1. How to request deletion
Route 1 — by email (always works)
From the email address you sign in with, write to:
Please include:
- your company code (the code you entered when you first opened the app)
- your name as it appears on the rota
- the email address you sign in with
We acknowledge receipt and pass the request to your business, which is the controller in data protection terms. If a request arrives from an address other than the one on file we will check back — otherwise anyone could have someone else's account deleted.
Route 2 — through your workplace
It is usually quicker through management or HR: they can deactivate your account immediately and mark it for deletion.
2. What gets deleted
Deletion permanently removes:
- your credentials: the email address used as a login, and the password hash
- all active sessions — the app signs out on every device immediately
- your in-app notifications and their read status
- open requests: undecided leave, swap and shift requests
- your availability and preferences, and your language setting
- future shift assignments you have not yet worked are released
On the phone itself, the session token, the company code and the local diagnostic log disappear entirely as soon as you uninstall the app. You can do that part right now.
3. What has to stay — and why
Your employer is not allowed to delete part of your data even if you ask. That is not their decision; it is a statutory obligation:
| Retained | For how long | Basis |
|---|---|---|
| Records of hours worked and breaks taken | at least 2 years | § 16(2) ArbZG, § 17 MiLoG |
| Payroll and accounting documents | 6 or 10 years | § 147 AO, § 257 HGB |
| Employment records for social insurance | statutory period | SGB IV / BVV |
This data is blocked: it no longer appears in rotas, reports or team lists and is held only for the purpose the law prescribes. It is deleted once the period expires.
A till receipt already issued with your name on it as the serving staff member also remains part of the fiscally signed record and cannot be altered afterwards.
4. Timescale
- Immediately: the account is blocked and all sessions end.
- Within 30 days: the data listed above is deleted.
- Once statutory retention periods expire: the blocked data is deleted too.
You will get confirmation once deletion has been carried out (Art. 12(3) GDPR: a reply within one month at the latest).
5. More
What the app processes in the first place is set out in the privacy policy. Your other rights — access, rectification, restriction, objection — are described there in section 11.