Privacy policy

1. Who is responsible for what

For the account of the business owner or manager (email, phone number, sign-in data) and for website visitors, we are the data controller.

For the data a business enters about its employees (names, phone numbers, availability, time off, shifts, hours), the business is the controller and we are its processor. We process it only on the business's instructions, under a data processing agreement available on request via support@turnifo.com.

2. Who we are and where we are based

Turnifo is operated by Tomer Hirschmann, Business ID 214975138 (Israel), an individual business based in Israel. The European Commission recognises Israel as providing an adequate level of data protection (adequacy decision), so personal data can be sent to us from the EU and the EEA.

We have not appointed a representative in the EU under Art. 27 GDPR. You can reach us at the contact above.

3. What we collect

Account data: name, email, phone number, sign-in identifiers (including Apple and Google sign-in).

Scheduling data: employees, positions, shift templates, rules, availability, time-off and swap requests, weekly submissions, schedules and shifts, shift offers, bonuses and deductions the business records, and the reasons given for assignments.

Content you send us: assistant messages, support requests and roster photos.

Technical data: device and app version, push notification token, error logs.

Analytics events, only if you accept analytics (on the website and in the app).

4. Hours, location and absences

If the business turns on the time clock we store clock-in and clock-out times, breaks and, only where the business enabled a location check or automatic clocking, the geographic location of the device at the moment of the punch. We do not track location in the background or keep a location history. Absence requests, notes and attached files (for example a sick note) can reveal health data: only the person and the business's managers can read them, colleagues just see that someone is away. Working-time records are kept for the period the business is required to keep them; location data and free text are removed when an account is deleted.

5. AI processing

Two features send content to an AI provider: the assistant and plain-language rules (the text you type and the context needed to answer, such as your settings), and the roster photo import (the photo you upload, which can contain names). The provider is Anthropic PBC in the United States. It processes this content on our behalf, only to produce the answer or to read the photo.

Before you use either feature for the first time, the app tells you this and asks you to confirm once. We store that you confirmed, when, and which version of the notice. Without the confirmation the features stay off; the rest of Turnifo works as usual.

We do not use this content to train models. Assistant conversations are kept for 30 days and then deleted. Roster photos are used only to read the names and times and are not stored by us afterwards. The provider may keep inputs and outputs for a limited period under its own terms, for example to detect abuse. The transfer to the United States relies on Standard Contractual Clauses.

Only upload a roster when you are entitled to share the names on it, and please do not put health information or other sensitive data into the assistant.

6. Why we use it and on what legal basis

To provide the service and the contract with the business (Art. 6(1)(b) GDPR): scheduling, notifications, invitations, sign-in, and the assistant and roster import after your confirmation.

To keep the service secure and fix problems (legitimate interest, Art. 6(1)(f)).

To measure and improve the product with analytics (consent, Art. 6(1)(a)). You can decline or withdraw at any time from "Cookie settings" in the footer or in the app's privacy settings.

To meet legal obligations such as accounting and tax (Art. 6(1)(c)).

7. Where data is stored and international transfers

The database and files are stored in the European Union (Supabase, EU region) and the scheduling solver runs in the EU. Some providers below are based in the United States or process data there (Vercel, Cloudflare, Anthropic, Resend, Expo, RevenueCat, Apple, Google). For these transfers we rely on the EU-US Data Privacy Framework where the provider is certified and otherwise on Standard Contractual Clauses.

8. Sub-processors

We use the following providers to run Turnifo:

We will update this list before adding a new sub-processor that handles personal data.

• Supabase: database, authentication, file and function hosting. European Union.
• Vercel: website hosting. Global edge network; provider based in the United States.
• Cloudflare: DNS and network protection. Global network; provider based in the United States.
• Fly.io: scheduling solver. European Union.
• PostHog: product analytics, only with your consent. European Union.
• Anthropic: AI assistant, plain-language rules and roster photo import, only after your confirmation. United States.
• Resend: transactional email such as invitations and schedule notices. United States.
• Expo: push notification delivery to the mobile app. United States.
• RevenueCat: subscription status for purchases made in the app. United States.
• Apple and Google: in-app payments and sign-in with Apple or Google. United States; they act as independent controllers for payment and sign-in data.

9. Payments

Subscriptions are bought through the App Store or Google Play. Apple and Google process the payment; we do not receive card details. We receive the subscription status (plan, renewal date) from the store, through RevenueCat.

10. How long we keep data

Account and scheduling data: for as long as the account is active, then deleted or anonymised within 30 days of account deletion.

Backups: removed on a rolling cycle of up to 35 days.

Analytics events: up to 14 months. Server logs: up to 30 days. Assistant conversations: 30 days.

Accounting records: as required by tax law, generally up to seven years.

11. Deleting your data

You can delete your account from the app (Settings, then Delete account) or, without the app, on our account deletion page. The business owner can remove employees at any time. An employee who wants their data erased can ask their employer or write to us via support@turnifo.com.

12. Your rights

You can ask for access, correction, deletion, restriction and portability of your data, and object to processing. Employees should normally contact their employer first, as controller. You can also lodge a complaint with a supervisory authority: the one in your EU country (list on the European Data Protection Board website, edpb.europa.eu) or, in the United Kingdom, the Information Commissioner's Office (ICO).

13. Cookies

We use essential cookies for sign-in and language, which need no consent. Analytics are off until you accept them.

14. Changes

If we make material changes we will tell you in the app or by email before they apply.