Privacy Policy
The short version. Your shifts and everything personal in them stay on your iPhone. Shiftmate needs no account. We don’t track you across other apps, we run no advertising, and what little we do process is hosted in the EU.
1. Who we are
Shiftmate (“the app”, “we”, “us”) is provided by Xboost, the data controller for the limited personal data described below.
- Controller: Xboost (based in Vietnam)
- Contact: andrew@xboostapp.io
This policy explains what data Shiftmate handles, why, and the choices you have. It applies to the Shiftmate iOS app and this website.
2. Data that stays on your device
Shiftmate is local-first. Your schedule lives on your iPhone, and the following are stored only on your device — we do not receive them, store them on our servers, or log them:
- Your shifts, shift templates, and rotations
- Shift titles, notes, and locations
- Colleague or display names you enter
- Your alarms, wake-up times, and sleep settings
- Your prep, commute, and buffer times
Because this data never leaves your device, deleting the app removes it. We recommend keeping a device backup if you want to preserve it.
3. Data we process
To provide accounts-free entitlements, billing, and product improvement, a small amount of data is processed by us and our service providers. None of it identifies you by name or email.
Anonymous app identifier
To keep track of your subscription, scan allowance, and settings without an account, the app uses an app-generated, anonymous identifier. It is not linked to your name, email, or Apple ID. Legal basis: performance of our agreement with you (Art. 6(1)(b) GDPR).
Purchases and subscriptions
When you subscribe or buy a scan pack, purchase status is processed through Apple and our subscription provider so we can unlock and restore features. Apple handles your payment; we never see your card details. Legal basis: performance of a contract.
Anonymous product analytics
To understand how the app is used and fix problems, we collect non-identifying usage events (for example, “a rota was scanned” or “an alarm was created”) through an EU-hosted analytics provider. We never log the content of your rota, images, or personal shift details. Analytics are on by default and you can switch them off any time in Settings. Legal basis: your consent / our legitimate interest in improving the app (Art. 6(1)(a)/(f) GDPR).
Feedback you send us
If you send feedback from within the app, we receive the message you wrote so we can respond and improve. Please don’t include sensitive personal data in feedback.
4. What we never collect
- Your name, email address, phone number, or postal address
- Your precise or approximate location
- Health or fitness data (sleep suggestions are calculated on your device)
- Your contacts
- Advertising identifiers (no IDFA), and we run no ad tracking
No tracking. Shiftmate does not track you across other companies’ apps or websites and does not share data with data brokers. There is no App Tracking Transparency prompt because there is nothing to track.
5. Rota scanning and AI
When you scan a rota, the image or the text you provide is sent to a third-party AI provider solely to read your shifts. We have taken the following measures:
- A data-processing agreement is in place with the provider (OpenAI).
- The endpoint is configured for zero retention — the image/text is used to parse your shifts and then deleted, and is not used to train models.
- No identifying account information is attached to the request.
- We do not store the rota image ourselves; the parsed result is returned to your device for you to review.
You are always shown the parsed shifts and must confirm them before anything is scheduled. If you prefer not to use AI scanning, you can enter shifts manually — no image or text leaves your device in that case.
6. Service providers (sub-processors)
We use a small number of trusted providers to run the app. They process data only on our instructions:
- Apple — App Store distribution and payment processing.
- RevenueCat — subscription and purchase management (anonymous identifier).
- Superwall — presenting subscription offers.
- PostHog (EU Cloud) — anonymous product analytics, hosted in the EU.
- Supabase (EU) — anonymous account, entitlement, and feedback storage, hosted in the EU.
- OpenAI — one-off rota parsing, as described above.
7. Where your data is processed
Our analytics and backend are hosted in the European Union. Where a provider processes data outside the EU, we rely on appropriate safeguards such as the EU Standard Contractual Clauses.
8. How long we keep data
On-device data remains until you delete it or remove the app. Anonymous account and entitlement records are kept while your installation is active and for as long as needed to honour purchases. Rota images sent for scanning are not retained after parsing.
9. Your rights
Under the GDPR and similar laws you may have the right to access, correct, delete, or restrict processing of your personal data, and to object to processing or withdraw consent. Because we hold only anonymous data tied to your installation, we may ask for the app’s identifier (shown in Settings) to locate your records.
To make a request — including deleting the data associated with your installation — email andrew@xboostapp.io or see the Support page. You also have the right to complain to your local data protection authority.
10. Children
Shiftmate is intended for adults in the workforce and is not directed at children. We do not knowingly collect data from children under 16.
11. Permissions
The app asks for Camera and Photo Library access only to read a rota you choose to scan, and for Notification/alarm permission so alarms can fire. You can change these any time in the iOS Settings app.
12. Changes to this policy
We may update this policy as the app evolves. Material changes will be reflected here with a new “last updated” date.
13. Contact
Questions about privacy? Email andrew@xboostapp.io.