On Time — Privacy policy

Last updated 27 September 2026. This is the same text shown inside the app under Settings → Privacy & security.

Your rota stays on your phone

There is no account, no server of ours, and nothing is collected about you. The only thing that leaves the phone is what a journey lookup needs, and this page says exactly what that is.

What stays on your phone

• Your calendar entries and anything read from a rota link or spreadsheet.
• Your home and work addresses and their map positions, your travel choices, and your shift codes.
• The Activity diary (what the app did and when), the alarm plan, and a note of typical journey times.
• All of it is kept in the app's private storage, which other apps cannot read. It is not included in phone backups to the cloud.

What leaves your phone, and to whom

• To Google Maps, for each journey lookup: the map position of where you set off from and of your workplace, how you travel, and the departure time. Never your name, your calendar, or the reason for the journey. Like any internet request it carries your phone's network address. Google's privacy policy applies to what Google does with it.
• If the phone cannot turn an address you typed into a map position, the address text alone is sent to Google's address service. A UK postcode is sent, alone, to postcodes.io, a free public service, to find its position.
• If you add a rota link or a Google Sheet, the phone fetches that link directly. Whoever runs that link sees the request, as they would if you opened it in a browser.
• If you let On Time get a rota link for you, your rota website opens inside the app and you log in there as usual. On Time reads only the page's buttons and the link, never what you type, and forgets the website's login when you leave.
• If you switch on "What's on near you" under Events: your home area rounded to about a kilometre, how far you will travel, and a date range are sent to Ticketmaster to list events. Never your name, calendar, shifts or interests by name (the app filters by interest on the phone). Off unless you switch it on; tickets are bought on Ticketmaster's own page. Ticketmaster's privacy policy applies to what it does with the request.
• If you connect Google Tasks or Microsoft To Do under Tasks: you sign in with Google or Microsoft in their own screen; the app never sees your password. It reads your task lists and writes back the ticks, nothing else, and only while connected. Disconnect under Tasks to stop. What the app receives from Google is used only to show your tasks and tick them off in the app; it is not stored anywhere but your phone, not shared with anyone, and not used for advertising or to train any model. On Time's use of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.
• Nothing is sent to us. We have no server for this app and cannot see your data. There are no analytics, no crash reports, no advertising, and no tracking identifiers.

Permissions and why

• Calendar: read at set-up. Writing is asked for separately, the first time you change a task's name or time in the app, and is used only to make that one change in the calendar the entry came from. If you choose to share your shifts, the app also adds, changes and removes entries of its own in the one calendar you picked for that, and nowhere else. Otherwise it never adds or deletes entries.
• Notifications, exact alarms (and on Android: full-screen alarm, Do Not Disturb access and battery exemption): so the alarm rings at the right minute and is not silenced by the phone.
• Location: when you tap "Use my current location", and one reading at each traffic check before an alarm so the journey starts from where you are. That needs location "all the time". Nothing is tracked between checks and no position is stored. Without the permission the journey is planned from home.
• Internet: for the journey lookups and any rota link you add.
• Files: only a spreadsheet you choose to import, through the phone's own file picker.
• Run at start-up (Android): so the alarm and the timed traffic checks survive a restart of the phone.

How it is protected

• Every connection the app makes is encrypted (HTTPS). Unencrypted connections are refused.
• Data on the phone is stored in the app's private area, which the phone encrypts when a screen lock is set.
• The Google Maps access key inside the app is locked to this app, so it cannot be used by anything else.
• The app contains no third-party advertising or analytics code.

Deleting your data

• "Reset everything" in Settings wipes everything the app holds. Uninstalling the app does the same.
• Because nothing is stored anywhere else, there is nothing further to delete and nothing to request from us.

Contact

Questions about this policy, or anything else about the app: SiriusTech, ontime.appsupport@gmail.com.