Effective date and last updated: October 26, 2026
This privacy policy applies to the Android app Work Shift Calendar & Planner (package name com.umbrabyte.calendarioturnos), developed and published by Umbrabyte Apps. On the home screen it appears as Work Shift Calendar in English and Mi calendario de turnos in Spanish; its internal project name is Calendario Turnos. The policy applies to all versions of the app distributed through Google Play from the effective date above and complements the general Umbrabyte Privacy Policy.
Plain language summary: Your shifts, notes, pay settings and preferences are stored on your phone. There is no account, no Umbrabyte server, no advertising, no analytics and no sale of data. Data only leaves your device through steps you take or settings you control: saving a backup, report or share code, syncing shifts to a device calendar, emailing support, or Android backup to your Google account. Google Play processes purchases, confirms your plan each time the app starts, and handles update checks and the rating prompt.
This summary does not replace the detailed terms below.
1. Scope and key facts
- Local storage: your rota, day notes, pay settings and preferences stay in the app’s private storage on your device.
- Network: the app’s own code does not connect to the internet. Network traffic comes only from the Google Play libraries (Billing, In-App Updates and In-App Review), which communicate with Google.
- No account: there is no sign-in and no Umbrabyte account.
- No ads or trackers: no advertising, analytics, crash-reporting or Firebase SDK, and no use of the Advertising ID.
- No sale of data: Umbrabyte does not sell, rent or share personal data.
- How the app is paid for: the free plan has limits shown in the app. Pro is offered as optional monthly and annual subscriptions (the annual plan may include a free trial) and a lifetime purchase, all through Google Play.
2. Controller
The developer and data controller for the data Umbrabyte receives directly (support emails and the order information Google Play provides to developers) is:
- Developer / Sole Proprietor: Cristian Donet Segura
- Studio Trade Name: Umbrabyte Apps
- Registered Business Address: Calle Pintor Camarón, nº 24, 12560 Benicasim, Castellón, Spain
- Tax Identification Number (NIF): 20468489F
- D-U-N-S® Number: 374071851
- Privacy and Support Contact: support@umbrabyte.app
- Website: https://umbrabyte.app
You decide what you write in shift names and day notes. If you record information about other people, such as colleagues, you are responsible for that data.
3. Data and permissions
3.1 Information stored on your device
| Data category | Contents | Where it is stored |
|---|---|---|
| Rota | Shifts (name, abbreviation, color, times, optional split block) and calendar days (up to two shifts, day notes, extra income, extra minutes) | App database (Room), not encrypted |
| Pay settings | Currency, hourly and overtime rates, overtime threshold, monthly target, night and weekend bonuses, withholding percentage, fixed deduction, holidays, per-shift bonuses | Encrypted preferences (AES-256-GCM, key in the Android Keystore) |
| Pro status | Whether Pro is active, whether Play purchases are available, dismissed renewal reminders, a local unlock flag used for app review | Encrypted preferences |
| Settings and app state | Theme, language, calendar display options, haptics, reminder and widget settings, Pro screen counters, dismissed banners, tutorial completed, time of the last JSON backup | Normal preferences, not encrypted |
| Calendar sync | Selected calendar ID only (not its name or account), on or off, last sync time, event count, last error | Normal preferences, not encrypted |
| Prompt records | Rating requests (dates, count, recent days of use) and the last update prompt (version, date) | Private app files (DataStore), not encrypted |
| Background jobs | Pending calendar sync jobs, without rota content | Android WorkManager database |
Hour totals, earnings estimates, rest and circadian-health warnings and vacation suggestions are calculated from your shift times when needed and are not stored; the app reads no health or sensor data. Calendar and account names are read only to show the calendar picker. In rare cases, for example if the Android Keystore fails, pay settings and Pro status are kept in the normal preferences without encryption.
