This Privacy Policy explains how Onyx Labs (“Onyx Labs”, “we”, “us”) handles information when you use Work Assistants (the “App”) on iPhone and iPad. We built the App to do one job — help teams manage tasks and shifts — and we only collect what that job needs. We do not sell your data, show ads, or use third-party advertising or analytics trackers.
1. Information we collect
Account information
- Sign in with Apple, Google Sign-In or email & password. We receive your email address (Apple may give us a private relay address if you choose “Hide My Email”), a display name, and which sign-in method you used. Passwords are handled by our authentication provider and stored only as secure hashes — we never see them.
- Optional profile details you add, such as a display name, avatar and time zone (used to send reminders at the right local time).
Content you create
- Spaces, members and roles; tasks, steps, assignees, priorities, due dates, recurrence and comments; announcements and polls; shifts, shift templates, leave requests and shift-swap requests; and the activity history of these items.
- Content in a space is visible to the other members of that space, according to their role. Please don’t put sensitive personal information (for example health data) into tasks or comments.
Device and notification data
- If you allow notifications, an Apple Push Notification service (APNs) device token and your notification preferences, so we can send reminders (task due today, shift starting soon) and team updates (new assignments, comments, approvals).
Purchase information
- Subscriptions are processed entirely by Apple through the App Store. We receive a signed transaction record (product ID such as
missionboard_pro_monthly/missionboard_pro_yearly, purchase and expiry dates, transaction identifiers) so we can verify and unlock Work Assistants Pro across your devices. We never receive your payment card or billing details.
Information that stays on your device
- Calendar: if you export shifts to Apple Calendar, the App only writes events to the calendar you choose. It does not read your other calendar events, and nothing from your calendar is sent to us.
- A local cache of your data and the Home Screen widget’s snapshot are stored on your device so the App opens quickly.
We do not collect your location, contacts, photos, browsing history, or advertising identifiers, and we do not track you across other companies’ apps or websites.
2. How we use information
- To create and secure your account and keep you signed in.
- To provide the App’s features: sync your spaces, tasks and shifts across devices and with your team.
- To send the notifications you have turned on.
- To verify subscriptions and apply plan limits (Free / Pro).
- To respond to support requests and to keep the service secure, prevent abuse and fix bugs.
We process this information because it is necessary to provide the App you asked for (contract), for our legitimate interests in running a secure service, and — for notifications — with your consent, which you can withdraw at any time in iOS Settings or in the App.
3. Service providers
We share information only with providers that help us run the App, under their own data-protection terms, and never for their own marketing:
- Supabase — database, authentication and server functions that host your account and team data.
- Apple — Sign in with Apple, push notifications (APNs), and App Store payments (StoreKit).
- Google — Google Sign-In, only if you choose to sign in with Google.
We may also disclose information if required by law, or to protect the rights, safety and security of our users and the service. If Onyx Labs is ever involved in a merger or acquisition, we will notify you before your information becomes subject to a different policy.
4. Retention and account deletion
We keep your information for as long as your account is active. You can delete your account at any time inside the App: Me › Account details › Delete account (see step-by-step instructions). When you delete your account we permanently remove your login, profile, push tokens, subscription entitlement record, space memberships, your comments and any spaces where you were the only member. Tasks you created in spaces shared with others are re-assigned to another member so the team’s work isn’t lost. Residual copies may remain in routine encrypted backups for a limited period before they are overwritten.
Deleting your account does not cancel an App Store subscription — please cancel it in your Apple ID settings.
5. Your choices and rights
Depending on where you live (for example under Hong Kong’s Personal Data (Privacy) Ordinance, the EU/UK GDPR or California law) you may have the right to access, correct, export or delete your personal data and to object to or restrict certain processing. You can edit most information directly in the App, delete your account in the App, or email hello@onyxlab.dev. We will respond within 30 days. You may also complain to your local data-protection authority.
6. Security and international transfers
Data is encrypted in transit (HTTPS/TLS) and protected by row-level access rules so that only members of a space can read that space’s data. Our providers may process data in countries other than yours; where required we rely on appropriate safeguards for such transfers. No method of transmission or storage is 100% secure, but we work hard to protect your information.
7. Children
The App is designed for teams and workplaces and is not directed to children under 13. We do not knowingly collect personal data from children under 13; if you believe a child has provided us data, contact us and we will delete it.
8. Changes
We may update this policy as the App evolves. We will post the new version here with a new “Last updated” date and, for material changes, let you know in the App.
9. Contact
Onyx Labs · hello@onyxlab.dev · onyxlab.dev