1. Controller and contact
This policy describes the data processing of TornCat Mossos, a private tool for organizing shifts, leave, reminders, personal work calendar and voluntary schedule sharing.
The public controller identity should match the individual, company or entity listed as the developer account holder in App Store Connect and Google Play Console.
2. Data the app may process
- Account data: email address, user identifier, display name or alias, session state and basic settings.
- Calendar and shifts: shifts, vacation, personal leave, blue days, overtime extensions, holidays, reminders, notes and manual changes.
- Jornada and Radar: hour calculations, night work, deviations, leave records and alerts derived from the calendar.
- User-entered professional records: court appearances, meetings, training, shooting practice, overtime and similar entries voluntarily added by the user.
- Sharing and Canvis: connections, invitations, visibility permissions, change/coverage requests, interests, reports and blocks.
- Support and technical data: support messages, incidents, app version, operating system and minimum data needed for security.
Do not enter sensitive institutional data. The app must not be used to store official credentials, badge numbers, classified information, police operational data, sensitive locations or third-party data without authorization.
3. Purposes
- Create and maintain the user account.
- Organize calendar, shifts, leave, reminders and related calculations.
- Enable voluntary schedule sharing and requests.
- Send notifications or reminders when enabled by the user.
- Handle support, privacy, security, deletion and abuse reports.
- Prevent abuse, fix bugs and keep the service secure.
4. Device permissions, SDKs and tracking
| Permission | Use | Required |
|---|---|---|
| Camera | Scan invitation or connection QR codes. | No. |
| Device calendar | Create or export calendars if the user enables it. | No. |
| Notifications | User-configured reminders and alerts. | No. |
| File sharing | Generate or share PDFs when requested by the user. | No. |
The current version does not integrate advertising SDKs, does not sell personal data and does not declare advertising tracking across third-party apps or websites.
5. Providers and data sharing
TornCat Mossos does not sell personal data. It may share strictly necessary data with technical providers for authentication, database, hosting, support email, app distribution and security. Supabase may process account data and user-stored data; Cloudflare Pages hosts this public legal website.
When the user shares a PDF, message, calendar or file through WhatsApp, email or another external app, that action is governed by the user's choices and the external service terms.
6. Retention, deletion and rights
Data is retained while the account is active or while necessary to provide the service, security, abuse prevention, legal obligations or defense against claims. The user may request access, correction, deletion, restriction, objection, portability or withdrawal of consent by contacting support.
7. Google Play Data Safety and App Privacy summary
Google Play and App Store declarations should state consistently that the app uses data for app functionality, account management, security, support and user-provided content, without advertising tracking unless a future SDK introduces it.