Effective and last updated: July 29, 2026
This policy applies to the Android application Calendario Turnos, package identifier com.umbrabyte.calendarioturnos, published by Umbrabyte Apps. It supplements the general Umbrabyte privacy policy and is the policy linked from the app and its Google Play listing.
Plain-language summary: your rota, notes, work-hour calculations and preferences are stored and processed primarily on your device. Umbrabyte does not operate an account or cloud backend for this app, does not sell personal data, and does not include advertising, behavioral analytics or crash-reporting SDKs. Data can leave the device when you choose a calendar, backup, export or sharing destination, when Android performs an enabled device backup, when Google Play processes a purchase, or when you contact support.
This summary does not replace the complete terms below.
1. Scope and key facts
Calendario Turnos helps people create shift patterns, assign shifts to dates, schedule reminders, calculate work summaries and optionally export or synchronize information.
- No Umbrabyte account: the app does not ask you to create an account or profile with us.
- No Umbrabyte app-data server: Umbrabyte does not receive your rota database through a proprietary backend.
- No advertising or tracking: the app does not contain ad technology and does not use your activity for targeted advertising or cross-app tracking.
- No sale or commercial sharing: Umbrabyte does not sell, rent or share personal information for cross-context behavioral advertising.
- No automated decisions: the app does not perform profiling or decisions that produce legal or similarly significant effects.
- User-controlled transfers: calendar sync, reports, manual backups, QR/JSON sharing and Android backup involve services or recipients selected by you or configured on your device.
- Platform processing: Google Play Billing communicates with Google to provide and verify purchases. Google and any calendar, storage or sharing provider you select process data under their own terms.
In Google Play’s Data safety terminology, “collection” generally means transmitting data off the device to the developer or a third party. Privacy law can use broader definitions of “processing,” including operations performed locally. This policy explains both.
2. Who is responsible
The developer and data controller for data received directly by Umbrabyte is:
- Name: Cristian Donet Segura
- Trade name: Umbrabyte Apps
- Address: Calle Pintor Camarón, nº 24, 12560 Benicasim, Castellón, Spain
- Tax ID (NIF): 20468489F
- D-U-N-S®: 374071851
- Privacy and support contact: support@umbrabyte.app
Independent services such as Google Play, Google Drive or another calendar/storage provider may act as separate controllers for the data they process under your account. See section 4.
3. Data processed by the app
3.1 Information stored and processed on your device
The app may process the following information only as needed for the features you use:
| Category | Examples | Default location |
|---|---|---|
| Shift and rota content | Shift names and abbreviations, colors, working times, second time blocks, dates and repeating patterns | Private app database on the device |
| Work notes and adjustments | Notes attached to dates, extra income amounts and extra minutes | Private app database on the device |
| Salary and summary settings | Hourly rates, overtime rules, thresholds and other values used to calculate summaries | Private app storage |
| App preferences | Theme, alarm timing, reminder choices, first day of week, widget settings and selected options | Private app storage |
| Calendar configuration | Selected calendar identifier, account/display name, synchronization state and dates needed to identify availability or app-created events | Private app storage and the Android calendar provider |
| Purchase entitlement | A local Boolean indicating whether Pro features are available | Private app preferences |
Shift names and notes are free-text fields. Do not enter sensitive information about other people unless you have a lawful reason and their authorization.
3.2 Permissions and device access
Permissions are requested in context and can be changed in Android settings:
| Permission or capability | Why it is used | Required? |
|---|---|---|
Notifications (POST_NOTIFICATIONS) |
Show shift reminders and status notifications | Optional; Android 13 and later ask for permission |
Read calendar (READ_CALENDAR) |
List calendars, let you select one and identify busy dates for optional synchronization | Optional |
Write calendar (WRITE_CALENDAR) |
Create, update and remove only events managed by Calendario Turnos in the calendar you select | Optional |
Exact alarms (SCHEDULE_EXACT_ALARM) |
Deliver time-sensitive shift reminders at the chosen time | Optional; subject to Android controls |
| Battery-optimization exception | Let you open Android settings to improve reminder reliability | Optional and user initiated |
Restart handling (RECEIVE_BOOT_COMPLETED) |
Restore scheduled reminders after the device restarts | Used only when reminders are enabled |
| Billing | Connect to Google Play to offer, verify and acknowledge purchases | Used when Play purchase features are available |
| Network state, internet, wake lock and foreground work | Supporting capabilities inherited from Google Play Billing and Android WorkManager | Used by those platform components as needed |
The app does not request precise or approximate location, contacts, call logs, SMS, microphone, camera, health data, advertising ID, broad photo/video access or biometric data. Camera access is not required to display a QR code; importing shared text or an image is performed through Android/user-selected system interfaces where available.
3.3 Reports, backups and sharing you initiate
- PDF or CSV reports can contain shift dates, hours, workload or earnings-related values. You choose where the file is saved or shared.
- Manual JSON backups can contain the app database, including shift definitions, assignments, notes, extra income and extra minutes. You choose the destination through Android’s system file picker.
