Privacy Policy

01The short version

Your data is stored on your device and in your own private iCloud database. There is no ShiftKit account, no ShiftKit server, and no login.

Nothing is collected about you, nothing is sold and nothing is shared. There is no analytics SDK, no advertising SDK and no third-party tracking. Export is manual and local: you choose when to produce a file, and that file stays wherever you put it.

Only two things ever leave your device for the developer, and only when you deliberately send them: a roster file you send from the import screen because it could not be read, and a support email you write. Both open as a message you can read and cancel before it goes.

ShiftKit makes one outbound request of its own, and only on demand: looking a drink up online sends the words you type into that search box to a public product database. Section 05 sets out exactly what does and does not go with it.

02Who we are

ShiftKit is written and maintained by Michael Blach, a sole developer based in Queensland, Australia.

Contact: Contact developer

Michael Blach is the data controller for anything you choose to send by email — a support message, for example, or an export you attach to one. He is not a controller or a processor of the data held inside the app, because that data never reaches him.

03What ShiftKit stores

Everything you enter stays in two places: on the device you entered it on, and in the private database of your own Apple Account.

Payslip files are stored on your device and in your own backups only. They are sent nowhere, and go out only when you deliberately export them.

The one exception to "only you" is roster sharing, which you have to switch on deliberately and which is described in section 07. Apple Health is covered on its own in section 09, because figures read from it are treated differently from everything else here. Nothing in this section is ever sent anywhere by the drink lookup in section 05, which sends only the words you type into its search box.

04What ShiftKit does not collect

• No name, email address or account of any kind.
• No location data.
• No health data of any kind reaches the developer. ShiftKit can read sleep analysis, resting heart rate, heart rate variability, body mass, workouts and mindful minutes from Apple Health only if you switch on and allow each permission. Section 09 sets out exactly what happens to those figures.
• No contacts.
• No device identifiers used for tracking.
• No crash or usage analytics.
• No advertising identifier.

There are no third-party SDKs in the app, so there is nothing embedded that could collect any of the above on someone else's behalf.

None of the above is sent when you look a drink up online either. That request carries the words you typed and nothing else.

05Looking up a drink online

This is the only part of ShiftKit that reaches the internet, and it only does so when you press the button.

The Drinks library has an option to look a drink up online instead of typing its figures in by hand. When you use it, the words you type into that one search box are sent to Open Food Facts, a public, volunteer-maintained product database, which answers with matching products and their nutrition figures. If you pick one, ShiftKit shows you what it found so you can correct it before anything is added to your library.

What is sent: the text you typed, or the barcode you typed. That is all. No roster, no logs, no journal, no health figures, no device name, no identifier, and no account, because there is no account. Nothing that identifies you or your device is attached to the request, and no record of your searches is kept inside ShiftKit.

Open Food Facts is operated by a French non-profit association and is an independent third party, so what it does with an incoming request is governed by its own policy rather than by this one: world.openfoodfacts.org/privacy. Like any web request, it necessarily reveals your device's IP address to them.

Product figures added this way carry a note inside the app recording the barcode they came from and the date. If you never use that button, ShiftKit makes no network request of any kind beyond Apple's own iCloud sync and the App Store purchase check described below.

06iCloud

Sync between your iPhone, iPad, Mac and Apple Watch uses Apple's CloudKit. Your records are held in the private database of your own Apple Account, which is governed by Apple's privacy policy rather than by ShiftKit.

The developer has no access to that database, cannot read it, and receives no copy of it. Apple does not give developers access to the contents of a user's private database.

Apple's privacy policy: apple.com/legal/privacy

07Roster sharing

Roster sharing uses Apple's CloudKit sharing. You send an invitation, and the person who accepts it can see the shifts inside the shared roster in their own copy of ShiftKit. No file is sent, and no server belonging to ShiftKit is involved.

The shared roster can include shifts, markers, and day or shift comments when you choose to include your notes. Each recipient can also choose whether to see a person’s notes. Your sleep, hydration, caffeine, readiness, checklists and journal entries are never shared.

Sharing is one direction per invitation: your invitation shows them your roster, and it does not show you theirs. For two-way visibility, each person sends an invitation.

Removing a person stops all further sharing.

