Privacy Policy for ShiftProof

Last updated: September 5, 2026

Introduction

Welcome to ShiftProof. This Privacy Policy describes how we collect, use, and share information when you use our mobile application. We operate from Germany and are committed to protecting your privacy. By accessing or using the mobile application, you agree to the terms described below.

Information We Collect

Information You Provide Directly

We collect information that you provide directly to us, including:

• Account details and preferences
• Correspondence and support requests
• Any other information you choose to provide

Information Collected Automatically

We automatically collect certain technical data to operate and secure the mobile application, including:

• Device identifiers and information (device type, operating system, platform)
• Connection information and network data
• App usage data and interactions
• Crash reports and diagnostic information
• Language and locale preferences
• App version and environment information

Note: ShiftProof does not collect, store, or transmit your work schedules, hours tracked, wage calculations, or any personal employment data. All shift data remains on your device.

How We Use Information

We use collected information to:

• Provide, maintain, and improve the mobile application
• Respond to inquiries and support requests
• Monitor analytics and app performance
• Diagnose and fix technical issues
• Ensure app security and stability
• Comply with legal obligations

Third-Party Services

Firebase Services (Google)

We use the following Firebase services provided by Google LLC:

Firebase Analytics

Firebase Analytics helps us understand how users interact with the app to improve the user experience. The service collects:

• App usage patterns and feature interactions
• Device information (model, OS version, platform)
• Engagement events and session duration
• App version and environment data

Firebase Crashlytics

Firebase Crashlytics helps us identify and fix app crashes and technical issues. The service collects:

• Crash reports and stack traces
• Device state at time of crash
• Operating system and app version information
• Limited device identifiers

Important: Crashlytics does not collect or transmit your personal work data, schedules, or wage information.

For more information about Firebase services, please read:

• Google Privacy & Terms
• Firebase Data Processing Terms

Google AdMob

We use Google AdMob to serve personalized and non-personalized ads in our app. AdMob may collect:

• Advertising identifiers (such as Google Advertising ID)
• Device information and IP address
• Ad interaction data
• Usage data to help deliver relevant advertisements

Your Consent: When you first use the app, you will be presented with a consent dialog (User Messaging Platform - UMP) where you can choose whether to allow personalized ads. You can update your advertising preferences at any time through the app settings.

For more information about AdMob, please read:

• Google Ads Privacy & Terms
• How Google uses data from apps that use our services

Data Sharing

We do not sell your personal information. We may share information with:

• Service Providers: Third-party services like Firebase and AdMob as described above
• Legal Requirements: When required by law, regulation, or legal process
• Business Transfers: In connection with a merger, acquisition, or sale of assets (with notice to you)

Data Retention

• Analytics Data: Retained according to Firebase Analytics retention policies (typically 14-26 months)
• Crash Reports: Retained for 90 days by Firebase Crashlytics
• Advertising Data: Managed by Google AdMob according to their retention policies
• Local App Data: Stored on your device and can be deleted by uninstalling the app

Cookies and Tracking Technologies

We and our third-party partners may use cookies, SDKs, mobile advertising identifiers, and similar technologies to:

• Remember your preferences and settings
• Deliver relevant advertisements
• Analyze usage trends and app performance
• Maintain app security

You can control advertising tracking through your device settings:

• iOS: Settings > Privacy & Security > Tracking / Advertising
• Android: Settings > Google > Ads

Note that disabling certain tracking may impact app functionality or ad relevance.

Data Security

We implement reasonable technical and organizational safeguards to protect your information from unauthorized access, alteration, disclosure, or destruction. These measures include:

• Encrypted data transmission
• Secure data storage practices
• Regular security assessments
• Access controls and authentication

However, no method of transmission over the Internet or electronic storage is 100% secure. While we strive to protect your data, we cannot guarantee absolute security.

Your Rights (GDPR & Privacy Laws)

Depending on your location, particularly if you are in the European Economic Area (EEA), United Kingdom, or other regions with privacy laws, you may have the following rights:

• Access: Request a copy of the personal information we hold about you
• Correction: Request correction of inaccurate or incomplete data
• Deletion: Request deletion of your personal information
• Restriction: Request limitation of how we process your data
• Objection: Object to certain types of processing
• Data Portability: Request transfer of your data to another service
• Withdraw Consent: Withdraw consent for processing based on consent (e.g., personalized ads)

To exercise these rights, please contact us at the email address below. We will respond to your request within the timeframe required by applicable law (typically 30 days).

Note: Some data processed by third-party services (Firebase, AdMob) may require you to contact Google directly using their privacy tools:

• Google Privacy Controls
• Google's Privacy Request Form

Children's Privacy

ShiftProof is not intended for use by children under the age of 16. We do not knowingly collect personal information from children under 16. If we become aware that we have collected such information, we will take steps to delete it promptly. If you believe we have collected information from a child under 16, please contact us immediately.

International Data Transfers

Your information may be transferred to and processed in countries other than your country of residence, including the United States where Google's servers are located. These countries may have different data protection laws. By using the app, you consent to such transfers. We ensure appropriate safeguards are in place as required by applicable law.

Changes to This Policy

We may update this Privacy Policy periodically to reflect changes in our practices, technology, legal requirements, or other factors. When we make changes:

• We will revise the "Last updated" date at the top
• For material changes, we will notify you through the app or by other means
• Continued use of the app after changes constitutes acceptance of the updated policy

We encourage you to review this Privacy Policy periodically to stay informed about how we protect your information.

Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or how we handle your personal information, please contact us:

ShiftProof
Germany
Email: [email protected]

For privacy-related inquiries under GDPR or other privacy regulations, please include "Privacy Request" in your email subject line.