3.2 Android permissions
| Permission | Why the app uses it |
|---|---|
Notifications (POST_NOTIFICATIONS) |
Shift reminders before a shift and, optionally, the evening before. These are the app’s only notifications. Requested when you turn reminders on. |
Exact alarms (SCHEDULE_EXACT_ALARM) |
Deliver reminders on time. Without it, reminders can be less precise. |
Start at boot (RECEIVE_BOOT_COMPLETED) |
Reschedule reminders after a restart, an app update or a date, time or time-zone change, only if reminders are on. |
Calendar (READ_CALENDAR, WRITE_CALENDAR) |
List your calendars, read existing events to avoid duplicates and mark busy dates, create shift events, and change or delete only the app’s own sync events (section 3.5). |
Camera (CAMERA) |
Scan a colleague’s QR code, requested when you tap scan. Frames are analyzed in memory; no photo is taken, saved or sent. |
Hide overlays (HIDE_OVERLAY_WINDOWS) |
On Android 12 and later, hides other apps’ floating windows over the app to prevent tapjacking. |
Billing (com.android.vending.BILLING) |
Google Play prices, purchases and plan checks. |
INTERNET, ACCESS_NETWORK_STATE, WAKE_LOCK, FOREGROUND_SERVICE and an internal AndroidX receiver permission |
Added by the Google Play Billing library, Android WorkManager and AndroidX. The app’s own code does not connect to the internet (its only connection is a check on the device itself, see section 7) and never runs a foreground service. |
The app can open Android’s battery-optimization settings but does not request an exemption itself. It does not request location, contacts, phone, SMS, microphone, photos, media or files, body sensors, accessibility or the Advertising ID (AD_ID). You can revoke permissions at any time in Android Settings; only the related feature stops working.
3.3 What can appear on the lock screen
Reminders use public visibility and show the shift name, so they may appear in full on the lock screen. The Pro widgets (month, week and today) show dates and shift abbreviations and colors, and can be placed on the lock screen where Android supports it. You can hide the app’s lock-screen notifications or remove a widget in Android settings.
3.4 Backups, reports and share codes you create
- JSON backup: saved where you choose with Android’s file picker (device storage, a cloud drive, and so on). It contains all shifts, calendar days, day notes, extra income and minutes and your pay settings (currency, rates, withholding, deductions, holidays and bonuses), in plain text and not encrypted. Restoring a backup replaces all current data after you confirm.
- PDF report (Pro): saved where you choose. It contains dates, shift names and times, hour totals and rest warnings, and always includes your day notes. Earnings estimates are added only if you select them.
- Share code (Compare Calendars): one month of your schedule as an on-screen QR code, a JSON file or text copied to the clipboard (where your keyboard or other apps may read it). It contains dates and each shift’s name, abbreviation, color and times, but no notes, pay data or device identifiers. Shift names are free text, so check what they reveal. A colleague’s code that you scan or open from a file is used only in memory and is not saved.
3.5 Device calendar
The app works with Android’s calendar provider on your device:
- Export: creates events titled with the shift name in a calendar you choose. It first reads the titles and times of existing events in that calendar and date range to skip duplicates (automatic sync does the same). It never deletes events.
- Automatic sync (Pro): after each change, keeps events up to date from about one month in the past to about one year ahead. It only changes or deletes events it created for sync, and removes them from the previous calendar if you switch calendars. Turning sync off, or losing Pro, leaves existing events in place.
- Compare with Google Calendar (Pro): reads only the start and end times, not the titles, of events in a calendar you choose, to mark busy dates. Nothing is saved.
If the calendar belongs to an online account (Google, Microsoft, Samsung, an employer), that provider syncs the events to its servers under its own terms. If your device has no calendar, the app can open Google’s account sign-up page or Android’s add-account screen; what you enter there goes to that provider, not to Umbrabyte.
3.6 Support email
Pro users can tap App support in Settings to open their email app with a message to support@umbrabyte.app. The subject contains the Pro product and app version, and the end of the body contains your Google Play order number, Android version, device manufacturer and model, and app language. You can edit or remove them before sending. We receive your email address, name, message, attachments and the details you choose to send.
