Privacy Policy

Introduction

Shifty respects your privacy and is committed to protecting your personal data. This policy describes what we collect, how we use it, and your choices.

Information we collect

• Account information: name, email, and phone number if you add one, plus anything else you put in your profile.
• Work data: shifts, roles, teams, availability, and requests you create in the app.
• Team chat: the messages you send in team chats and private conversations, including photos, files, voice messages, and any location or contact you choose to share. They are stored on our servers so the people in that chat can read them. Attachments are kept in private storage that only members of the chat can open. The microphone is used only while you hold the record button, and your location and contacts are read only when you choose to share them.
• Location: your precise location, only when you check in or out of a shift that uses location, or when you choose to share a place in a chat. Shifty does not track your location in the background.
• Device permissions: your calendar, only to add your shifts to it when you ask; your contacts, only when you choose to add employees from them (on Android you pick a single contact, and the app never sees the rest of your address book); photos and camera, only for the pictures you pick or take; the microphone, only while you record a voice message.
• Subscription data: your plan, its status and purchase history from Apple, Google Play or Paddle. We never see your full card details.
• Usage and device data: which screens and features are used, device type, app version, and a token for push notifications. On Android, Google Analytics for Firebase also collects the device's advertising ID. We use this for analytics only: Shifty shows no ads and does not sell your data.

How we use information

• Provide core features (scheduling, notifications, team coordination).
• Support users and respond to inquiries.
• Improve performance, fix bugs, and develop new features.
• Maintain security and prevent abuse.

Sharing

We do not sell your personal data. We may share data only:

• With the people in your team and in your chats, so schedules, requests and messages work.
• With the service providers listed below, only to run Shifty.
• If required by law or to protect our rights and safety.

Service providers

We use trusted companies to run Shifty. Each processes data only to provide its service to us:

• Cloud hosting — our database, sign-in, file storage and website.
• Analytics and push notifications — Google Analytics for Firebase and Firebase Cloud Messaging.
• Apple and Google — Sign in with Apple, Google sign-in, and purchases in the App Store and Google Play.
• Subscription management — keeps track of subscriptions bought in the iOS and Android apps.
• Paddle — billing for web subscriptions, as our Merchant of Record.
• Email delivery — sends our emails.
• AI providers — see AI features below.

Data security

We use reasonable technical and organizational measures to protect information. No internet transmission is 100% secure.

Data retention

We keep your data for as long as your account exists. When you delete a chat message, its text and attachments are removed. When you delete your account, we delete your data as described on our account deletion page. Copies may remain in our backups for a limited period before they are overwritten.

Children

Shifty is not intended for anyone under 16, and we do not knowingly collect data from children. If you believe a child has given us personal data, contact us and we will delete it.

Where your data is processed

Our servers and service providers may be located outside your country, so your data may be processed in other countries, including the United States.

Your rights

• Access, correct, or delete your data (subject to legal requirements).
• Delete your account at any time — see how to delete your account.
• Opt out of non-essential communications.

AI features

Some features use AI: the AI assistant, scanning a schedule or a staff list from a photo, and short helpers such as creating a shift from a sentence or detecting your industry. The text or image you submit, together with any team data it needs (employee names, shifts, hours, pay figures), is sent to a third-party AI provider to process.

Some of these providers may log requests or use them to improve their models, under their own terms. We do not use your data to train AI models. Avoid entering information you would not want processed by a third-party AI service. AI features are optional — you can use Shifty without them.

Contact

Questions or requests: support@shifty-app.com