Privacy policy
- Effective
- September 27, 2026
- In Portuguese
- Português
The short version
There is no account and no sign-up. Your schedule, your sleep windows, your hourly rate and your Health data never reach us. They stay on your phone, in backups you control and, if your iPhone is signed in to iCloud, in your own private iCloud, which we cannot read. Nothing from Apple Health is synced to iCloud. The app works with no connection; apart from buying and syncing, the one thing that needs one is the first answer about whether you have paid.
Without you doing anything, two kinds of data go to a company other than Apple: your purchases, and what you do on the purchase screens, with an anonymous identifier and basic facts about your phone; and, once per install, whether one of our Apple ads on the App Store led you to the app. Both go to RevenueCat, which runs the subscription dashboard we use to see how many people subscribe, how many cancel, and which of our ads are worth paying for. None of it is tied to your name: the app never gives it one. There is no advertising identifier and no tracking.
This follows from how the app is built: there is no code in TurnoRest capable of sending your schedule to us, or anywhere other than your own iCloud, without you doing it yourself.
What stays with you
| Data | Where | Why |
|---|---|---|
| Your shift pattern, cycle start date, and the changes you make | On your phone (SwiftData) and, if iCloud is on, in your private iCloud | It is the app |
| JSON copies of your last 10 schedule versions | Files › TurnoRest › Backups, on this iPhone | So you never lose your schedule |
| Your hourly rate and differentials, pay periods and pay stubs, if you enter them | Same as the schedule | To calculate what each week is worth |
| The person you live with and your other jobs, if you add them | Same as the schedule | To show their schedule next to yours, and every job in one schedule |
| Sleep preferences, rest thresholds, holiday country, your onboarding answers, and your name if you gave one | Same as the schedule | So the app is set up the same on every device |
| Notification preferences | This iPhone only | Personalization |
| Sleep windows you confirmed by hand | Same as the schedule | The habit streak |
| Sleep windows Apple Health confirmed | This iPhone only, never synced to iCloud | The habit streak |
| Sleep sessions read from Apple Health, if you allow it | Never stored: read, compared, discarded | To confirm windows without you tapping |
| Usage log (screens visited, actions taken) | A file on this iPhone, 256 KB at most | Diagnosis, only if you choose to send it |
What syncs to your iCloud
If your iPhone is signed in to iCloud, your schedule and everything the table marks “Same as the schedule” sync to your own private iCloud database, automatically. There is no switch for it in the app: it follows your iPhone’s iCloud settings. That is what brings your schedule back on a new phone. We have no access to it: Apple’s CloudKit private database is readable only by you. If iCloud is off, the app works the same and the Sync line in Settings says “This device only”.
What never goes there: anything from Apple Health. The windows Health confirmed stay on this iPhone.
What leaves your phone, and only when you ask
The calendar you create. If you turn on Settings › Calendar › Keep in the iPhone calendar (Pro, off until you turn it on), TurnoRest writes your shifts to a calendar of its own named “TurnoRest”, and re-reads only that calendar to keep it up to date. It is created in the account your iPhone uses for new events, usually iCloud, so it syncs like any other calendar there. What happens next is yours: if you share it with someone, they see it. TurnoRest writes to no other calendar. It reads one other calendar only if you pick one in Settings › Household (one your partner shares with you, say) to show that person’s schedule next to yours. To let you pick, it lists your calendars’ names on screen. It never writes to that calendar, and nothing from it is sent to us.
Files you export. The JSON backup, the .ics calendar file, the PDF and CSV reports
and the month image go wherever you send them.
Email you write. The feedback screen composes an email in your own mail app. It holds your text and, unless you switch it off, a short technical context: app and iOS version, device model, your pattern’s identifier, cycle length and average weekly hours, the number of changes saved, and your plan. The usage log goes only if you switch on “Include usage log”. You read it before it is sent, and you send it. Nothing is transmitted by the app.
Sources you open. Tapping a source opens its page (for example cdc.gov, PubMed, or EUR-Lex) in your browser. That site sees an ordinary visit from your device; the app sends nothing about you with it.