08Apple Calendar

ShiftKit requests calendar access purely in order to write shift events. It only reads back the events it created, and only so that those events stay accurate when your roster changes.

It never reads, modifies or transmits your other appointments.

You can revoke calendar access at any time in System Settings on Mac or in Settings on iPhone. Settings › Calendar › Remove ShiftKit events deletes everything ShiftKit wrote and leaves the rest of your calendar untouched.

09Apple Health

Apple Health is off until you switch it on in Settings. Each permission is granted one at a time in Apple's own permission sheet. ShiftKit cannot see Health data unless you allow it there. It is part of ShiftKit Pro.

What ShiftKit reads: sleep analysis — asleep time and, where your device records them, sleep stages — plus resting heart rate, heart rate variability, body mass, workouts and mindful minutes. Sleep analysis can fill in last night's sleep on the readiness check-in. Resting heart rate and heart rate variability can appear next to the ratings you enter yourself. Body mass, workouts and mindful minutes are read and stored the same way. The figures are shown as a record, not as an assessment. ShiftKit does not diagnose anything or judge fitness for duty.

Apple Watch sleep tracking is the usual source of sleep figures. If the watch was not worn, the field stays empty and you can type it in by hand.

What ShiftKit writes: water you log is written as dietary water, and caffeine you log is written as dietary caffeine. Nothing is written until you have allowed the relevant permission.

Figures read from Health are held in memory while the app is open. They are not written into ShiftKit's iCloud sync and are not included in a backup or export file. Health data is never used for advertising and is never sold.

You can withdraw a permission at any time in ShiftKit Settings or in the Health app. Turning the ShiftKit switch off stops all reading and writing. Changing a permission does not remove records already in the Health app.

Apple Health does not exist on macOS, so the Mac app has no Apple Health connection.

10Printing and export

A printed or exported report can contain the sections you choose: shifts, hours, readiness, drinks, checklists and journal notes. It deliberately contains no money or earnings figures.

Once you print, save or share a report, where it goes is up to you. Check the destination and the people receiving it before you share it.

11Purchases

Purchases are handled entirely by Apple, via StoreKit and the App Store. ShiftKit never sees or stores your payment details.

The developer receives anonymised, aggregated sales reporting from Apple — units and revenue by territory — and nothing that identifies an individual purchaser.

Apple's App Store data and privacy information: apple.com/legal/privacy/data/en/app-store

12Notifications

Reminders are scheduled locally on your device. There is no push server and no remote notification content, so no reminder you set is ever known to anyone but your own device.

13Children

ShiftKit is not directed at children under 13. It collects nothing from anyone, of any age.

14Your rights

Because the developer holds none of your data, there is nothing on his end to request, correct or delete. Any such request would return an empty result.

You remain in full control of both copies of your data:

• On device — Settings › Erase all local data removes everything stored on that device.
• In iCloud — delete the ShiftKit data from your iCloud settings, or delete the app from every device signed into that Apple Account.

The requirements of the EU General Data Protection Regulation (GDPR) and the Australian Privacy Principles are satisfied by design here, because no personal data is collected by the developer in the first place.

15Important limitation

16Changes to this policy

If this policy changes materially, the change will be noted in the app and the date at the top of this page will be updated.

17This website

Everything above describes the app. This section describes shiftkit.pplx.app itself, because a privacy policy that only covers the app is only half an answer.

This site loads nothing from anyone else. No analytics, no advertising, no tag manager, no embedded video, no social buttons and no third-party fonts. Every image, stylesheet, script and font file is served from this site, so visiting a page does not tell any other company that you were here.

One cookie is set, and only if you use the light and dark switch. It is named shiftkit-theme, it holds the single word light or dark, it lasts a year and it never leaves this site. It exists so the page does not flash the wrong colour when you come back. It carries no identifier and it is not used to recognise you. If you never touch the switch, nothing is stored.

No visitor logs are used for analysis, there is no contact form, and no email address is published in the page source. There is nothing here to opt out of.

18Contact

Questions about this policy, or about how the app behaves, are welcome.

The developer's email address is deliberately not published as text on this site or shown in the app. The Contact developer button opens a pre-addressed message in your email app.

Contact developer Help centre