- Shared schedules and QR/JSON codes contain dates and shift definitions such as names, abbreviations, colors and working times. They exclude notes, income values, purchase status and device identifiers. A custom shift name can still reveal information you entered.
- Calendar synchronization creates events in the calendar you choose. If that calendar belongs to a synchronized Google, Microsoft, employer or other account, its provider may upload the events according to your account settings.
Once you send a file, code or calendar event to another person or provider, that recipient controls its copy. Review the destination and content before sharing.
3.4 Information Umbrabyte does not receive from normal app use
Umbrabyte does not receive your rota database, notes, salary settings, calendar contents, exported files, device contacts, location or payment-card details through an Umbrabyte backend. Normal app use does not give us access to Android backups stored in your Google account.
If you email support, we receive the address, message, attachments and any diagnostic information you voluntarily provide. Please remove rota or workplace details that are not needed to resolve the issue.
4. External services and disclosures
4.1 Google Play distribution and Billing
The app uses Google Play services for distribution and Google Play Billing for optional purchases. Google may process information such as your Google account, app/package identifier, product and transaction identifiers, purchase status, country/region, device or service information and technical diagnostics needed to complete, secure and verify the transaction. Google, not Umbrabyte, processes your card or bank credentials.
Umbrabyte can receive purchase entitlement/status through the Billing API and may access order, refund, tax or sales records made available in Play Console where needed for customer support, fraud prevention, accounting and legal obligations. The app does not send purchase tokens to a custom Umbrabyte server.
Google processes this data under the Google Privacy Policy and Google Play terms. Google may process data outside your country using the safeguards described in its documentation.
4.2 Android Auto Backup and device-to-device transfer
Android may back up the app database and preferences to the private backup area associated with your Google account, or transfer them to a new device, if backup is enabled in your device settings. Calendario Turnos applies Android backup rules that require supported encryption capabilities for cloud backup and permit device-to-device transfer. Umbrabyte cannot view these backups.
Google controls backup infrastructure and retention. You can manage backup in Android/Google settings. Uninstalling the app does not necessarily erase a cloud backup that Android may later restore. See Android’s Auto Backup documentation.
4.3 Calendar, storage and sharing providers
Android’s calendar and Storage Access Framework give you control over the calendar or file destination. The chosen provider—such as Google Calendar, Microsoft, a device manufacturer, an employer service or a cloud drive—may process the data you direct to it as an independent controller or processor. Their privacy terms, security and retention practices apply.
4.4 Support email
Email is handled by the mail providers used by you and Umbrabyte. Messages can cross borders and are kept only as described in section 6. We disclose support correspondence only to service providers acting under appropriate confidentiality/security terms, or when lawfully required.
4.5 No other routine recipients
Calendario Turnos does not integrate advertising networks, social-login providers, behavioral analytics, third-party crash reporting or an Umbrabyte cloud database. We may disclose information actually held by us when required by applicable law, to protect users and the service, or in connection with a lawful business reorganization, with the notices and safeguards required by law.
5. Purposes and legal bases
For people in the EEA, Spain, the United Kingdom and other jurisdictions that require a legal basis, processing is limited as follows:
| Activity | Purpose | Legal basis |
|---|---|---|
| Local rota, calculations, widgets and preferences | Provide the features you request | Performance of a contract or steps at your request (GDPR/UK GDPR art. 6(1)(b)) |
| Optional calendar access and notifications | Provide the optional feature you enable | Your device-level choice/consent (art. 6(1)(a)); you can revoke permission at any time |
| Play purchase handling | Deliver Pro features, prevent fraud and keep required transaction records | Contract (art. 6(1)(b)), legitimate interests (art. 6(1)(f)) and legal obligations (art. 6(1)(c)) |
| Support correspondence | Answer questions, troubleshoot and defend legal claims | Contract or pre-contractual steps (art. 6(1)(b)) and legitimate interests (art. 6(1)(f)) |
| Compliance and security | Meet tax, accounting, consumer, court and security obligations | Legal obligation (art. 6(1)(c)) and legitimate interests (art. 6(1)(f)) |
Where consent is the basis, refusing or withdrawing it disables only the corresponding optional feature. Withdrawal does not affect earlier lawful processing.
6. Retention, deletion and account choices
| Information | Retention |
|---|---|
| App database and preferences | Until you delete entries, clear app storage or uninstall; an Android backup may remain separately |
| Events created in a device calendar | Until removed in that calendar; they may remain after app uninstall |
| Manual backups, reports and shared copies | Until you or the selected provider/recipient deletes them |
| Android cloud backup | Controlled by your Android/Google backup settings and Google’s retention rules |
| Local Pro entitlement | While app data remains or until purchase state is refreshed |
| Play transaction/accounting records available to Umbrabyte | For the period required by tax, accounting, consumer and fraud-prevention law |
| Support email | Normally up to three years after the last exchange; longer only for an unresolved dispute or legal requirement |
Calendario Turnos has no Umbrabyte user account, so there is no developer account to delete. To remove local information:
- Delete individual content in the app where the option is available.
- Disable calendar synchronization and remove app-created events from the selected calendar if you do not want them retained.
- Delete exported files, reports, backups and messages from every destination or recipient.
