Rotaly Privacy Policy

For the Android app Rotaly (shift work calendar), package app.rotaly.shift.work.calendar.
Effective 25 October 2026. Published by Morocode LLC.

Who we are

Morocode LLC, a limited liability company registered in Wyoming, United States, publishes Rotaly on Google Play. Our registered address is 30 N Gould St Ste R, Sheridan, WY 82801, United States. You can reach us at support@morocode.com about anything in this policy.

What the app holds, and where

Rotaly stores the following on your device, in storage that belongs to the app and that other apps cannot read:

• Your rota: the shifts you put on each day, any notes you attach to a day, and the repeating patterns you build.
• Your shift types: their names, colours, hours, breaks and alarm settings.
• Your jobs: names, hourly rates, currency and how your pay period runs.
• Your own settings: week start, how hours are shown, whether pay is displayed, the language and the theme.

All of it stays on the phone. It is not transmitted, and we have no way to see it.

There is nothing to upload

• Your rota lives in Rotaly’s own database on your phone.
• Your rota and your pay are never uploaded. The only thing Rotaly transmits is described under What the app sends to Google below. Nothing else is sent anywhere, including your rota or your pay anywhere. Android lists an app’s permissions, so you can check this yourself.
• There is no account and no sign-in. Nothing syncs, because nothing leaves the phone.
• Android’s cloud backup and phone-to-phone transfer are switched off for this app. The backup file and the CSV export in the app are the supported ways to take your rota with you, and where those files go is your decision.

What you earn is yours

If you enter an hourly rate, Rotaly works out an estimate of your pay on the device and shows it to you. That figure is never transmitted, and the pay display can be switched off entirely in Settings if you would rather not see money on your rota.

What the app sends to Google

Rotaly includes two Google services, and they are the only things it reports about itself:

• Crashlytics — when the app crashes or freezes, it sends Google a report describing where in our code it went wrong, along with the device model, the Android version, the app version and how much memory and storage were free. We read these to fix the bug. They never contain what you typed.
• Google Analytics for Firebase — counts of things like the app being opened, a screen being viewed, or a feature being used, together with the device model, language, country (worked out from the network, not from GPS — the app has no location permission), app version and a randomly generated installation identifier. It tells us how many people use the app and which parts they use.

What is never included: a shift, a note, an employer, an hourly rate, or any figure about your pay. The events are counts and names of features, not your records.

The installation identifier is a random number created when you install the app. It is not your phone's serial number, not your advertising ID and not anything that identifies you as a person. It is reset if you clear the app's data or reinstall it.

These reports are processed by Google on our behalf under Firebase's data-processing terms and Google's Privacy Policy. We can see totals and charts. We cannot see an individual person.

Turning it off. Android's own Settings › Google › Ads lets you opt out of personalised advertising, and Settings › Google › Usage & diagnostics governs what Google collects from your device generally.

Google Play

The app is distributed through Google Play, and two things there involve Google rather than us:

• Crash and performance reports. Google Play collects these from Android devices for every app, under your own Android and Google account settings, not ours. They tell us how often the app crashed. They contain no content from inside the app.
• The review prompt. When the app offers you Google Play's rating sheet, that sheet is Google's, and anything you write in it goes to Google Play, not to us.

Both are governed by Google's Privacy Policy.

Permissions, and why

• Alarms and reminders so a shift alarm rings at the right moment. This is the core of the app: an alarm you can sleep through is no use to someone who has to be at work.
• Full-screen notifications so the alarm can appear over the lock screen rather than waiting quietly in the notification shade.
• Notifications to deliver the alarm.
• Start at boot so your alarms are put back after a restart.
• Vibration and wake lock so the alarm can vibrate and turn the screen on.
• Calendar only for the optional export my rota to the phone calendar action. Android asks you for it at the moment you tap that button, and the app writes the shifts you chose into the calendar you pick. It never reads events it did not write, and it does not upload anything from your calendar. Decline it and the rest of the app works exactly as before.
• Full-screen notifications so a shift alarm can take over the screen rather than waiting in the shade.

Android asks you for the sensitive ones, and you can withdraw any of them at any time in your phone's settings. The app keeps working with whatever you allow.

Files you create yourself

When you export or back up from inside the app, the file is written wherever you choose, using Android's own file picker. From that moment the file is an ordinary document under your control, and anything you do with it, such as putting it in a cloud drive or sending it to someone, is outside the app and outside this policy.

Keeping and deleting your data

Your data stays until you remove it. You can delete individual entries or clear everything from inside the app, and uninstalling Rotaly removes its database and settings from the phone. Because nothing is ever uploaded, there is no copy anywhere else for us to delete on request.

Children

Rotaly is a general-purpose tool and is not directed at children under 13. We do not knowingly collect anything from anyone, of any age, since we collect nothing at all.

Your rights

Privacy laws such as the GDPR and the CCPA give you rights of access, correction, deletion and portability over personal data held by a company. We hold none: your data never leaves your device, so you already have complete and direct access to all of it, you can correct or delete any of it in the app, and the export feature gives you a portable copy. There is no request to make of us, and nothing we could disclose about you even if we were compelled to.

Changes to this policy

If the app ever starts handling data differently, this page will be updated before that version is released, and the effective date at the top will change. Material changes will also be described in the Google Play release notes.

Contact

Questions about this policy: support@morocode.com.
Morocode LLC, 30 N Gould St Ste R, Sheridan, WY 82801, United States