Privacy policy

RotaGuard is built to keep your pay information private. This reflects how the app works today.

Local-first by design

RotaGuard keeps your profile, rota, pay estimates, payslip checks and notes on your device. That rota and pay data is not synced to our servers.

Account and authentication

If you sign in with Apple or Google, we store an account identifier (and name or email if you share them) on our backend so we can secure your account, manage subscriptions and delete your account when you ask. Session tokens stay on your device.

What we don't collect from your rota

We never upload your salary figures, tax code, shift notes, employer or hospital name as part of normal rota use. Those stay on your device.

Analytics

If analytics is enabled, we send only non-financial, anonymous usage events (for example: onboarding completed, paywall seen). We never include any pay, payslip, tax or personal financial values.

Payslip scanning

If you scan a payslip, the photo is sent to our backend and a processing provider to read the totals. The photo isn't kept on our servers; the figures read from it are held encrypted for up to 24 hours so a retry isn't counted twice. If you save the check, a copy of the photo stays on your device.

Subscriptions

Purchases are processed by the Apple App Store or Google Play. We receive subscription status through RevenueCat but not your payment card details.

Crash reports

If crash reporting is enabled, we may receive technical diagnostics about app failures. Tokens, payslip images and financial figures are not intended to be included.

Public holidays

The app may fetch UK public-holiday dates from GOV.UK to detect enhancements. No personal data is sent in that request.

Your control

You can export a backup, import it on another device, sign out, and permanently delete your online account and local data from Profile at any time. Deleting the account does not cancel a store subscription — cancel that in the App Store or Google Play.

Last updated: June 2026