- Clear Calendario Turnos storage in Android settings or uninstall the app.
- Review Android/Google backup settings to remove or prevent restoration of a cloud backup.
Deleting the app cannot delete copies already sent to other people, independent providers or legally retained transaction records.
7. Security
App data is kept in Android’s private app sandbox and benefits from device security and encryption supported by your Android device. Billing communication uses Google Play’s secured platform connection. Umbrabyte follows data-minimization and least-permission principles and does not maintain a remote copy of your rota.
The local database and user-created JSON, PDF, CSV or QR exports are not additionally encrypted by Calendario Turnos. Their protection depends on your device lock, operating-system encryption and the destination you select. Protect exported files, avoid sharing unnecessary sensitive details and keep Android updated.
No storage or transmission method is completely secure. If you believe the app or your communication with us has been compromised, contact support@umbrabyte.app.
8. Your privacy rights worldwide
Privacy rights apply principally to data a controller actually holds. Because Umbrabyte does not receive your normal rota data, the most direct way to access, correct, export or erase it is through the app, Android settings and the providers you selected. We will assist with data held by Umbrabyte and direct you to the relevant independent provider when appropriate.
Subject to local law and exceptions, you may request access, correction, deletion, restriction, portability, objection, withdrawal of consent, information about recipients, or review of certain automated decisions. Calendario Turnos does not sell personal information and does not use it for targeted advertising, so there is no sale/targeted-advertising opt-out needed for Umbrabyte’s app processing. We do not discriminate against anyone for exercising a privacy right.
EEA and Spain — GDPR and LOPDGDD
You have the rights in GDPR articles 15–22 and may complain to the Spanish Data Protection Agency (AEPD) or your local EEA supervisory authority. You may also withdraw consent at any time and object to legitimate-interest processing. A response is normally provided within one month.
United Kingdom — UK GDPR and Data Protection Act framework
UK residents may exercise access, rectification, erasure, restriction, portability, objection and consent rights and complain to the Information Commissioner’s Office (ICO). Applicable UK legislation, including amendments in force, governs the request.
California and other United States jurisdictions
Where the CCPA/CPRA or another U.S. state privacy law applies, residents may request to know/access, correct or delete covered personal information and may receive information about categories, purposes, sources and recipients. Umbrabyte does not sell or share personal information for cross-context behavioral advertising, does not process it for targeted advertising, and does not knowingly use sensitive information for purposes requiring a limitation link. California residents can consult the California Privacy Protection Agency and Attorney General.
Brazil — LGPD
Brazilian residents may request confirmation, access, correction, anonymization/blocking/deletion, portability, information about sharing, consent withdrawal and review where applicable, and may contact the Autoridade Nacional de Proteção de Dados (ANPD).
Canada, Australia, Japan and South Korea
- Canada: rights under PIPEDA and applicable provincial law may include access, correction and challenging compliance; complaints may be made to the Office of the Privacy Commissioner of Canada.
- Australia: rights under the Privacy Act and Australian Privacy Principles may include access and correction; complaints may be made to the Office of the Australian Information Commissioner.
- Japan: rights under the APPI may include disclosure, correction, suspension of use and deletion where statutory conditions apply; see the Personal Information Protection Commission.
- South Korea: rights under PIPA may include access, correction/deletion and suspension of processing; see the Personal Information Protection Commission.
Residents of other countries—including jurisdictions with comprehensive privacy laws in Latin America, Asia-Pacific, Africa, the Middle East and Europe—may exercise any additional mandatory rights available where they live. If local law provides stronger protection than this policy, that law controls.
To submit a request, email support@umbrabyte.app with “Privacy request — Calendario Turnos” and your country/region. We may ask for proportionate information to verify that the request concerns you. Do not send identity documents unless specifically requested through a secure method. You may use an authorized agent where local law permits. You may appeal a refusal by replying to our decision, and you can complain to your local authority.
9. Children’s privacy
Calendario Turnos is a workforce scheduling tool intended for a general adult audience and is not directed to children. Umbrabyte does not knowingly collect personal information from children under 13, or under the higher minimum age that applies without parental authorization in their country (including the age rules applicable in the EEA/Spain).
Because the app has no Umbrabyte account and normal rota data stays on the device, a parent or guardian should use the device controls to remove local data. If a child sends information to support, contact support@umbrabyte.app so we can delete it where legally required.
10. Changes to this policy
We will update this policy before introducing a material new data practice. The latest version will remain at this stable, public, non-geofenced URL and the date above will change. Where law requires it, we will provide additional notice in the app or request consent before the change takes effect.
This policy is available in English and Spanish. The versions are intended to have the same meaning. If a translation differs, the Spanish version governs the controller’s obligations to the extent permitted by mandatory consumer and privacy law.
11. Contact
For privacy questions, rights requests or complaints:
Cristian Donet Segura — Umbrabyte Apps
Calle Pintor Camarón, nº 24
12560 Benicasim, Castellón, Spain
Email: support@umbrabyte.app
You may also contact the competent privacy or consumer authority where you live.
Questions about your privacy?
If you have questions about data processing or wish to exercise your rights, contact us directly.
support@umbrabyte.app