Privacy Policy
This policy explains what the Shiftylog app ("Shiftylog", "we", "us") and the website shiftylog.app collect, how it is used, and the choices you have. The short version: most of your data stays on your phone, we don't sell it, and we don't track you across other apps or websites.
• You can use Shiftylog with no account.
• Pay, tips, taxes, notes, water, calendar and job locations are stored only on your device.
• If you create an account, we store your name, email, and your clock-in/clock-out times and job names so they can back up and sync.
• If you have an account, we use basic usage data (such as when shifts are recorded) to understand how Shiftylog is used and to improve it.
• No advertising trackers, no data sold or shared for advertising.
1. Data stored only on your device
The following never leaves your phone (other than through iOS features you turn on, such as iCloud device backups):
- Your shifts as recorded locally, edits you make to start/finish times, and notes;
- Pay settings: hourly rates, salaries, breaks, tips, tax lines, currency and country;
- Job places and locations (for arrival reminders);
- Water log, Shifty the pet's name, level, bones and wardrobe, and app preferences;
- Reminder, vacation and notification settings.
2. Data we receive if you create an account
An account is optional. If you create one or sign in, the app sends the following to our server at api.shiftlogix.app over an encrypted (HTTPS) connection:
| Data | Why |
|---|---|
| Name and email address | To create and identify your account and let you sign in |
| Password | To authenticate you. It is sent only over HTTPS to the server and is not stored on the phone. A session token is kept in the iOS Keychain. |
| Clock-in and clock-out timestamps and the job each belongs to | To back up your timetable and show it on other devices and the web dashboard |
| Job (workspace) names | To keep your shifts organised by job across devices |
| A device identifier (the iOS "identifier for vendor", random and specific to our apps) | To recognise the device that recorded a shift and to protect the service from misuse. It is not used for advertising. |
Pay, tips, taxes and notes are not sent to the server.
3. Permissions the app may ask for
| Permission | What it is used for |
|---|---|
| Notifications | Shift, water, long-shift and (with Shifty Plus) motivation reminders. Scheduled on your device. |
| Location (While Using) | Only when you tap "Use my current location" on a job, to remember that place and remind you when you arrive. The place is stored on your phone only, and the matching is done by iOS on-device. We do not receive or track your location. |
| Calendar (write) | Optional. Adds each finished shift to the calendar you choose. We do not read your other events. |
| Apple Health (water, write) | Optional. Saves the water you log as water intake. Shiftylog does not read any Health data. |
| Live Activities / widgets | Shows the running shift on the Lock Screen and Dynamic Island. Data is shared between the app and its widgets through an on-device App Group. |
You can change or revoke any of these in iOS Settings → Shiftylog.
4. Purchases
Shifty Plus is sold through the App Store. Apple processes your payment; we never see your card or billing details. The app uses StoreKit to check whether your subscription is active and caches only that yes/no status on your device.
5. Advertising and tracking
Shiftylog does not track you. It does not use the advertising identifier (IDFA) and does not share your data with data brokers. Today the app contains no advertising SDKs. If we add advertising, we will update this policy first and ask for your permission where Apple's rules require it, before any such data is collected.
6. How we use data, including analytics
We use the data described in section 2 to:
- run your account, back up and sync your timetable, and keep the service secure;
- analyze usage and improve Shiftylog: for example, to understand how many people use the app, which features are used, and to find and fix problems and plan new features. For this we use account-linked data we already hold on our server (your account ID, device identifier, and clock-in/clock-out and job records);
- respond to your support requests.
This analysis is for our own product improvement. We do not use it for advertising, we do not link it with data from other companies, and we do not sell personal data. Pay, tips, taxes, notes, water and job locations stay on your device and are not part of it. If we add a third-party analytics or crash-reporting service, we will update this policy, name the kind of data it receives, and ask for your consent where the law or Apple's rules require it. You can object to analytics use of your account data at any time by emailing [email protected], or by deleting your account.
7. Sharing
We do not share personal data with third parties except (a) service providers that host our servers on our behalf and are bound to protect it, and (b) where required by law or to protect rights and safety. Apple provides the App Store, iOS and iCloud under its own privacy policy.
8. Retention and deletion
Account data is kept while your account is active. You can ask us to delete your account and all associated server data at any time (see Delete your account); we do so within 30 days. Data on your phone is removed when you delete the app, or use Settings → Reset application. Shifts already synced are recorded in an append-only log; deleting your account removes them.
9. Security
Network traffic is encrypted with HTTPS, the session token lives in the iOS Keychain, and server access is restricted. No system is perfectly secure, so please use a strong, unique password.
10. Your rights
Depending on where you live (for example under the GDPR/UK GDPR or the CCPA/CPRA), you may have the right to access, correct, export, delete or restrict the use of your personal data, and to object to processing. We do not sell or share personal data for cross-context advertising. Email [email protected] to exercise a right; we will respond within 30 days. You can also lodge a complaint with your local data protection authority.
11. Children
Shiftylog is intended for people who are old enough to work and is not directed to children under 13 (or 16 in the EEA/UK). We do not knowingly collect their data. If you believe a child has created an account, contact us and we will delete it.
12. International transfers
Our servers may be located outside your country. Where required, we rely on appropriate safeguards for such transfers.
13. Changes
If we change this policy we will update the date above and, for material changes, tell you in the app or by email.
14. Contact
Questions or requests: [email protected]