Nightband Privacy Policy

1. Who we are

Nightband ("the app") is published by RezAppStudio ("we", "us"), of Infiniti Office, Gedung BEI Tower 1 Level 3, Unit 304, RT.5/RW.3, Senayan, Kec. Kby. Baru, Kota Jakarta Selatan, Daerah Khusus Ibukota Jakarta 12190. You can contact us at support@rezappstudio.com about anything in this policy.

For the purposes of the UK GDPR and the EU GDPR, we are the data controller for the limited processing described in section 4. We are not a controller of the shift data you enter, because that data never reaches us.

2. The short version

Nightband has no servers, no user accounts and no sign-up. Every shift, rate, rota and calculation you create stays in a database on your own device. We cannot see it, we do not receive it, and we could not retrieve it if you asked us to.

The one exception is advertising. Nightband is free because it shows ads supplied by Google AdMob, and AdMob processes limited device data to do that. That is described in full below.

3. Data you enter, which stays on your device

The following is stored locally and never transmitted to us or to anyone else:

• Shift dates, start and finish times, and unpaid break lengths
• Hourly rates, pay bands and any overrides you set
• Job or ward labels you choose to add
• Payslip figures you type into the payslip check screen
• All resulting calculations, totals and trends

This information is held in an app-private database that other apps on your device cannot read. If you use the backup feature, a copy is written to a location you choose — at that point the file is under your control, and where it goes next is up to you.

4. Data processed for advertising

Nightband uses Google AdMob to display ads. To serve, measure and limit the frequency of those ads, Google may process:

• Your device's advertising identifier (Android Advertising ID)
• Approximate location derived from your IP address (country or region level)
• Device model, operating system version and app version
• Ad interaction events, such as an ad being shown or tapped

AdMob does not receive your shift data, pay rates, payslip figures, employer or any calculation from the app. There is no code path that sends it.

Google's handling of this data is governed by the Google Privacy Policy. You can reset or delete your advertising ID at any time in Android Settings → Privacy → Ads, and you can opt out of ad personalisation there too.

5. Consent, and your choices in the UK and EEA

If you are in the UK or the EEA, you will be shown a consent form the first time you open Nightband, provided through Google's User Messaging Platform. You can choose whether to allow personalised ads. Declining does not restrict any app feature — you will simply see non-personalised ads instead.

You can change your choice at any time from Settings → Privacy options inside the app.

6. Legal bases for processing

Purpose	Legal basis
Serving non-personalised ads	Legitimate interests — funding a free app, with minimal impact on you
Serving personalised ads	Your consent, given via the in-app consent form and withdrawable at any time
Responding to a support email	Legitimate interests — answering the question you asked us

7. What we do not do

• We do not collect names, email addresses or phone numbers
• We do not use analytics SDKs, crash reporting or attribution tracking
• We do not sell, rent or share personal data with data brokers
• We do not access your contacts, camera, microphone, photos or precise location
• We do not build a profile of you, and we could not, because we hold nothing to build it from

8. Retention

Your shift data is retained on your device for as long as you keep the app installed, and is deleted when you clear it in-app or uninstall. We hold no copy, so there is nothing for us to retain. Ad-related data retention is determined by Google and set out in their policy.

9. Children

Nightband is intended for people in paid employment and is not directed at children under 13. We do not knowingly process any data from children. If you believe a child has used the app, note that any data involved is on that device only and can be removed by uninstalling.

10. Your rights

Under the UK and EU GDPR you have rights of access, rectification, erasure, restriction, objection and portability. Because we hold no personal data about you, these rights are exercised directly on your device:

• Access and portability — export your data via Settings → Backup
• Rectification — edit or delete any shift in the app
• Erasure — see the Data Deletion section below
• Objection to ad personalisation — withdraw consent in Settings → Privacy options

You can email support@rezappstudio.com with any request. If you are unhappy with our response, you can complain to the UK Information Commissioner's Office at ico.org.uk, or to your local supervisory authority in the EEA.

11. International transfers

We transfer nothing. Any transfers arising from ad serving are made by Google under its own safeguards, described in the Google Privacy Policy.

12. Changes to this policy

If we change this policy we will update the date above and, where the change is significant, notify you in the app before it takes effect.