Privacy policy

Shift Planner · Android · com.gibses.gestioneturni

Effective from 2026-10-22

Summary

• Employees, shifts, absences, hours and notes are saved only in the app's storage on your phone. We do not receive, see or store them.
• The app does not send your data anywhere. The only external exchange the app may perform is checking your subscription status with Google Play on the device. It contains no advertising, analytics or tracking tools, and has no account of its own.
• Data leave the phone only when you share a file yourself, to the app you choose.
• Where a subscription applies, it is bought and managed in Google Play. Google processes the payment; we receive the transaction data, never your card details or the data you enter in the app.

Who we are

GiBSeS OÜ, registry code 17231761, VAT number EE103040763, Juhkentali 8, 10132 Tallinn, Estonia. Privacy questions: privacy@gibses.com.

We develop and distribute the app and sell the subscription. The data you enter in the app never reach us, so we are neither the controller nor a processor of those data. We are the controller only of the subscription data we receive from Google Play and of the emails you send us.

What data the app handles, and where

The app is used to plan shifts and record hours worked. Depending on how you use it, it contains:

• employee details used for planning: name, team, role, duties and qualifications, contracted hours, employment status (active, not yet hired, left);
• planned shifts and the holiday calendar;
• absences: leave, sickness or injury, unjustified absence, suspension;
• hours actually worked: lateness, overtime and daily notes, with a log of the changes.

These data are saved in the app's private storage on the phone, which Android does not make readable to other apps. The app excludes its data from Android backup: they are not copied to the cloud backup and not transferred when you set up a new phone. If you uninstall the app or reset the phone, the data are deleted. To keep a copy, or to move a plan to another phone, export it as a .turni file.

Health data: sickness and injury

The fact that an employee is absent because of sickness or injury is data concerning health, a special category of personal data under Article 9 of the GDPR. The app keeps it only on the phone, and limits where it appears in exported files:

• images of the shift table: sickness and injury always appear under a neutral label, "excused absence";
• hours in CSV and the monthly payroll sheet (Excel): you choose each time you export. By default the neutral label is used; you can choose to show sickness, an option meant only for files you send to whoever runs payroll. The choice applies to that one export;
• .turni file: it holds the complete plan, including the type of each absence, because it is used to reopen the plan in the app.

Free-text notes you write (for example in the daily hours detail, which also appear in the change log) go into the exported files exactly as written: do not put health information in them.

Send the .turni file, and any hours or payroll file that shows sickness, only to people who need them, over channels you trust. Do not post them in group chats, and delete copies you no longer need.

The app has no password of its own: anyone who can unlock the phone can open it. Protect the phone with a screen lock.

Sharing and exporting

You can export the plan (.turni), hours and the change log (CSV), the monthly sheet (Excel) and images of the shift table. When you share, the app writes a temporary copy in a folder reserved for sharing and opens the Android share sheet. You choose where the file goes: a messaging app, email, cloud storage or any other app on the phone. From then on the file is handled by the app or service you chose, under its own terms and privacy policy. We have no access to it.

Temporary copies stay readable for one hour, so that the receiving app can finish reading them after the share sheet closes. Once the hour has passed they are deleted the next time the app starts or the next time you share a file.

The app can also open .turni files you receive, when you tap them in a messaging app, in email, in cloud storage or in a file manager. It reads the file only when you open it, and only on the phone.

Subscription and payments

Shift Planner is distributed on Google Play as a subscription with a 30-day free trial. The subscription is bought in Google Play with your Google account. Google processes your payment details (card or other payment method, billing address, Google account) as an independent controller, under the Google privacy policy. We never receive your card details.

Where a subscription applies, the app checks its status (free trial or active subscription) through the Google Play app on your phone, which in turn contacts Google. This check concerns only the subscription: the data you enter in the app are never part of it.

Through Google Play Console we receive data about each subscription transaction: order number, subscription purchased, price, taxes and currency, country of purchase, and the dates and status of the trial, renewals, cancellation and refunds. Google decides which data it makes available to developers; they never include the data you enter in the app.

We use these data to manage subscriptions, answer your requests and handle refunds, because this is needed to perform the contract with you (Article 6(1)(b) GDPR), and to keep our accounts and meet our tax obligations, because the law requires it (Article 6(1)(c) GDPR). Accounting records are kept for as long as Estonian accounting law requires (seven years); other subscription data no longer than needed for those purposes.

Statistics from Google Play

Google Play Console also shows us statistics that Google collects, not the app: aggregated figures on installs, uninstalls and ratings, and, in Android vitals, reports of crashes and freezes from phones whose users allowed them to share usage and diagnostic data with Google. Crash reports contain technical data such as the phone model, the Android version and the point in the app where the error occurred. They do not contain the data you enter in the app and do not tell us who you are. We use them only to fix errors and improve the app.

Roles under the GDPR

If you use the app to manage staff, the employer (you, or the organisation you work for) is the controller of the employees' data. The employer decides why the data are processed and on which legal basis, informs the employees, decides how long to keep the data, keeps the phone secure and chooses who receives exported files.

GiBSeS OÜ does not process these data on the employer's behalf, so it is not a processor under Article 28 GDPR. Employees who want to exercise their rights (access, rectification, erasure and the others) should contact their employer: we cannot see or change the data.

What the app does not do

• It does not send your data anywhere, neither to us nor to third parties. The only external exchange the app may perform is checking your subscription status with Google Play on the device.
• It does not ask for access to contacts, location, camera, microphone or other data on the phone.
• It contains no advertising, analytics, crash-reporting or tracking components of its own.
• It has no account or registration of its own: the subscription is linked to your Google Play account.

The app is downloaded and updated through Google Play, which Google runs under its own terms and privacy policy.

Your choices and rights

You can change or delete the data in the app at any time: delete a plan, or uninstall the app to delete everything. We hold none of these data, so there is nothing for us to show, correct or delete.

For the subscription data we receive from Google Play you have the rights of access, rectification, erasure, restriction, objection and data portability, within the limits set by the GDPR. Records that the law requires us to keep cannot be erased before the end of the retention period. Write to privacy@gibses.com. You manage or cancel the subscription yourself in Google Play.

If you write to us by email, we use your address and message only to reply, and keep them only as long as the conversation needs.

You can lodge a complaint with a data protection authority: in Estonia, the Data Protection Inspectorate (Andmekaitse Inspektsioon, www.aki.ee), or the authority of the country where you live or work.

Changes

If a future version changes how the app handles data, for example by adding online features, we will update this page before that version is released and change the date at the top. See also the terms of use.