Privacy Policy (RODO/GDPR)
Last updated: 2026
1. Data Controller
The Data Controller of the information collected through this application is the independent developer hosting the project.
2. Data We Collect
We collect the minimum amount of data required to provide the service:
- Email address (for authentication)
- Encrypted passwords (managed securely by Supabase)
- Basic profile information you provide (name, role)
- Shift and operational data entered into the system
3. How We Use Your Data
Your data is used strictly for authentication and to provide the functionality of the platform (e.g., tracking shifts, managing restaurant roles). We do not sell your data to third parties. We do not use your data for targeted advertising.
4. Third-Party Processors
We use trusted third-party infrastructure providers that comply with GDPR:
- **Supabase** (Database and Authentication)
- **Vercel** (Application Hosting)
5. Your GDPR Rights
Under the General Data Protection Regulation (GDPR) / RODO, you have the right to:
- Access your data
- Rectify inaccurate data
- Request deletion of your data (Right to be Forgotten)
- Restrict or object to processing
- Data portability
To exercise these rights, please contact the administrator or use the account deletion features inside the platform (if available).