What leaves without you asking
Your purchases. The RevenueCat SDK talks to RevenueCat when the app starts and when it comes back to the foreground, to refresh whether you have Pro and which plans are on sale, and again when you buy or restore. What is sent: your purchase history (which product, when, and the transaction identifier from Apple); an anonymous identifier that the SDK creates; your device model, iOS version, app version, languages and App Store country; and the identifier your device gives to us as a vendor (IDFV), which does not follow you to any other company’s apps. The SDK also sends the tracking-permission status iOS reports, although TurnoRest never asks for that permission. Its automatic collection of other device identifiers is switched off. Like any server, RevenueCat also sees the IP address each request comes from.
What you do on the purchase screens. The purchase screen is either the app’s own, which keeps its events on the phone, or RevenueCat’s, which the app shows when we set it up in RevenueCat’s dashboard. RevenueCat’s screen records when it is shown and closed, the plans and buttons you tap on it, and when you cancel a purchase you started, with your language and whether the phone is in dark mode, and sends those events to RevenueCat under the same anonymous identifier. The screen that Settings › Subscription opens to cancel is RevenueCat’s too: it records when it is shown and, if it asks why you are leaving, the answer you choose.
Which of our Apple ads brought you, if any. We advertise TurnoRest on the App Store with Apple Ads (formerly Apple Search Ads). To know which of those ads lead to people who subscribe, the RevenueCat SDK asks iOS, once per install, for an attribution token from Apple’s AdServices framework and sends it to RevenueCat, which exchanges it with Apple for one answer: did an Apple Ads campaign of ours lead to this download? If it did, Apple returns the identifiers of our campaign, ad group, keyword and ad, the country or region, whether the ad was tapped or only seen, whether it was a new download or a re-download, and where in the App Store the ad appeared; if not, it says so. RevenueCat keeps that answer next to the anonymous purchase record. The token holds no advertising identifier (IDFA), and it needs no tracking permission: Apple says this attribution does not identify you or your device and is not tracking under its App Tracking Transparency rules. It is about our ads on the App Store only, never ads in other apps or on websites, and it is not shared with any other advertising network.
What is not sent: your name, your email, your schedule, your sleep, your hourly rate, your Health data, and the local event log the feedback screen can attach to an email. None of it is used to show you ads or to follow you across other companies’ apps and websites. Apart from Apple’s answer about its own ads, described above, none of it is combined with data from other companies.
Payment itself is handled by Apple. Whether you have TurnoRest Pro is RevenueCat’s answer, and the app keeps the last answer on your device, so Pro keeps working offline. On a fresh install with no connection, Pro arrives once there is one. Everything free works either way.
RevenueCat handles this data for us, as our service provider (a processor, in GDPR terms). RevenueCat’s privacy policy: revenuecat.com/privacy
What we do not do
- No ads in the app, no advertising identifier (IDFA), no tracking. We never ask for tracking permission because we do not track you. The one piece of advertising data is Apple’s answer, above, about which of our App Store ads led to the install.
- No analytics SDK inside the app. What TurnoRest records about how you use it (which screens, which taps) is written to a file on your phone and to the system log, and goes nowhere unless you switch on “Include usage log” in a feedback email and send it yourself. The only usage events that leave are the purchase screens’, described above.
- There are no accounts or passwords, and no email addresses are collected.
- One third-party dependency: the RevenueCat SDK. It handles the purchase, shows the purchase screen, and tells the app whether you have Pro. Everything the app does for you (your schedule, your sleep windows, your pay) is computed on your phone and keeps working with no network at all. The one thing that needs an answer is the paid status itself, and after the first time it is remembered on the device, so it works offline too.
Apple Health
If you enable it, TurnoRest reads sleep data from Apple Health to confirm the sleep windows you actually slept. Read only: TurnoRest never writes to Health. The data is compared with your plan on your device and discarded; what is saved is only “this window was met”, not your sleep times, and it is kept on this iPhone only: unlike the windows you confirm by hand, it is never synced to iCloud. The confirmation also goes into the backup copies in Files, which stay on the phone unless you send them somewhere, and, like the rest of the app’s data, into your iPhone backup if you have one turned on. The sleep data read from Health is never used for advertising and never leaves your phone.
iPhone backups
If iPhone backup is on (iCloud or a computer), the app’s data is included in it like any other app’s. That is an iOS feature, which you manage in the iPhone’s Settings.