3.7 Android backup and device transfer
If backup is on in your device settings, Android may copy the app’s database (rota, notes, extra income and minutes, background job records) and its normal preferences to your Google account, and the same data may be copied during a device-to-device transfer. Cloud backup is only allowed when the device can encrypt it end to end (client-side encryption, normally tied to your screen lock). The encrypted pay settings and Pro status, calendar sync settings, the tutorial flag and the prompt records are not included, except pay settings and Pro status under the rare fallback in section 3.1. Umbrabyte cannot access these backups. After a restore, pay settings return only from a JSON backup and Pro is restored from Google Play.
3.8 Data Umbrabyte does not receive
Umbrabyte never receives your rota, notes, pay settings, calendar events, camera images, exported files, device identifiers or payment details. We only receive what you email us and the order information Google Play makes available to developers.
4. External services
4.1 Google Play Billing
Purchases are processed by Google Play Billing (Google LLC / Google Ireland Limited) through the Google Play Store app. To show prices and keep your plan active, the app asks Google Play for your purchases when it starts (including brief background starts, for example to deliver a reminder or refresh a widget) or returns to the foreground, whether or not you have bought anything. Google handles your payment method, billing address, taxes, trials, renewals and cancellations; Manage Subscription opens Google Play’s subscriptions page. Umbrabyte only receives the order information Google Play makes available to developers (for example order number, product, date, price and country) and never sees your card details. The Google Play Billing Library may also send technical diagnostics about the billing connection to Google under Google’s privacy policy; Umbrabyte does not receive them. See the Google Privacy Policy.
4.2 Google Play In-App Updates
The app uses the Google Play In-App Updates library to check whether a newer version is available and to offer (or, for important fixes, require) the update. The check is carried out by the Google Play Store app under Google’s terms. It runs when you open the app and at most every few hours while it stays open. Umbrabyte sets each release’s update priority when publishing it; from that priority and the time since release, the app chooses between a background download and a required update. Only the version and date of the last prompt are stored.
4.3 Google Play In-App Review
After you have used the app for a while, it may ask Google Play to show the rating dialog. Google decides whether it appears; your rating goes directly to Google Play and the app does not receive it. The app asks only after several days of use and leaves long gaps between requests.
4.4 No Umbrabyte servers
Umbrabyte operates no server, cloud database, API or analytics service for this app. The calendar accounts, storage locations, email provider and Google backup you choose process your data under their own terms.
5. Purposes and legal bases
Under the EU General Data Protection Regulation (GDPR) and the Spanish Organic Law 3/2018 (LOPDGDD):
| Activity | Purpose | Legal basis (GDPR) |
|---|---|---|
| Rota, notes, pay calculator, reminders, widgets and reports on the device | Provide the features you request | Performance of a contract (Art. 6.1.b) |
| Notifications, calendar and camera permissions | Reminders, calendar features, QR scanning | Your consent when you grant each permission (Art. 6.1.a) |
| JSON backups, share codes, calendar sync, Android backup | Copy data to destinations you choose | Your consent through the action or setting (Art. 6.1.a) |
| Purchases and plan checks | Deliver Pro and keep accounting records | Performance of a contract (Art. 6.1.b) and legal obligation (Art. 6.1.c) |
| Update checks, rating prompt, integrity checks, screenshot and overlay protection | Keep the app secure and up to date, and let you rate it | Legitimate interest (Art. 6.1.f) |
| Support email | Answer your message and resolve purchase issues | Performance of a contract (Art. 6.1.b) and legitimate interest (Art. 6.1.f) |
6. Retention and deletion
| Data | Retention | How to delete |
|---|---|---|
| Rota, notes, pay settings, preferences and sync settings | Until you delete them; there is no automatic purge | Delete items in the app, clear the app’s storage or uninstall |
| Recent days of use for the rating prompt | Older days are dropped automatically | Clear storage or uninstall |
| Camera frames and a colleague’s code | Not stored | Nothing to delete |
| Calendar events created by the app | Kept after you turn off sync or uninstall | Delete them in your calendar app |
| JSON backups, PDF reports, share files and copied codes | Kept where you saved them, also after uninstall; the clipboard until overwritten | Delete them there; clear the clipboard |
| Android cloud backup | According to your Google backup settings | Manage it in Android Settings |
| Google Play transaction records | Statutory tax and accounting periods | Managed by Google; Umbrabyte keeps order records only as long as the law requires |
| Support emails | Up to 3 years after the last message | Ask us at support@umbrabyte.app to delete them sooner |
There is no single “delete all” option. To erase everything on the device, clear the app’s storage in Android Settings or uninstall the app.
