Privacy Policy

1. Who we are

TodayCrew is a workforce scheduling, attendance, and payroll-preparation platform operated in Australia by Sirui Wang. Privacy requests can be sent to Refreshland2020@gmail.com or submitted through the public support page.

2. Information we collect

We collect account information such as name, work email, phone number, role, assigned workplace, and authentication records. Businesses and their authorised users may add employment profile details, rosters, availability, shift-swap and leave requests, attendance records, timesheet adjustments, notes, and payroll-preparation calculations.

If a user chooses a profile image, we process that image as user-provided content. We also process basic security and diagnostic information such as session identifiers, request timestamps, device or browser type, and error records needed to operate and secure the service.

3. How we use information

We use information to provide roster planning, time tracking, request handling, payroll preparation, customer support, security monitoring, and service improvement.

4. Location and attendance data

If a company enables location-aware attendance, TodayCrew requests foreground precise location only when a user starts a relevant clock action. The location is used to check whether the action occurred near the assigned workplace. TodayCrew does not request background location access. Users can deny or later revoke location access in iOS Settings; where company policy permits, a manager or store kiosk can record attendance instead.

5. Sharing

We do not sell personal information and do not use it for third-party advertising. Data is disclosed only as needed to the business that manages the user's workplace, authorised managers, and service providers that operate TodayCrew. Current providers include Replit and database infrastructure for application hosting, Resend for transactional email, Expo/EAS for mobile build delivery, and Stripe for business web billing. Stripe payment details are not collected by the iOS app.

We may also disclose information where required by law, to protect users and the service, or in connection with a business transfer subject to equivalent privacy protections.

6. Retention

Active account and workspace data is retained while the service is being used. Authentication sessions, verification codes, and password-reset records expire or are removed when they are no longer required for account security. Support communications may be retained for up to 24 months after the request is closed. Deleted personal account information is removed or anonymised as described in the Account Deletion policy, and residual encrypted backups are overwritten within 30 days.

Australian employers may be required to retain time and wage records for seven years. Where a business customer must keep those records, TodayCrew may preserve pseudonymous roster, attendance, payroll, billing, and audit records for up to seven years, or longer only where another law or active dispute requires it. The business customer remains responsible for its employment-record obligations.

7. Security

We use reasonable technical and organizational safeguards to protect data. No method of storage or transmission is completely secure.

8. User rights

Depending on jurisdiction, users may request access, correction, deletion, restriction, or a copy of their personal data. Account deletion can be initiated directly in the app at More → Security settings → Delete account. Other requests can be submitted through the public support page or privacy email above.

Users can withdraw photo or location permission at any time in iOS Settings. Withdrawing permission does not remove previously submitted attendance records that the employer must retain, but it prevents new access unless permission is granted again.

9. Children

TodayCrew is intended for business use and is not directed to children.

10. Changes

We may update this policy from time to time. Material updates will be posted on this page.