Notifications
Every reminder is a local notification, created and scheduled on your phone. TurnoRest has no push server, so no server of ours holds an identifier for your phone. iCloud sync may use Apple’s silent notifications to tell the app that something changed on another of your devices; they never appear on screen, and they come from Apple, not from us.
Children
TurnoRest is not directed to children under 13. What the app collects is a purchase record, purchase-screen events and which of our App Store ads led to the install, with no name attached, from anyone, including children. We do not knowingly collect personal information from children under 13 (COPPA) or under 16 (GDPR Article 8).
Your rights
TurnoRest holds nothing about you on a server of its own. What exists outside your phone is in your own iCloud, which only you can reach, and what RevenueCat keeps about your purchases and the ad that brought you, if any, with no name on it:
- Access and portability: Settings › Backup › Export schedule (JSON), any time.
- Deletion: delete the app, and delete the backup folder in Files. Deleting the app does not delete the iCloud copy: do that in iPhone Settings › your name › iCloud › Manage Account Storage › TurnoRest › Delete Data. The “TurnoRest” calendar goes when you turn off Settings › Calendar › Keep in the iPhone calendar, which deletes it, or when you delete it in the Calendar app. For the RevenueCat record of your purchases and the ad that brought you, write to support@turnorest.com and we will ask RevenueCat to delete that anonymous customer.
This covers the rights granted under the California Consumer Privacy Act (CCPA/CPRA), including the right to know, delete, correct, and opt out of sale or sharing. We do not sell or share personal information, and we never have. Residents of Virginia, Colorado, Connecticut, Utah, Texas and other US states with comprehensive privacy laws have equivalent rights, and the same answer applies. The same is true under the GDPR for users in the European Economic Area and the UK.
We do not respond to Do Not Track signals because we do not track.
Purchases
Payment is handled entirely by Apple. We never see your name, your payment details, or your address. What reaches the app, through RevenueCat, is whether a valid purchase exists and which plan it is. Apple’s own privacy policy covers the payment.
This website
turnorest.com is a set of static pages, served by Vercel. The pages set no cookies, run no analytics, not even the host’s, and make no requests to other companies. The rotation you set on a page is worked out in your browser and kept in the address after the #, a part of the address that browsers do not send to any server. The QR code on a page is drawn by the page itself.
Like any web host, Vercel processes standard request data, such as the IP address and the browser’s user agent, to deliver the pages and protect the site. Vercel’s privacy notice: vercel.com/legal/privacy-notice
Changes
If this policy ever changes, the date at the top changes with it, and material changes are announced in the app’s release notes.
- September 27, 2026: From version 1.1, the purchase screen is the app’s own, which keeps its events on the phone. RevenueCat’s screen appears only when we set it up in RevenueCat’s dashboard.
- September 25, 2026: Wording edited in a few places, with nothing changed about the app.
- September 24, 2026: A new section on this website, turnorest.com. Plainer wording elsewhere (“schedule” for “rota”), with nothing changed about the app.
- September 23, 2026: From version 1.0.1, once per install, Apple’s answer about whether one of our App Store ads led to the install goes to RevenueCat (AdServices, no IDFA).
- September 19, 2026: The policy describes in full what the app keeps and sends: iCloud sync, the calendar, the feedback email, what the RevenueCat SDK sends and what the purchase screens record.
- September 17, 2026: What happens when you open one of the app’s sources.
- September 14, 2026: The RevenueCat SDK handles the purchase itself, not only whether a subscription is active.
- September 13, 2026: RevenueCat added: whether you subscribe, and to which plan, goes to RevenueCat.
- August 31, 2026: First version published at turnorest.com.
Contact
Questions about this policy: support@turnorest.com