Account & privacy, or follow the steps on the account deletion page. Deleting an employee account removes your profile, photo, timesheets, leave, tasks, announcements you wrote, notifications, requests and activity records from the workspace; shifts you were assigned become open shifts. A workplace owner deleting their account deletes the entire workspace.

If a manager removes you from a team, your sign-in stops working and future shifts are unassigned; worked timesheets remain with the workplace for payroll and legal record-keeping.

Backups are kept for a limited period, no longer than 30 days, and then deleted.

You can export your personal data from Account & privacy, correct your details with your manager, and delete your account at any time. Depending on where you live, you may also have rights to object to or restrict processing and to complain to a data protection authority, such as the Office of the Australian Information Commissioner or the UK Information Commissioner’s Office.

Connections are encrypted with HTTPS. Passwords and session tokens are stored only as hashes, sessions expire after inactivity and are revoked when you change your password, and access is restricted to members of each workspace.

Rosterly is a workplace tool for people of working age and is not directed at children under 16.

We will update this page when our practices change and show the date of the latest version above.