Privacy Policy

1. Who we are

ShiftDeck (“ShiftDeck”, “the app”) is a shift calendar and alarm app for iPhone, iPad, Apple Watch and Android, published by NaughtySpirit (“we”, “us”), based in Bulgaria. We are the controller of the personal data described here. This policy covers the app and the pages under retroselfie.me/shiftdeck, including the share pages the app creates.

2. What stays on your phone

Everything you enter is stored in a database on your phone: your schedules and their names, shift types and times, patterns, swaps, sick days, overtime, notes, pay settings, alarm settings and your app settings. ShiftDeck works fully offline, and without an account none of this is sent to us or to anyone else.

• Backups and exports (the backup file, calendar file and PDF) are created on your phone and go only where you send them.
• Paper import reads a photo of a printed roster on your phone, using Apple's Vision framework on iPhone and Google's on-device ML Kit text recognition on Android. The photo is not uploaded or kept.
• Widgets, the Live Activity and the Apple Watch app receive your upcoming shifts directly from the app through your phone's system features. They do not go through our servers.

3. If you create an account

You only need an account to sync between your own phones, to share with a partner, or to use teams. If you create one, we process:

• Sign-in details: your email address and a securely hashed password, or, with Continue with Apple or Continue with Google, the email address and basic profile details the provider shares with us. Apple may give us a private relay address instead of your real one.
• Your synced schedule, only if you turn on Sync this phone: every schedule, shift type, pattern and change, including notes and the pay settings of each schedule, so they can appear on your other phones.
• Technical data that any internet request carries, such as IP address, time and app version, processed by our hosting and database providers to deliver the service and keep it secure.

4. Sharing and teams

Sharing is off by default and needs an account. When you turn it on:

• Partner page and calendar link: we publish the next 120 days of your schedule with the schedule name, dates, shift type names and start and end times. Pay, notes and your name are not included. Anyone with the link or QR code can see it, and calendar apps that subscribe to the link fetch it regularly. Stopping sharing deletes the published copy and the link stops working.
• Teams: team members see the team name, the display name you choose, the days you publish to the team (dates, shift types and times) and swap requests between members. Pay and notes are never shared.
• Colleague compare opens a share link someone gave you and compares it with your schedule on your phone. Nothing about your schedule is sent to do this.

5. Purchases

The optional unlock is bought through the App Store or Google Play, which handle payment. We never see your card or bank details. Our purchase provider, RevenueCat, checks whether the unlock is active using a random ID created on your phone, which is not linked to your name or email. For each sale we keep a record of the product, price, currency, store country, date and the store's transaction ID, for accounting and tax.

6. Anonymous usage analytics

On first launch ShiftDeck asks Help improve ShiftDeck? Nothing is collected or sent before you answer, and nothing at all if you choose Don't Share. If you choose Share, the app sends which features are used, as counts and kinds, to Mixpanel in its EU data centre. For example: a schedule was created, an export was made, setup took 70 seconds.

• Never sent: your schedule, dates, shift times, pay, notes, names, email or account ID.
• Mixpanel adds device model, operating system and app version. Location lookup from IP addresses is turned off.
• The only identifier is a random ID for this installation. We never link it to you.
• You can change your answer at any time in Settings, Your data, Share anonymous usage. Turning it off stops analytics and resets the random ID.

7. Phone permissions

ShiftDeck asks for a permission only when you use the feature that needs it.

ShiftDeck does not use your location, contacts or microphone.

8. What we never do

• We show no ads and include no advertising or tracking SDKs.
• We do not track you across other companies' apps or websites.
• We do not sell your personal data or share it for advertising.
• We do not read the contents of your schedule for any purpose other than running the features you use.

9. Why we may use your data

Where the GDPR or UK GDPR applies, we rely on these legal bases:

• Contract: to provide your account, sync, sharing, teams and purchases you asked for.
• Consent: for anonymous usage analytics. You can withdraw it at any time in Settings.
• Legitimate interests: to keep the service secure, prevent abuse and answer your support messages.
• Legal obligation: to keep purchase records required by accounting and tax law.

10. Service providers

These companies process data for us under contracts that limit them to providing their service:

11. Where data is stored and how it is protected

Data on your phone is protected by your phone's own security. Data sent to us travels over encrypted connections (HTTPS) and is encrypted at rest by our providers. Account data is separated per account, so one person cannot read another's schedule. Some providers process data outside your country, including outside the European Economic Area and the UK. Where that happens, we rely on safeguards such as the European Commission's Standard Contractual Clauses. No system is perfectly secure, which is one reason ShiftDeck keeps as little as possible off your phone.

12. How long we keep data, and deleting it

• On your phone: until you delete it in the app or delete the app. Backup files you saved are yours to keep or delete.
• Your account and synced data: until you delete your account. In the app, go to Settings, Account and sync, Delete my account and online data. This deletes your account, your synced schedule, your share links, teams you created and your team memberships. Your schedule stays on your phone.
• Share links: until you stop sharing or delete your account.
• Purchase records: as long as accounting and tax law requires. When you delete your account they are no longer linked to it.
• Analytics: kept in Mixpanel without any link to you. Turning analytics off resets the random ID.
• Support emails: as long as needed to help you, then deleted.

You can also ask us to delete your account by writing to support@retroselfie.me from the email address on the account.

13. Your rights

Depending on where you live, you can ask to access, correct, delete or receive a copy of your personal data, to restrict or object to how we use it, and to withdraw consent. The backup file in the app gives you a complete, machine-readable copy of your schedule at any time. For anything else, write to support@retroselfie.me and we will reply within one month.

If you are in the EU, you can complain to your local data protection authority or to Bulgaria's Commission for Personal Data Protection. In the UK, you can complain to the Information Commissioner's Office. Residents of California have the right to know about and delete their personal information and not to be discriminated against for using these rights. We do not sell or share personal information as those terms are defined in California law.

14. Children

ShiftDeck is a work tool for adults and is not directed at children. We do not knowingly collect personal data from anyone under 16. If you think a child has created an account, write to support@retroselfie.me and we will delete it.

15. Changes to this policy

When we change this policy, we update the date at the top of this page. If a change affects how we use data you have already given us, we will tell you before it takes effect, in the app or by email.

16. Contact

NaughtySpirit, Bulgaria. Email support@retroselfie.me. See also our Terms of Use.