Privacy Policy

1. What this covers

This Privacy Policy explains what information RobinRun Scheduling ("RobinRun", "we") collects through the app and staff PWA, why we collect it, and how it's protected. It applies to restaurant owners, managers, staff, and job applicants whose information is entered into the Service.

2. Information we collect

• Account info — name, email, phone number, and login credentials.
• Employment info — role, wage rate, availability, hire date, schedules, and shifts.
• Time-clock data — punch timestamps, and, only at the moment you clock in or out, your device's location — used solely to confirm you were at the restaurant, not to track movement afterward.
• Pay-related data — hours worked, overtime, tips, and the figures used to prepare payroll exports.
• Messages and requests — announcements, task-list completions, and time-off/swap/pickup requests you submit.
• Applicant info — name, contact details, and notes entered by a manager for a hiring pipeline.
• Device info — a push-notification token if you enable notifications on the staff app.

3. How we use it

Information is used only to operate the Service for the restaurant it belongs to: building and publishing schedules, recording and verifying clock-ins, preparing timesheets and payroll export figures, sending announcements and push notifications, and running the hiring pipeline. We don't use your data for advertising, and we don't sell personal information to anyone.

4. Who can see what

Access is restricted by role at the database level, not just in the app's screens:

• Staff can see their own schedule, punches, pay figures, and profile, plus colleagues' names and shifts at their location.
• Managers and owners can see everyone's schedule, wage rates, and timesheets at the locations they manage.
• A restaurant's data is never visible to another restaurant using the Service.

5. Where and how data is stored

Data is stored with Supabase, our infrastructure provider, hosted in the United States (AWS, us-west-2 region). If your business operates outside the United States, this means your staff data is transferred to and stored in the U.S. Data is encrypted in transit and at rest, and protected by row-level access policies enforced by the database itself. We don't maintain a separate copy of your data outside this infrastructure.

6. Sharing

We don't sell or rent personal information. We share data only with the infrastructure providers needed to run the Service (currently Supabase, for the database, authentication, and file storage), and only to the extent needed to provide the Service to you. We may disclose information if required by law.

7. Retention and deletion

We keep data for as long as your account is active. If a restaurant closes its account, or a staff member is removed, we'll delete or anonymize their personal information within a reasonable period, except where we're required to retain payroll or employment records for longer under applicable law, or where a punch or wage record needs to stay in place for the append-only audit trail the timesheet system relies on.

8. Your choices and rights

Staff can update their own name and phone number directly in the app at any time. To request a copy of your data, a correction, or deletion beyond what's available in-app, contact us at huzqadri360@gmail.com. For an employee, some requests may need to go through the restaurant that employs them, since they control that account.

9. Location data

If a restaurant enables geofenced clock-in, your device's location is checked once at the moment you punch in or out, compared against the restaurant's location, and stored with that punch. Location isn't collected continuously or in the background.

10. Children's information

RobinRun isn't directed at children. Some restaurant staff may be minors under applicable employment law; in that case, their account is created and managed by their employer, who is responsible for obtaining any consent required by law.

11. Changes to this policy

We may update this policy as the Service develops. We'll post changes here with a new "last updated" date.

12. Contact

Questions about this policy or your data can be sent to huzqadri360@gmail.com. See also our Terms of Service.