Privacy Policy
albari ("the app", "we", "us") is a shift-scheduling app for small shops and their teams, operated by MJDOT. This policy explains what personal data we handle, why, and the choices you have. It applies to the albari mobile app and to this website.
1. Who is responsible for your data
albari is a tool that shop owners use to manage their team. This means two parties handle personal data:
- We (the operator of albari) are responsible for account data and for running the service securely.
- Shop owners and managers decide what team-member information to enter into their shop (for example a phone number or hourly rate). They are responsible for entering it lawfully and for telling their team that albari is used. We process that information only to provide the service to the shop.
2. What we collect
| Category | Data | Source |
|---|---|---|
| Account | Name, email address, profile photo URL (if provided by Google or Apple), sign-in provider identifier, language preference | You, or Google / Apple sign-in |
| Shop | Shop name, business type, address, phone number, timezone | Shop owner |
| Team member profile | Name, date of birth, gender, phone number, address, memo, start and end date, hourly rate or monthly salary, employee number, role and status | Shop owner or manager, or you |
| Schedule and work records | Shifts, breaks, notes, shift change and open-shift requests, who requested and approved them, and worked-hours summaries derived from shifts | Owners, managers and team members |
| Notifications | Push notification tokens for your devices, notification preferences, in-app notification history | Your device and your activity |
| Subscription | Subscription plan, product, store (App Store or Google Play), renewal and expiry status, and a subscription identifier that is the same as your albari user ID | RevenueCat, on behalf of Apple or Google |
| Technical | IP address, device type and identifiers, app version, and crash or error information collected by Firebase to keep the service running and secure | Your device, automatically |
Location. When a shop is created, the shop address is converted to coordinates once so that the app can determine the shop's timezone. The coordinates are not stored. We do not track the location of your device.
Payment details. Purchases are made through Apple or Google. We never see your card number or billing address.
3. Why we use it
- To create and secure your account and let you sign in.
- To run the shop: schedules, shift requests, team management and worked-hour records.
- To send push notifications about schedule changes, requests and team events, according to your preferences.
- To unlock albari Pro features for a shop with an active subscription.
- To keep the service reliable and prevent abuse.
- To respond when you contact us.
Where a legal basis is required, we rely on the performance of our contract with you (providing the app), our legitimate interest in keeping the service secure, and your consent for push notifications, which you can withdraw at any time in your device settings or in the app.
We do not sell personal data, and we do not show advertising.
4. Who can see your data inside the app
- Shop owners and managers can see the full profile and records of the team members in their shop.
- Team members can see their own profile and shifts, and the names and shift assignments of co-workers in the same shop. They cannot see co-workers' personal details such as phone numbers, addresses or pay.
5. Service providers
We use the following providers to run albari. Each processes data only to provide its service to us.
| Provider | Purpose | Location |
|---|---|---|
| Google Firebase (Google LLC) | Authentication, database, cloud functions, push notifications (Firebase Cloud Messaging), hosting | Primary data region: Seoul, South Korea (asia-northeast3). Some Firebase services, such as authentication, operate globally. |
| RevenueCat, Inc. | Subscription management and receipt validation | United States |
| Apple Inc. and Google LLC | Sign in with Apple, Google Sign-In, and in-app purchases through the App Store and Google Play | Global |
Because some providers operate outside your country, your data may be transferred internationally. We rely on the providers' standard contractual safeguards for such transfers.
6. How long we keep it
- Account and shop data is kept while your account exists.
- Invitations expire automatically and are then no longer usable.
- Notification history is cleaned up periodically.
- After you delete your account: if you own a shop with no other members, the whole shop and its records are deleted. If you are a team member, your account and personal details (phone, address, date of birth, memo) are removed, and your profile is unlinked from your account and marked as resigned. Your past shift assignments remain in the shop's records so that the shop's work history stays accurate. The shop owner can delete them.
- Backups are retained for a limited period and then overwritten.
7. Your choices and rights
- Access and correction: you can view and edit your profile in the app. Team members can ask their shop owner to correct details the owner entered.
- Delete your account: in the app go to More → Account → Delete account. See how deletion works. You can also email us to request deletion.
- Push notifications: turn them off in More → Preferences or in your device settings.
- Export: shop owners can export work records as a CSV file from the app.
- Depending on where you live, you may have additional rights such as data portability, restriction or objection, and the right to complain to a supervisory authority. Contact us to exercise them.
8. Security
Data is encrypted in transit and at rest by our cloud provider. Access to shop data is enforced by server-side rules so that only members of a shop can read it, and only owners and managers can change team data. No method of transmission or storage is completely secure, so we cannot guarantee absolute security.
9. Children
albari is intended for people who work or run a business. It is not directed at children under 14, and we do not knowingly collect their data. If you believe a child has created an account, contact us and we will delete it.
10. Changes to this policy
We may update this policy as the app changes. The effective date at the top shows the latest version. For significant changes we will notify you in the app before they take effect.
11. Contact
MJDOT
Privacy contact: mj.won.dev@gmail.com