Privacy Policy
Shift Calendar · Effective October 23, 2026
Shift Calendar is made by Pavel Pakalnis, Poland ("we", "us"), who is the data controller for the data described here. This policy explains what the app collects, why, and what stays only on your iPhone. We keep it short and plain.
The short version
- No account, no sign-up, no ads.
- Your schedule, shifts, notes and pay rates stay on your iPhone. We never see them.
- We receive crash reports to fix bugs, and the messages you choose to send us. No analytics, no tracking.
- We don't sell your data and don't use it to track you across other apps or websites.
Data that stays on your iPhone
Your schedule, shifts, notes, reminders, pay rates and earnings, and your settings are stored only on your device (and in your iPhone backup, if you use one). They are not sent to us or to anyone else.
- Your calendars. If you allow access, the app reads events from your iPhone calendars to show them next to your shifts. Events are read on your device and are never copied to us.
- Share with Family. If you turn it on, the app adds your shifts to a calendar named "Shifts" in Apple Calendar. If that calendar is in iCloud, Apple stores it, and the people you share it with in the Calendar app can see it. We don't receive it. Each event has a link to a page on our website ("A shift from Shift Calendar"); the link holds only the shift's date and a code for its shift type, and opening it simply loads that page.
- Notifications and alarms are scheduled on your iPhone; their content isn't sent anywhere.
Data we receive
| What | Why | Where |
|---|---|---|
| Feedback you send (Contact Us): your message, your email if you add it, the app version, iOS version, iPhone model, whether you have Pro (and, during a free trial, whether it renews), your region, first day of the week and where in the app you opened the form. | To read and answer your message and to understand the problem. | Google Firebase (Cloud Firestore) |
| Crash reports: what the app was doing when it crashed, the device model, iOS version, and an app installation identifier. | To find and fix bugs. | Google Firebase Crashlytics |
| Emails you send to [email protected]: your email address and what you write. | To answer you. | Cloudflare (Email Routing), our email provider |
Crash reports don't include your shifts, notes, calendar events or pay. They are tied to a random installation identifier, not to your name or email. We don't use the advertising identifier (IDFA) and don't track what you do in the app.
Our web pages
Help, this policy, the Terms and the page an exported shift links to are hosted by Cloudflare. As with any website, your device's IP address is used to deliver the page, and Cloudflare may keep it briefly in security logs. We don't add cookies, analytics or tracking to these pages.
Purchases
Subscriptions and the one-time purchase are handled by Apple. We don't receive your payment details. The app only checks with Apple whether you have an active purchase.
Who processes the data
- Google (Firebase) stores feedback and crash reports on our behalf, which may include servers in the United States. See Firebase privacy.
- Cloudflare hosts our web pages and forwards email sent to [email protected]. See Cloudflare's privacy policy.
- Apple handles purchases, iCloud and Apple Calendar under Apple's privacy policy.
Google and Cloudflare process this data for us under data processing agreements. When data is transferred outside the EU or UK, it is protected by their safeguards approved for such transfers (the EU–US Data Privacy Framework and Standard Contractual Clauses). We don't sell your personal information or share it for advertising.
How long we keep it
- Feedback – until it's no longer needed to help you, or until you ask us to delete it.
- Crash reports – about 90 days.
- Emails – as long as needed to help you, or until you ask us to delete them.
Security
Data is sent over encrypted connections. Feedback can only be added from the app – nobody can read it back through the app or its connection; only we can, in the Firebase console.
Legal basis (EU and UK)
We process crash reports based on our legitimate interest in keeping the app working, and feedback and emails based on your request to contact us (to answer it) and our legitimate interest in understanding the problem.
Your rights
You can ask us for a copy of your data (also in a format you can move to another service), or to correct, restrict or delete it, and you can object to processing based on our legitimate interest. Write to [email protected] – we reply within one month. If you're in the EU or UK, you can also complain to your data protection authority (in Poland, the UODO; in the UK, the ICO). California residents have similar rights to know and delete; we don't sell or share personal information.
We can find and delete your feedback by the text or email you sent. Crash reports aren't linked to your name or email, so we usually can't find them from a request; they expire after about 90 days.
To delete everything stored on your iPhone, delete the app. To remove the shared "Shifts" calendar, use Share with Family → Remove from Apple Calendar.
Children
Shift Calendar is meant for working adults and is not directed at children under 16.
Changes
If this policy changes, we'll update it here and change the date at the top.
Contact
Pavel Pakalnis, Poland · [email protected]