Legal

Privacy Policy

Last updated: June 2026 · ShiftlyWork · Applies to: Shiftly iOS App

The short version — your privacy in plain language

Shiftly stores all your data locally on your device — nothing leaves your phone.
We collect zero personal data — no names, email addresses, or identifiers.
No accounts required, no sign-in, no cloud sync.
No third-party analytics, advertising SDKs, or tracking tools.
Apple Health data (if granted) is read locally and never transmitted.
To delete all your data, simply delete the app.

1. Overview

ShiftlyWork ("we", "our", "us") is the developer and publisher of the Shiftly iOS application ("the App"). This Privacy Policy describes how the App handles your information.

We designed Shiftly with a privacy-first architecture. The App operates entirely offline. No user data is transmitted to our servers — because we don't have servers that handle user data. Every piece of information the App touches stays on your device, under your control.

This policy applies to all users of the Shiftly iOS application available on the Apple App Store.

2. Data We Handle

The following data is created and stored exclusively on your device. None of it is collected by ShiftlyWork or transmitted over the internet.

Shift Calendar Data

Shift types, start/end times, rotation patterns, date overrides, and locked dates.

Stored locally only

Leave Records

Annual leave, comp off, and standby entries with dates and notes.

Stored locally only

Payroll Settings

Hourly rate, differential percentages, and bonus entries you enter for estimation.

Stored locally only

App Preferences

Language, time format, colour theme, alarm offsets, and other settings.

Stored locally only

Sleep Data (Optional)

Read from Apple HealthKit only if you grant permission. Used for Fatigue Guardian analysis.

Read locally, never transmitted

Personal Identifiers

Name, email, location, device ID, IP address — none of these are collected.

Never collected

3. Local Storage & Security

All App data is stored using iOS secure local storage (UserDefaults and Core Data with iOS data protection). This means your data is protected by your device's passcode/Face ID encryption, enforced by iOS itself.

Data is scoped to the Shiftly app sandbox. Other apps cannot access your Shiftly data, and Shiftly cannot access data from other apps (except Apple Health, with your explicit permission).

Your data, your device. If you delete Shiftly from your iPhone or iPad, all associated data is permanently removed. There is no cloud copy. If you want to transfer data to a new device, you can restore from an iCloud or local iPhone backup — this is handled entirely by iOS and Apple's systems, not by ShiftlyWork.

4. Apple HealthKit

The Fatigue Guardian feature can optionally read sleep analysis data from Apple HealthKit to provide more accurate fatigue scores and wellness recommendations.

Health data access is entirely optional. The Fatigue Guardian functions without Health access, using shift pattern data alone. If you grant permission:

Sleep analysis data is read locally on your device to calculate your fatigue score.
Health data is never stored persistently within the App — it is read at the moment of calculation.
Health data is never transmitted to any server, third party, or external service.
Health data is never used for advertising, profiling, or any purpose other than the fatigue calculation shown to you within the App.

You can revoke Health access at any time in iOS Settings → Privacy & Security → Health → Shiftly.

5. Alarms & Notifications

The App requests iOS notification permissions to schedule shift alarms and deliver brief reminders. All alarm scheduling is performed locally on your device by iOS. Alarms are stored in the iOS system alarm registry — the same one used by the built-in Clock app.

ShiftlyWork has no visibility into your notification history, alarm triggers, or notification delivery status. We do not use push notification services.

6. In-App Purchases

Shiftly is purchased as a one-time $3.99 payment through the Apple App Store. All payment processing is handled entirely by Apple's StoreKit framework and Apple's servers.

ShiftlyWork never receives, processes, or stores your payment card information, billing address, or any financial details. For questions about billing, refunds, or purchase history, contact Apple Support.

7. Third-Party Services

Shiftly integrates with the following Apple system frameworks only:

Apple StoreKit — handles the one-time $3.99 purchase and purchase restoration. Governed by Apple's Privacy Policy ↗.
Apple HealthKit — optional, for sleep data as described in Section 4. Governed by Apple's Privacy Policy.
Apple UserNotifications — for local alarm scheduling. No data leaves the device.

Shiftly does not integrate any of the following:

Third-party analytics SDKs (no Firebase Analytics, Mixpanel, Amplitude, etc.)
Advertising networks or attribution tools (no Facebook SDK, Adjust, AppsFlyer, etc.)
Crash reporting services that transmit user data (no Crashlytics, Sentry, etc.)
Social login or social sharing SDKs
Any service that transmits personally identifiable information

8. Analytics & Tracking

Shiftly does not track you. There is no analytics code in the App. We do not know:

How often you open the app
Which features you use
Your device model or iOS version
Your location
Any behavioural or usage patterns

The only aggregate, anonymised data we may receive is through Apple's App Store Connect (e.g. total download counts and crash reports that iOS optionally submits to Apple, not to us). This is governed by Apple's privacy policy and is outside our control. Apple does not share individual user data with us.

9. Children's Privacy

Shiftly is designed for adult shift workers and is not directed at children under the age of 13 (or the applicable minimum age in your jurisdiction). We do not knowingly collect personal information from children. If you believe a child under 13 has provided personal information through the App, please contact us and we will take prompt action to address it — though given that no personal data is collected, this is inherently unlikely.

10. Data Deletion

Since all data is stored locally on your device, you have complete control over deletion:

Delete all App data: Go to Settings → Reset All Events within Shiftly. This permanently erases all shifts, leave records, swap logs, and settings.
Delete the App: Removing Shiftly from your device via a long-press → Remove App deletes all App data from your device.
Revoke Health access: Go to iOS Settings → Privacy & Security → Health → Shiftly and disable access. The App will stop reading Health data immediately.

Because we do not collect or store any data on our servers, there is no data held by ShiftlyWork to request deletion of.

11. Your Rights

Since ShiftlyWork does not collect personal data, the formal exercise of data rights (access, portability, rectification, erasure, objection) under regulations such as GDPR or CCPA is straightforward: all control sits with you, on your device.

If you are located in the European Economic Area (EEA) or the United Kingdom, you may have additional rights under the GDPR. However, because we process no personal data, there is no data subject request to fulfil. All your data is on your device and under your direct control.

If you have any questions about your privacy rights, contact us at the address in Section 13.

12. Changes to This Policy

We may update this Privacy Policy from time to time — for example, if we add new features that interact with new data types, or to reflect changes in applicable law. When we make material changes, we will update the "Last updated" date at the top of this page and, where required, notify users through the App or App Store release notes.

Continued use of the App after a policy update constitutes your acceptance of the revised policy. We encourage you to review this page periodically.

13. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or the App's data practices, please contact us:

We aim to respond to all privacy-related inquiries within 5 business days.