Privacy Policy
Last updated September 21, 2026
FreeRoster (“FreeRoster,” “we,” “us”) is free staff scheduling, operated by Brobata, LLC. Managers build the schedule at freeroster.com; staff read it in the FreeRoster app. This policy covers both, and explains what we collect, why, and the choices you have.
What we collect
Your account. Your email address and name. If you sign in with Google or Apple, we receive your name and email from them, nothing else. If you set a password, it is stored hashed by our authentication provider; we never see it.
Schedule information.What your team puts into FreeRoster to run the schedule: shifts, roles and positions, the days you can't work, time-off requests and the notes on them, and your manager's approvals. Managers may also add staff details used for planning, such as a phone number, hire date and pay rate. Pay rates are visible only to the team's owners and managers, never to other staff.
Your device. If you allow notifications in the app, we store a push token for your device so we can tell you when the schedule is posted or a request is decided. We also keep sign-in tokens so you stay signed in. The web app uses privacy-friendly, cookie-free page-view counts (Vercel Web Analytics).
We do not collect your location, contacts, photos or files, and there are no ads or advertising trackers in FreeRoster.
How we use it
- To run the service: sign you in, show you your team's schedule, deliver requests to your manager and decisions back to you.
- To send the emails and notifications the service depends on: sign-in codes, invites, schedule updates.
- To keep it working: diagnosing errors and preventing abuse.
We never sell your personal information and we don't use it for advertising.
Who can see it
Only the people on your team, according to their role: staff see the posted schedule and who is working; owners and managers see what they need to run the team. This is enforced in the database itself (row-level security), not only in the app. Brobata staff access your data only to support you or when the law requires it.
Service providers
We use a small number of providers to run FreeRoster. They process data only on our instructions:
- Supabase: database and authentication (United States).
- Vercel: hosts freeroster.com.
- Resend: delivers sign-in codes and invite emails.
- Google: Firebase Cloud Messaging delivers push notifications to Android devices; Google Sign-In, if you choose it.
- Apple: Sign in with Apple and Apple Push Notification service, if you use an iPhone.
Keeping and deleting your data
We keep your account for as long as you use it. You can delete it at any time, in the app under Settings → Delete account, on the web under Settings, or by email. See Delete your account for exactly what is removed and what stays with the team.
Your rights
You can ask for a copy of your data, ask us to correct it, or ask us to delete it by writing to support@brobata.com. Residents of California (CCPA/CPRA), the EEA and the UK (GDPR) have these rights by law, and we extend them to everyone.
Security
Data is encrypted in transit (TLS) and at rest. Access is limited by role at the database layer. If we ever discover a breach affecting your data, we will tell you by email within 72 hours of confirming it.
Children
FreeRoster is a workplace tool for adults. We do not knowingly collect information from children under 13. If you believe a child has given us information, contact us and we will delete it.
Changes
If we change this policy in a way that matters, we will update this page and email account holders at least 14 days before the change takes effect.
Contact
Brobata, LLC, Austin, Texas. support@brobata.com