RosterCairn privacy policy

Last updated: 22 October 2026

About this policy

This policy covers RosterCairn: Shifts & Pay for Android (com.dhebe.rostercairn). RosterCairn stores your work ledger on your device. You can use its scheduling and pay-estimate features without creating an account. The app has no advertising or developer-operated analytics backend. Optional integrations and the text-recognition SDK are described below.

Your work ledger

The app stores the details you enter or import: job and workplace labels, currency and time zone, planned and actual shifts, breaks, notes, leave, pay rules and dated rates, deductions, pay comparisons, calendar information, preferences and reminder settings. These records are used to display your schedule, calculate estimates and provide the features you choose. A leave entry or note may contain sensitive information, so include only what you want to keep in your ledger. RosterCairn does not send your ledger to a developer-operated server.

Payslip files and text recognition

If you choose a payslip file, the app reads that selected file and processes text on your device. Images and up to five PDF pages can be read with the bundled Latin-text recognizer. Google states that ML Kit does not send recognition inputs or outputs to its servers. The original document remains in its selected location. The app attempts to remove its temporary cache copy when processing ends; an interrupted process can leave temporary files until the cache is cleared. Extracted or pasted text is used in the review screen and may remain in temporary screen state. The ledger stores the rule values you explicitly apply, rather than the full extracted document text. Pay comparisons you save are stored separately.

Google ML Kit diagnostics

Google ML Kit may handle device and app information, installation identifiers, feature-use events and performance diagnostics for analytics. Google states that this SDK data is encrypted in transit and is not shared onward with third parties. The app provides no separate SDK-diagnostics opt-out. OCR is optional; the SDK is included in the app. Google’s SDK disclosures and privacy policy describe its practices.

Backups, exports and sharing

You choose whether to export a report or backup, share a worked report, or select a document provider such as Google Drive. Android and the chosen provider or recipient handle that transfer. A provider may upload files through its own account and connection. RosterCairn does not receive your provider password or sign-in tokens. JSON backups contain the ledger, planner and settings and are not encrypted by RosterCairn. Reports and calendar files also contain the information they describe. Choose destinations and recipients you trust. If you enable automatic document backup, changed records are written while the app is active; it is a backup file, not automatic merging between phones. Restoring a backup replaces local records and can update the selected automatic backup file.

Device calendars

Calendar access is optional. With your permission, the app can list available calendar names, import selected events and use a selected calendar’s all-day events as holiday dates. When you choose Sync ledger, it writes shift and leave details, including titles, notes and workplace labels, to the selected writable calendar. Your calendar provider may sync those events to its account or share them according to that calendar’s settings. Later syncs update or remove events managed by this installation. Removing a local record alone does not immediately remove an exported calendar event. Calendar source preferences and an installation-specific sync marker are kept on your device.

Permissions and information visible on your device

Calendar permissions support the optional calendar tools. Notification permission supports shift and payday reminders. The app receives device-restart and time-change events to restore those reminders. A bundled SDK may check network availability. The release is configured without direct Internet permission; other apps, providers and Google system components have their own capabilities, so this is not a promise that SDK diagnostics can never leave the device. Home-screen widgets and notifications can show job, shift and payday information. Use Android’s notification and lock-screen settings to control visibility. The app does not request location, contacts, microphone, camera or broad file-library access. File access uses the Android picker.

Retention and deletion

Local ledger data stays until you change or delete it, restore a replacement backup, clear app storage or uninstall the app. Available entry controls let you delete saved shifts, leave and pay comparisons. Automatic document backup keeps up to two private local recovery copies; these may retain earlier records after you edit or delete them. Turning off automatic backup stops future updates but does not delete the selected backup file or those recovery copies. To remove all app-held local records, recovery files, preferences and SDK storage, use Android Settings > Apps > RosterCairn > Storage > Clear storage, or uninstall the app. Exported files, cloud backups, shared reports and calendar events remain with their providers or recipients until you delete them there. Clearing this app cannot erase copies held by other services or Google SDK diagnostics. Android automatic app backup and device-transfer backup are disabled in the app configuration.

Support and privacy requests

For support or privacy questions, email support@dhebe.com. If you email us, your email provider and ours process your address, message and anything you attach so we can respond. Do not send a complete payslip or work ledger unless it is needed for your request. You can ask us to delete support correspondence; information may be retained where needed to resolve the request or meet applicable obligations. There is no RosterCairn account to delete, and we cannot access or remotely erase your local ledger.

Audience and changes

RosterCairn is designed for work scheduling and pay estimates. It is not directed to children. This policy may be updated when the app or its data practices change. The date above identifies this version.