Release Notes

Version 1.2.0

macOS 10.15 or later, Universal (Apple Silicon and Intel) · Windows 10 or later, 64-bit

Device limits, now actually enforced

• Your licence is now checked against a real device limit — this product's licence is, and has always been, one machine at a time; that limit is now genuinely enforced server-side rather than assumed.
• New: Manage Devices — see the device currently using your licence and free it up from Settings before activating on a new machine.

Fixed

• Fixed a device that just activated a licence receiving a token that could fail its own local verification.

Version 1.1.1

macOS 10.15 or later, Universal (Apple Silicon and Intel) · Windows 10 or later, 64-bit

Highlights

• Fixed: Activate could still fail on some Macs, even after 1.1.0. 1.1.0 made a Keychain save failure visible instead of silent — this release fixes the save itself, so Activate works the first time on every Mac. Windows was never affected by this issue.

Version 1.1.0

macOS 10.15 or later, Universal (Apple Silicon and Intel) · Windows 10 or later, 64-bit

Highlights

• Manage your subscription without leaving the app. Cancel and Update Payment Method are now dedicated actions on the Licence screen, instead of one generic “Manage Subscription” link — each takes you straight to the right screen on Stripe's secure, hosted page.
• Switch plans in-app. Move up or down a plan tier directly from the Licence screen. Moving up applies immediately; moving down takes effect at the end of your current billing period, so you keep what you're paying for until then.
• Fixed: Activate could silently do nothing on some machines. On a small number of fresh installs, pasting a valid licence key and pressing Activate produced no confirmation and no error — the key was valid, but saving it to the Keychain could fail without telling you. Activate now always shows a clear result, success or failure.

Version 1.0.0 — First Public Release

macOS 10.15 or later, Universal (Apple Silicon and Intel) · Windows 10 or later, 64-bit

The Local edition of Toi 'n' Moi® Rota Management: the same scheduling engine as the App Store edition, running entirely on your own computer. No account, no login, no cloud.

Highlights

• Your data never leaves your machine. Everything lives in a single database file — in your Application Support folder on a Mac, or under your AppData folder on Windows. There is no server to sign in to, and the app makes no network connection except to check your licence and look for updates.
• No login. The app opens straight into your rota. It is built for one organisation on one machine — there are no user accounts to create or manage.
• The full scheduling engine. Auto-fill a week against your own rules: availability, contracted hours, rest periods, training and compliance, continuity of care, team leaders, groups and locations.
• Priorities you control. Drag the scheduling rules into the order your organisation actually works to, and switch off the ones that don't apply. The auto-scheduler follows your order, not ours.
• Backup and restore, built in. A rolling automatic backup runs on every launch, and you can export a full backup to anywhere you like — which is the one that matters, since the automatic ones sit on the same disk.
• Excel import and export. Bring staff, clients, shifts and availability in from a workbook; print or export rotas as PDF.
• Free for up to 5 staff, permanently. Not a trial — the Free tier is a real plan with every feature; the paid plans only raise the number of staff you can schedule.
• Automatic updates, signed and delivered by Sparkle on the Mac and WinSparkle on Windows. Updates are free and separate from your subscription.

Security & Privacy

• Rota data is stored locally and is never uploaded.
• The only network calls are licence activation/renewal and the update check.
• Your licence key is held by the operating system — the Keychain on a Mac, Credential Manager on Windows — not in a file.
• The Mac edition is signed with a Developer ID certificate and notarised by Apple, so it opens normally with no Gatekeeper warning. The Windows edition is not code-signed and Windows will warn you on first run — see Known Limitations below.
• Updates are cryptographically verified before installation on both platforms, regardless of that first-run warning. Payment is handled by Stripe in your browser — card details never reach this app or our servers.

Known Limitations

Stated plainly, because you should know before you buy:

• The Windows installer is not code-signed. Windows will show “Windows protected your PC” the first time you run it, and you'll need to click More info → Run anyway. It is not a virus warning — Windows simply doesn't recognise an installer it hasn't seen before, and we haven't bought a Windows signing certificate for this release. The Read Me explains what to check before you click through. The Mac edition is unaffected.
• One machine, one organisation. There is no syncing between computers. If two people need the same rota, use the App Store (cloud) edition instead. Moving to a new computer means exporting a backup and restoring it — which does work between a Mac and a PC.
• No staff self-service. Employees cannot log in to view shifts or request time off — the manager enters time-off requests on their behalf. The employee portal is a cloud-edition feature.
• Automatic backups are on the same disk as your data. They protect against mistakes in the app, not against losing or breaking the computer. Export a real backup somewhere else.
• Enterprise is sales-led. Plans above 150 staff are arranged by email, not in-app.
• A licence covers one machine. Activating on a second Mac needs a second licence.
• The seat cap is enforced, not advisory. Above your plan's staff count, auto-fill and saving stop until you move up a plan or reduce staff.
• The app checks your licence roughly monthly. It works offline for 35 days at a time, and renews quietly a week before that runs out — so being offline for a fortnight is fine, but it cannot work offline forever.