Legal
Privacy Policy
Last updated: 7 November 2026
Overlap is a shift calendar app that lets you plan your shifts and compare them with friends. This policy explains what personal data we collect, why, who we share it with, how long we keep it, and your rights under the GDPR.
1. Who we are
The controller of your personal data is EventMedConnect Ltd (company number 788759), Elm Park Villas, Ennis Road, Limerick, Ireland (“we”, “us”).
Privacy contact: info@eventmedconnect.com
2. What we collect, why, and our legal basis
Account data
Your Apple user identifier and the email address Sign in with Apple gives us (this may be Apple's private relay address). We do not ask for your name.
- Why
- Create and secure your account.
- Legal basis
- Contract
Profile
Your chosen username.
- Why
- Let friends find you and show who you are in friend lists, groups and shared calendars.
- Legal basis
- Contract
Friends and groups
Friend requests and their status, group names and membership, which calendars you share, with whom, and for how long.
- Why
- Run friends, groups and calendar comparison.
- Legal basis
- Contract
Shared calendar
If you choose to share: your shift types, rotations, shifts, day changes, leave markers (annual and sick leave) and the calendar events you mark as shared.
- Why
- Show your schedule to the friends or groups you choose.
- Legal basis
- Contract
Cloud backup (Overlap Plus)
Your shift types, rotations, shifts, day changes, leave markers, all calendar events, shift notes, note photos, alert settings and display preferences.
- Why
- Back up your schedule and restore it on a new device.
- Legal basis
- Contract
Referrals and Plus trials
Who referred whom, your answers to referral prompts, and free-trial grants.
- Why
- Run the referral programme.
- Legal basis
- Contract
Feedback
The category, title and message you send, up to two screenshots you choose from your photo library (these can contain anything you pick, so please check them first), and your app and iOS version.
- Why
- Respond to your feedback and fix bugs.
- Legal basis
- Legitimate interests (supporting users and improving the app)
Usage and diagnostics
A random user ID (not your username or email), whether you have Plus, how many friends and groups you have, whether you finished onboarding, device type (phone or iPad), app open and close events, named in-app actions (such as saving a shift or sending a friend request) with counts and settings only, and error reports. We do not record screen contents, the text of what you tap, or session replays. We do not store your IP address or derive your location from it.
- Why
- Understand how the app is used, find bugs and improve it.
- Legal basis
- Legitimate interests. You can switch this off at any time in Settings under Privacy.
Subscription status
Whether you have an active Plus subscription.
- Why
- Unlock Plus features.
- Legal basis
- Contract
Data that stays on your device. Your calendar, notes, photos, widgets and shift alerts and alarms are stored on your device. Shift alerts and alarms are scheduled on your device and are not sent to us. If you never use sharing or backup, this data does not leave your device. Photos for shift notes are only taken or added if you choose to.
Payments. Purchases and subscriptions are handled by Apple. We never receive your payment details.
Please don’t put sensitive information in notes or events, such as health details. If you back up or share them, they are stored on our systems.
3. Who we share data with
- Other Overlap users. Any signed-in Overlap user can look up your username. Friends see your username. Friends or groups you share with see the shared calendar data listed above until the share expires or you stop it. Your shift notes and photos are never shared with other users.
- Our service providers (processors), who act only on our instructions:
- Supabase hosts our database, sign-in and file storage in the EU (Ireland).
- PostHog provides our analytics, hosted in the EU (Frankfurt).
- Vercel hosts our website and invite-link pages and may process technical data, such as your IP address, when you open them.
- Apple operates Sign in with Apple, the App Store and subscriptions under its own privacy policy.
We do not sell your personal data and do not use it for advertising or for tracking you across other apps and websites.
4. International transfers
Our database and file storage are hosted in the EU (Ireland), and our analytics are hosted in the EU (Frankfurt). Some of our providers are US companies, or use sub-processors that may access data from outside the EEA, for example for support or security. Where this happens we rely on the EU–US Data Privacy Framework or on Standard Contractual Clauses. You can request a copy of these safeguards at info@eventmedconnect.com.
5. How long we keep your data
- Account, profile, friends, groups, referral and feedback data: until you delete your account.
- Shared calendar data: as soon as you stop sharing or a share expires, friends can no longer see it. The copy stays on our servers, readable by no one else, until it is next updated or you delete your account.
- Cloud backup: until you delete your account. If your Plus subscription ends, we keep your last backup so you can restore it if you subscribe again. New backups stop when Plus ends.
- Analytics data: events are kept for up to 12 months and then deleted. When you delete your account we also delete your analytics profile, and any remaining events are no longer linked to you.
- Server logs at our providers: for the short periods those providers set.
When you delete your account in the app (Settings, then Delete Account), we delete your account, profile, friends and groups, shared data, backups, backed-up photos, referral records, feedback and screenshots. We also delete your analytics profile at PostHog and revoke the Sign in with Apple connection. The app also clears the schedule, notes and alerts stored on your device. We may keep limited data if the law requires it.
6. Your rights
You have the right to access, correct, delete, restrict or object to our use of your data, and to receive a copy of it in a portable format.
- You can edit your data, stop sharing, and delete your account in the app.
- For anything else, contact info@eventmedconnect.com. We reply within one month.
- You can object to analytics at any time with the “Share Usage Analytics” switch in Settings, or by contacting us.
- You can complain to a data protection authority. Our lead authority is the Data Protection Commission in Ireland. You can also complain to the authority where you live; see the list of EU authorities.
7. What happens if you don’t provide data
You need an account (Sign in with Apple and a username) to use friends, sharing, groups, referrals and backup. Without one we cannot provide those features. Analytics and feedback are optional.
8. Automated decisions
We do not make decisions about you based solely on automated processing that have legal or similarly significant effects.
9. Children
Overlap is not intended for anyone under 16. We do not knowingly collect data from children. If you believe a child has given us data, contact info@eventmedconnect.com and we will delete it.
10. Security
Access to cloud data is restricted per user, so only you can read your own backups, and friends only see what you share with them. Data is encrypted in transit. No system is perfectly secure. If a breach is likely to put your rights at risk, we will notify you and the Data Protection Commission as the law requires.
11. Changes
If we make material changes, we will tell you in the app before they take effect and update the date above.