Privacy Policy
Сбол Мобайл: Помощник
This policy explains how this application handles information and how to contact us about privacy.
Information we process
Sbol Mobile: Assistant is a hotel staff management app without accounts. Staff names, roles, departments, contact details and manually selected work statuses, shift assignments and times, and task titles, descriptions, priorities, assignees, deadlines and statuses are stored locally in SQLite and synchronized to our server. A randomly generated installation secret is stored in the device Keychain and sent over HTTPS to authorize requests; the database stores its SHA-256 hash. Your manager name, role, chosen profile photo, language, reminder preference and daily staffing target remain on the device. The app does not access your address book or geographic location. The hosting infrastructure receives network metadata such as IP address, request time and requested route when the app or public pages are accessed. Cloudflare receives public API and website requests as the HTTPS proxy, including transmitted request content and network/security metadata.
How we use information
We use operational records to display staff profiles, plan shifts, assign and track tasks, calculate reports and synchronize offline changes for this installation. The secret isolates one installation's records from others. The manager profile personalizes the interface locally. When enabled, local notifications remind you about task deadlines and shift start times. Infrastructure and limited error logs help operate and diagnose the service. There is no advertising, tracking analytics, account system or outbound email delivery.
Service providers and sharing
The backend and PostgreSQL database are hosted on Railway, which processes requests and stores server records as our infrastructure provider. Cloudflare terminates public HTTPS and proxies requests to the Railway origin over HTTPS. Cloudflare can process request content and network/security metadata to route and protect these endpoints. Railway, Cloudflare and their infrastructure providers can process operational network and service logs. Our application error logs contain a request identifier and technical error code, not record contents or authorization headers. No advertising or analytics SDK is included. Reports leave the app only when you choose a destination in the iOS share sheet; that destination processes the exported text under its own practices. A profile image selected through the system photo picker remains local.
Data retention
Operational records remain locally and on the server until you delete them or delete this installation's data. Pending offline changes remain in the local outbox until acknowledged by the server. The server retains mutation identifiers and payload hashes to prevent duplicate synchronization until installation deletion. No automatic age-based deletion is implemented. We do not promise a fixed retention period for Railway or Cloudflare infrastructure/security logs or provider-managed backups; any retained backup copies follow the hosting provider's configured lifecycle. The app marks its local database location as excluded from device backup, and its installation secret is device-only Keychain data.
Deleting your information
You can delete individual staff, shifts and tasks. Deleting staff also deletes their shifts and removes their assignment from tasks. Settings includes Delete installation data, which clears local records and the local manager profile and queues deletion of the server namespace, including mutation receipts. Offline server deletion completes after the app reconnects; keep the app installed and open it with a connection until synchronization completes. Deletion removes active database records but does not claim immediate erasure from infrastructure logs or any provider-managed backups. Uninstalling alone does not send a server deletion request. Loss of the installation secret prevents recovery and can prevent us from identifying your private records.
Permissions and your choices
Notifications are optional and requested only when you enable reminders. You can disable reminders in the app or withdraw notification permission in iPhone Settings. Reminders are scheduled locally; no push notification provider is used. The system photo picker shares only the photo you select for the local manager avatar and does not grant general photo library access. You can remove or replace this image in Settings. No location, camera, microphone, contacts or tracking permission is requested.
Your privacy rights
You can inspect and edit your records, export a text report and delete installation data in the app. Privacy questions and applicable access, correction or deletion requests can be sent to atthheellssttaann@icloud.com. This email is a public privacy contact, not a login or an in-app message delivery service. Applicable rights depend on your jurisdiction. Because we do not use accounts, we may need information that establishes which installation data is yours and cannot restore records without the installation secret. Only enter employee information that you are authorized to manage.
Security
Public API and website traffic uses HTTPS to Cloudflare and HTTPS from Cloudflare to the Railway origin. The client uses HTTPS for the public API, a cryptographically random installation secret in Keychain and device-protected local storage. Server authorization scopes every private operation to the hash of that secret, with database relationship constraints, transactions, validation and request limits. Public home, privacy and readiness routes do not expose private records. The secret is not a shared application credential and is never intentionally written to application logs. No system is risk-free; protect access to your device and exported reports.
Children’s privacy
The app is intended for adult hotel managers and administrators and is not directed to children. We do not knowingly solicit children's information. Staff records should be entered only for legitimate hotel management purposes by an authorized operator. Contact atthheellssttaann@icloud.com if you believe information about a child was entered inappropriately.
Changes to this policy
We will update this policy when the app's processing or infrastructure practices change. The effective date appears on this page. The current policy is accessible from Settings in the app and on this public website without signing in. Material changes will be described in the updated policy.