Privacy Policy
Effective July 17, 2026
TwelveHr is built local-first. There is no account to create, no server that stores your shifts, and no analytics watching what you do. This page explains exactly what data exists, where it lives, and the one narrow exception (subscription receipts).
Everything you enter — shifts, hourly rates, differentials, overtime rules, rotation schedules — is stored in a database on your phone. It is never uploaded anywhere by the app. Deleting the app deletes all of it.
Payment is handled entirely by Apple through your App Store account; the app never sees your payment details. To check whether your subscription is active, the app uses RevenueCat, which receives a random anonymous identifier and your App Store receipt. This identifier is not linked to your name, email, or anything you enter in the app.
CSV timesheets, PDF exports, and backup files are created only when you tap the button, and go only where you send them via the iOS share sheet. The app keeps no copy outside your device.
Delete the app and every shift, rate, and setting is gone. There are no server-side copies to request or erase. To remove the anonymous purchase identifier held by RevenueCat, contact us and we will request its deletion.
If this policy ever changes, the new version will be posted at this address with an updated effective date. Material changes will be called out in the app's release notes.
Questions about privacy? Open an issue on our support tracker.