7. Security
- Sandbox: app data lives in private storage that other apps cannot read.
- Encryption: pay settings and Pro status are encrypted with AES-256-GCM using a key in the Android Keystore, except under the rare fallback in section 3.1. The rota database, other preferences, JSON backups (including the pay settings in them), PDF reports and share codes are not encrypted by the app and rely on your device encryption, screen lock and chosen storage.
- Network: unencrypted HTTP is blocked and only system certificate authorities are trusted.
- Screen protection: the Backups and Pro screens block screenshots, screen recording and recent-apps previews. On Android 12 and later, other apps’ overlays are hidden while the app is open.
- Local integrity checks: at each start the app checks for root, a debugger, hooking tools (including a connection attempt to the device’s own local ports) and an emulator, and verifies its signature. The results are at most written to the local system log; they are never stored by the app or transmitted.
- Hardened builds: release builds are optimized and obfuscated with R8.
8. Rights worldwide
8.1 European Union and United Kingdom (GDPR / UK GDPR)
You have the right to access, rectify, erase, restrict, port and object to the processing of your personal data, and to withdraw consent at any time. You can lodge a complaint with the Agencia Española de Protección de Datos (AEPD) at https://www.aepd.es or with your national supervisory authority.
8.2 United States (CCPA / CPRA and state laws)
We do not sell personal information and do not share it for cross-context behavioral advertising. Exercising your rights never affects the service you receive.
8.3 Brazil (LGPD)
You may exercise the rights in Article 18 of the LGPD, including confirmation, access, correction, deletion and revocation of consent.
8.4 Other countries
We apply the principles of PIPEDA (Canada), the Privacy Act 1988 (Australia) and equivalent laws.
Because your rota stays on your device, you can access or delete it directly in the app or in Android Settings. For any other request, contact support@umbrabyte.app; verified requests are answered within 30 days.
9. Children
Work Shift Calendar is a work-scheduling tool intended for adults aged 18 and older and is not directed to children. We do not knowingly collect personal data from children under 13 (or under the age of digital consent in their country). If you believe a child has sent us personal data, contact support@umbrabyte.app and we will delete it.
10. Changes
This policy describes the current version of Work Shift Calendar & Planner and is kept in step with every update published on Google Play.
- Before a change ships: if an update adds a permission, a third-party service, a new type of data or any transfer of data outside your device, we update this policy before releasing it and change the effective date at the top.
- No new purposes without notice: we will not use your data for a new purpose without telling you first and, where the law requires it, asking for your consent in the app.
- Permissions stay in your control: Android asks you before granting any runtime permission, and you can revoke it at any time in Android Settings.
- Consistent with Google Play: the app’s Data safety section on Google Play is updated together with this policy.
Earlier versions of this policy are available on request at support@umbrabyte.app.
11. Contact
For questions or privacy requests about Work Shift Calendar & Planner:
Cristian Donet Segura - Umbrabyte Apps
Calle Pintor Camarón, nº 24
12560 Benicasim, Castellón, Spain
Tax ID (NIF): 20468489F
D-U-N-S® Number: 374071851
Email: support@umbrabyte.app
Website: https://umbrabyte.app
Questions about your privacy?
If you have questions about data processing or wish to exercise your rights, contact us directly.
support@umbrabyte.app