Privacy Policy

Who we are

Karrette (“we”, “us”) is a workplace scheduling product for bars, restaurants, and similar teams. Managers publish schedules on the website. Staff can view shifts, request time off, and cover shifts on the website or in the iPhone app.

Questions: use the form on our Support page. That is also the contact method for privacy requests.

Information we collect

We collect information you provide, information your workplace stores in Karrette, and limited technical data needed to run the service.

• Account: email address, password (stored by our authentication provider, not in plain text on our servers), optional organization name, and a workplace join code if you are staff.
• Schedule and roster: employee names, roles, locations, shift assignments, days off, time-off requests (including dates and manager notes), shift-swap and shift-board requests, and related activity logs.
• iPhone app: an Apple Push Notification device token if you allow notifications, so we can alert you when a schedule is posted or a request is decided. We do not receive Face ID or Touch ID biometric data; unlock stays on your device.
• Technical: session cookies on the website, IP address used for rate limiting and security, and basic device or browser information sent with requests.

We do not collect precise location, contacts, photos, or health data. We do not use third-party advertising or analytics SDKs in the iPhone app.

How we use it

We use this information only to operate Karrette:

• Create and sign in to your account
• Store and display schedules for your workplace
• Process time-off, shift-swap, and cover requests
• Send optional “schedule posted” emails when a manager publishes
• Send iPhone push notifications when a schedule is posted or a request is decided
• Keep the service secure (rate limits, abuse prevention, account recovery)

We do not sell your personal information. We do not use it for third-party advertising. We do not track you across other companies’ apps or websites.

How we share it

People in your workplace can see scheduling information that is part of running that workplace (for example, a manager sees the roster; staff see published shifts and cover requests they are allowed to see).

We also use service providers who process data on our instructions:

• Supabase — account authentication and database storage
• Vercel — website hosting
• Resend — email delivery, when email notifications are enabled
• Apple — App Store distribution and Apple Push Notification service for the iPhone app

We may disclose information if required by law or to protect the security of Karrette or our users. We do not sell or rent personal information.

Cookies and app storage

The website uses session cookies to keep you signed in. You can block cookies in your browser; the site will not stay signed in without them.

The iPhone app stores your sign-in tokens in the device Keychain and may keep a copy of your last published schedule on the device so you can see it offline. A Home Screen widget may show your next shift using that cached schedule. Signing out clears this data from the device.

Account deletion

You can delete your account at any time. This meets App Store Guideline 5.1.1(v): deletion is available in the app, not only on a website.

• iPhone: Settings → Delete account. Confirm by proceeding through the prompt.
• Website: sign in → Settings → Delete account. Type DELETE to confirm.

Staff deletion removes that login. Your name may remain on the manager’s roster until the manager removes it. Manager deletion removes that manager login and the organization’s schedules, roster, and locations, and staff logins linked only to that workplace.

Retention

We keep account and scheduling data while the account is active. After you delete your account, we delete or de-identify that data from the live database. Backup copies may persist for a short period until they rotate. Push tokens are removed when you sign out of the iPhone app (when possible) or when Apple reports the token as invalid.

Your choices

• Access or update your email in website Settings.
• Turn off iPhone notifications in iOS Settings → Notifications → Karrette.
• Delete your account as described above.
• Request help accessing or deleting data via Support.

Children

Karrette is a workplace tool. It is not directed at children under 13, and we do not knowingly collect personal information from children under 13. If you believe we have, contact us through Support and we will delete it.

International users

The website and database are hosted in the United States. If you use Karrette from another country, your information is processed in the United States.

Changes

We may update this policy. The “Last updated” date at the top will change. Continued use of Karrette after an update means you accept the revised policy. Material changes will be reflected on this page.

Contact

Privacy questions and deletion requests: www.karrette.com/support.