Privacy Policy
ShiftSync - A shared calendar for nurses and shift workers
Effective date: September 16, 2026
Overview
ShiftSync is a calendar for people who work shifts. You enter your schedule once, and the app shows it next to the schedules of colleagues you have chosen to connect with, so you can see who is working tonight and when you are all off.
Because sharing a schedule with other people is the point of the app, some of your data is stored on our servers rather than only on your phone. This policy explains exactly what that is, who can see it, and how to get rid of it. In short: we store what the app needs to work, we share it only with the colleagues you connect to, and we do not sell it, use it for advertising, or run analytics on it.
Two ways to use ShiftSync
On this phone only. If you choose "Not now, keep it on this phone" when the app first opens, no account is created and nothing leaves your device. Your schedule lives in the app's local database on your phone and is covered by your device backup. Nothing in the rest of this policy about servers applies until you sign in.
With an account. Signing in with Apple or with your email creates an account, and your schedule is synced to our servers so it can be shared with the colleagues you connect to and restored if you get a new phone.
What we collect, and why
| Data | Why we have it |
|---|---|
| Email address | To sign you in and send you a one-time code. If you use Sign in with Apple and hide your email, we receive Apple's private relay address instead. |
| Name | The display name colleagues see on the People tab. With Sign in with Apple, Apple provides it once on first sign-in; you can change it in the app. |
| Account identifier | A random ID that every row of your data is keyed by. |
| Device record | So our server can tell your phone when a colleague accepts your invite or offers to cover a shift. Stored only if you allow notifications, alongside your phone's time zone and the app version. |
| Your schedule | Your jobs, their colours, your shift patterns and exceptions, cover requests and offers, who you are connected to, and what level of detail each connection may see. |
| Notification preferences | Which events you want to be told about. |
| Calendar feed token | A random secret that makes up your subscribable calendar link, if you create one. |
All of this is linked to your account and used for nothing except making the app work. We collect no location data, no health or medical information, no contacts, no advertising identifiers, and no usage analytics.
What your colleagues can see
Nobody sees your schedule until you connect with them by sharing an invite code and they redeem it. Sharing is mutual and complete: once connected, each of you sees the other's shifts in full — which days, the start and end times, whether you are on call, and the job and unit. Cover requests you open are visible to every connected colleague, and so are the offers they make on them. There is no partial level; connect only with people you would show your rota to.
Your name is the only thing a connection sees before the connection is accepted. Colleagues' schedules are shown to you under the same rules, and they are never included when you export your calendar or create a feed link. You can remove a connection at any time from the People tab; the change applies immediately on our servers and ends their access to your schedule and cover requests.
Data on your phone
- Local database. The app keeps a copy of your schedule and a bounded window of your connections' schedules on your device, so it works offline and opens instantly.
- Session. Your sign-in session is stored in the iOS Keychain.
- Calendar export. If you choose "Export my schedule", the app asks for write-only access to your calendars and writes your shifts into a calendar named ShiftSync on your device. It cannot read your other calendars. Colleagues' shifts are never written.
- Shift reminders. Reminders before a shift are scheduled on the device by iOS and do not go through our servers.
The calendar feed link
If you create a feed link to subscribe from a desktop or another calendar app, anyone who has that link can read your schedule. That is how calendar subscriptions work. The link contains a random secret, not your account ID, and you can rotate or remove it from Settings at any time, which immediately stops the old link from working.
Who processes your data
We do not sell your data or share it with anyone for marketing. The services below process it on our behalf, only to run the app:
- Supabase hosts our database, authentication, and the functions that send notifications and serve calendar feeds. Your account and schedule data are stored there, encrypted in transit and at rest. See the Supabase privacy policy.
- Apple provides Sign in with Apple and delivers push notifications. Notification payloads contain only what is needed to show the alert. See Apple's privacy policy.
ShiftSync contains no third-party analytics, advertising, or tracking SDKs.
How long we keep it
We keep your data for as long as your account exists. Shifts you delete are removed from the schedules your colleagues see straight away and purged from our servers. When your account is deleted, everything linked to it is deleted, including your connections, invites, cover requests, feed links, and push tokens.
Deleting your account
You can delete your account and all data associated with it from Settings in the app, or by emailing cjvalera@hotmail.com from the address you signed in with. We will confirm and complete the deletion within 30 days. Signing out does not delete your account; the schedule stays on our servers so you can sign back in.
If you use the app without an account, deleting the app deletes the schedule.
Your rights
Wherever you live, you can ask us what data we hold about you, ask for a copy, correct it, or have it deleted, by writing to the address below. You can also see and change most of it directly in the app.
Not a medical or employment record
ShiftSync is a personal calendar. It is not connected to your employer's rostering system and stores no patient, clinical, or health information. Do not enter patient details into shift notes.
Children
ShiftSync is intended for working adults. It is not directed at children under 13, and we do not knowingly collect information from them. If you believe a child has created an account, contact us and we will delete it.
Changes to this policy
If we change this policy, the new version will be posted on this page with a new effective date. If a change materially affects what is shared or with whom, we will tell you in the app before it takes effect.
Contact
Questions about this policy or your data: cjvalera@hotmail.com.