This Privacy Policy explains what information ShiftGoing("we", "us") collects when you use our web app, our iPhone app and this website (together, the "service"), how we use it, who we share it with, and the choices you have.
Who is responsible for your data
ShiftGoing is a workforce scheduling service that organizations (our "customers") use to manage their staff, shifts and locations.
- Your account (your email address, name, sign-in methods and sessions): we decide how this is used and are responsible for it.
- Your organization's data (staff records, shifts, check-ins, check photos, locations, costs and payslips): your organization controls it, and we process it on its behalf to provide the service. If you are a staff member, the organization that schedules you is responsible for that data. Please contact them first about requests concerning it; we will help them respond.
Information we collect
- Account data: your email address, your name if you provide one, and the organizations you belong to, with your role in each.
- Sign-in data: one-time sign-in codes and links (stored encrypted or hashed, and valid for minutes), passkey public keys (your private key never leaves your device), and active sessions, including the IP address and the device or browser type they were created from.
- Organization data entered by you or your organization: staff names, email addresses and phone numbers, tags, locations and their addresses, shifts, notes, pay rates and costs, and payslips.
- Check-in and check-out data: when you check in or out of a shift, the time and your device's precise location (latitude, longitude and accuracy), any note you add, and any check photos you take or choose.
- Check photos: the photo itself, plus the device make and model and the time it was taken, read from the photo when you add it. Before upload the photo is resized, and all embedded metadata, including any GPS location, is removed from the stored file.
- Billing data: subscriptions are sold by our payment provider, which acts as Merchant of Record. It collects payment details directly; we never see or store card numbers. We keep the subscription's plan, status and renewal dates.
- Technical and usage data: server logs, error reports (for example the page and browser where an error happened), and aggregated, cookie-free page-view and performance statistics on the web.
The iPhone app
The ShiftGoing iPhone app uses the same account and the same data as the web app. On your device:
- Location is read only while the app is open, at the moment you check in or out of a shift, and only after you allow it. The app never tracks your location in the background.
- Camera and photos are used only when you take or choose a check photo. The app sees only the photos you pick.
- Your session is kept in the iOS Keychain, and display preferences (such as the theme) on the device.
- The app contains no advertising, no third-party analytics and no tracking. We do not track you across apps or websites owned by other companies, and we do not sell your data.
How we use information
- To provide the service: sign you in, show your shifts, and record check-ins and photos for your organization.
- To keep the service secure: protect sign-in, detect abuse and investigate errors.
- To send service emails, such as sign-in codes, invitations, staff access notices and payslips.
- To manage organizations' subscriptions and billing.
- To provide support and respond to your requests.
- To meet legal obligations.
We do not use your data for advertising, and we use an organization's data only to provide the service to that organization.
Who can see your information
Inside an organization, its owners, admins and members (and viewers, read-only) can see that organization's shifts, staff records, check-ins, locations and check photos. Staff who use the staff app see only their own shifts.
Service providers (subprocessors)
We use a small number of trusted providers to run ShiftGoing. Each one processes only the data needed for its function, under contract with us, by category of service:
- Application hosting, and cookie-free web analytics.
- Database hosting.
- File storage, for check photos.
- Delivery of service emails.
- Payments and subscriptions, through a Merchant of Record.
- Error monitoring for the web app, configured to exclude cookies and sign-in secrets.
A current list of named providers is available on request at the address below.
These providers may store and process data outside your country, including in the United States. Where the law requires it, we rely on appropriate safeguards for these transfers, such as standard contractual clauses.
We may also disclose information when the law requires it, or to protect the rights and safety of our users and the service.
Data retention
- Sign-in codes and links expire within minutes. Sessions expire after 30 days, or when you sign out.
- Your account data is kept until you delete your account.
- Organization data is kept while the organization exists. When an organization is closed, its members lose access immediately and its data is deleted within 90 days, unless the law requires us to keep part of it.
- Billing records are kept by our payment provider for as long as tax law requires.
Deleting your account
You can delete your account at any time, without contacting us:
- iPhone app: open the menu, tap your name at the bottom, then Delete account.
- Web app: open your account menu at the bottom of the sidebar, then Delete account.
Deleting your account immediately and permanently deletes your login, sessions, passkeys, organization memberships and preferences, and your customer record with our payment provider. If you own an organization, that organization is closed and its subscription is cancelled; its data is then deleted as described above.
Records an organization keeps about you as a staff member (for example your shifts, check-ins and payslips) belong to that organization and are not removed when you delete your account. To have them erased, contact the organization, or contact us and we will pass your request on.
Your rights
Depending on where you live, including under the GDPR and Vietnam's personal data protection law, you may have the right to access, correct, export or erase your personal data, to object to or restrict its processing, and to withdraw consent. You may also complain to your local data protection authority. To exercise these rights, email us at the address below; we respond within 30 days.
Security
All data is encrypted in transit (HTTPS). Sign-in is passwordless, sign-in codes are stored encrypted, sessions are signed, and check photos are served only through short-lived signed links. No system is perfectly secure, but we work to protect your data and will notify affected users of a breach as the law requires.
Children
ShiftGoing is a workplace tool and is not directed to children. We do not knowingly collect personal data from children under 16.
Changes to this policy
We update this page when our practices change, and revise the date at the top. For material changes, we notify account owners by email or in the app.
Contact
Questions or requests about your privacy? Email hello@shiftgoing.com.