Rotabee Privacy Policy

Ataberk Büyükgöksel, sole proprietor trading as ELDA, Ostlandring 47, 25335 Elmshorn, Germany. Privacy and support: info@el-da.com.

This notice describes Rotabee's Free/Pro version prepared for release. Advertising and purchases are enabled only after the corresponding store, verification and privacy setup is complete. It concerns the mobile app; the separate ELDA website privacy notice applies when you visit this website.

Shifts, notes, salary and tax settings, leave, payslips and selected documents are stored and processed in the app's private device storage. Rotabee has no app account and no automatic cloud synchronization. ELDA cannot retrieve working records that you have not shared. Calendar, payroll and document contents are not sent to the licence verifier or supplied as advertising targeting data.

Free includes unlimited core records, calculations, complete history and backup/restore. Processing needed to provide a feature you request is based on Article 6(1)(b) GDPR. Statutory obligations, where applicable, use Article 6(1)(c); necessary fraud prevention and service security use Article 6(1)(f).

Apple or Google processes checkout, payment and refunds under its own privacy terms. Rotabee does not receive your payment-card details. To verify or restore Pro, the app sends the platform, product identifier and Google purchase token or Apple signed transaction to ELDA's HTTPS licence verification service. Work records are not included.

The service checks the purchase with the relevant store and returns a digitally signed entitlement. Verification records contain encrypted purchase proof, transaction references, a pseudonymous licence identifier, entitlement status and verification timestamps. Microsoft Azure in the EU is the selected verification hosting provider. No work-data cloud service is provided. A previously verified lifetime right works offline; a confirmed refund is applied when a device can successfully recheck the purchase.

Verification evidence is kept while required to provide and restore the lifetime licence. Following a verified erasure request or the end of that purpose, evidence is deleted unless an applicable legal duty requires retention. Minimal revocation or fraud records may be retained where necessary to prevent reuse of a refunded purchase; access and retention are limited to that purpose. Contact support with sufficient order information to establish ownership; do not send full payroll documents.

Eligible Free users may see Google AdMob ads: an adaptive banner fixed at the top of the calendar, multi-day planning, earnings, settings and list screens; native ads between content sections, in the agenda list and at the end of screens; interstitial ads at natural screen transitions; app-open ads when returning to the app after some time away; and rewarded ads only when you choose to watch one for a temporary benefit, such as a period without ads. Ads are not shown inside the day sheet or shift editor, during clock-out, in pay settings, payslip, document, backup, sharing, onboarding or purchase screens, or to Pro users, and full-screen ads never interrupt entering or saving a record. Rotabee requests non-personalized ads by default. This does not make advertising anonymous: Google may process IP address, approximate location, device/app identifiers, ad interactions and technical diagnostics for delivery, measurement, security and fraud prevention. Google provides its own privacy information at https://policies.google.com/privacy and advertising controls at https://myadcenter.google.com/.

Through Google AdMob mediation, the following ad networks may compete to deliver an ad and, when they do, receive the same categories of technical data for that ad: AppLovin (https://legal.applovin.com/privacy/), Unity Ads (https://unity.com/legal/game-player-and-app-user-privacy-policy), Mintegral (https://www.mintegral.com/en/privacy), Liftoff Monetize (https://liftoff.ai/privacy-policy/), Pangle (https://www.pangleglobal.com/privacy/enduser-en) and Meta Audience Network (https://www.facebook.com/privacy/policy). Each network processes this data under its own privacy policy.

Google's User Messaging Platform (UMP) obtains the applicable privacy choices before advertising is initialized. The consent message lists every ad partner; refusing consent for a partner prevents that partner from receiving data through Rotabee. Where storage consent is required, refusing it prevents ads while core features remain available. Optional consent-based processing uses Article 6(1)(a) GDPR. You can withdraw or change the choice through advertising privacy options in Settings. Pro is ad-free. Rotabee does not request cross-app tracking permission, directly access IDFA, request precise location or send working records as targeting data.

Camera or photo access is requested only when you choose to photograph or select a document. Refusing this permission leaves manual records available. OCR recognizes text on-device; Google's ML Kit may process technical SDK usage and diagnostic information under Google's SDK privacy terms. You must review recognized values before saving.

Crash reporting is disabled when no Sentry endpoint is configured. If a future build enables it, the optional diagnostics preference controls reporting after opt-in. Work attachments, screenshots, breadcrumbs and automatic session/performance tracking are excluded. The notice and store declarations are updated before enabling a new processor or data flow.

Full backups contain readable records, pay information and document bytes. Compression is not encryption. Protect backups and choose a trusted destination. Rotabee does not automatically upload them. A file/share provider you select, such as iCloud Drive or Google Drive, processes the selected copy under its own policy. Android automatic app cloud backup is disabled. iOS device backups and Keychain persistence follow your operating-system settings.

Settings → Delete all my data erases local working records, managed documents and working preferences while preserving the store purchase and secure licence. Exports outside the app must be deleted separately. Uninstalling normally removes private work data; it does not cancel a purchase, remove exported copies or erase verification records held by ELDA.

Apple, Google, Microsoft Azure, the ad networks named above and any share provider you choose process only the data relevant to their role. Their international services can involve processing outside the EEA, including the United States and, for some ad networks, Asia (for example Singapore or China). Applicable adequacy decisions and/or standard contractual clauses and the providers' contractual safeguards govern eligible transfers; contact ELDA for information concerning processing performed on its behalf.

Subject to the GDPR, you can request access, correction, erasure, restriction and portability, object to eligible legitimate-interest processing and withdraw optional consent prospectively. You may complain to the Unabhängiges Landeszentrum für Datenschutz Schleswig-Holstein or another competent supervisory authority. External links process the connection under the destination's policy. Contact info@el-da.com for privacy requests.