Shiftora Privacy Policy

Overview

Adstar Labs is the developer brand responsible for Shiftora. This Privacy Policy explains how the Shiftora mobile application handles information.

Shiftora is a shift-planning and estimated-pay tool. It does not require an account, does not contain in-app advertising, does not sell personal information, and does not use Firebase data for personalized advertising. With your permission, the limited data described below is used for analytics, installation attribution, and crash diagnosis.

Information you provide

You may enter a role or workplace label, shift date, start and end time, unpaid break duration, and hourly rate. Shiftora uses these details to calculate working hours and estimated pay.

This information, along with your language preference, is stored in the app’s local storage on your device. Adstar Labs does not operate a Shiftora account system or cloud-sync service and does not receive the content of your shifts.

Analytics and diagnostics

On iOS, Shiftora asks for permission through Apple’s App Tracking Transparency framework. Firebase is not configured, and Google Analytics for Firebase, Firebase Crashlytics, and the related FirebaseSessions component do not collect, unless the system status for Shiftora is authorized. Collection remains off while the status is not determined, denied, or restricted. Every Shiftora feature remains available either way.

Google Analytics for Firebase

When you authorize tracking, Analytics may collect:

• pseudonymous app and installation identifiers and the iOS advertising identifier (IDFA);
• general app, device, operating-system, version, and language information;
• approximate location derived from a masked IP address, without using Apple Location Services;
• app lifecycle and session information, a schedule-screen view, and non-content feature events for opening the shift form, saving or deleting a shift, and changing the schedule filter; and
• campaign and installation-attribution information.

The schedule-filter event contains only whether Upcoming or All was selected. Analytics may associate IDFA and limited app activity with campaign information to measure which advertising led to an installation. Apple defines this advertising measurement as tracking. Shiftora does not show or personalize ads and does not build remarketing audiences.

Firebase Crashlytics

When you authorize tracking, Crashlytics may collect crash stack traces and relevant application state; crash, session, and installation identifiers; app, device, and operating-system information; and Analytics screen or feature-event breadcrumbs available immediately before a crash. We use this information to diagnose crashes and improve stability.

Shiftora does not set a custom Firebase user ID. Your workplace or role label, shift dates and times, break duration, hourly rate, estimated pay, and other user-entered shift content are never sent as Analytics event parameters, Crashlytics custom keys, logs, user IDs, or diagnostic fields.

FirebaseSessions support metadata

FirebaseSessions 12.15 is a support component included with Crashlytics. After ATT authorization, it may collect the app’s bundle ID, operating-system information, Firebase SDK version, network connection type, and the time the app moved to the background. Google describes this as app-quality metadata and usage data used to group product and diagnostic measurements into sessions.

In Shiftora’s App Store privacy disclosure, background and session grouping is included in Product Interaction, while bundle, operating-system, SDK, and network-quality metadata is included in Other Diagnostic Data. Shiftora does not include Firebase Performance Monitoring and does not declare a separate Performance Data category. This build does not send Firebase Performance app-launch, network-latency, CPU or memory, or custom-trace metrics.

How we use information

Shiftora uses the information you enter only on your device to:

• display and organize your shifts;
• calculate working time after unpaid breaks;
• estimate pay from the hourly rate you enter; and
• remember your selected language.

When tracking is authorized, we use the limited Analytics, Crashlytics, and session-support data described above to understand app usage and session quality, measure installation attribution, diagnose crashes, and improve stability.

We do not use your shift information or Firebase data to display or personalize ads, make credit or employment decisions, process payroll, or profile you.

Sharing and service providers

We do not sell personal information. When tracking is authorized, Google LLC receives the limited Analytics and Crashlytics data described above under the applicable Google Analytics and Firebase terms. Google may associate device identifiers and limited app activity with campaign information for installation attribution and advertising measurement.

Shiftora’s iOS privacy manifest identifies exactly three tracking domains used for authorized Analytics and installation attribution: app-analytics-services-att.com, region1.app-analytics-services-att.com, and www.googleadservices.com. Shiftora does not use these endpoints to display in-app ads.

Shiftora does not send user-entered shift or pay content to Google, an ad-display network, or a data broker. For more about Google’s processing, see Privacy and Security in Firebase and How Google safeguards Analytics data.

We may disclose information if required by law, to respond to a valid legal process, or to protect users, the public, our rights, or the security of our services.

Retention and deletion

Local Shiftora data

Shift details remain in local app storage until you delete individual shifts, clear the app’s data through your device settings, or uninstall Shiftora. Deleting or clearing local data may be irreversible.

Google Analytics data

User- and event-level Analytics data may be retained for up to 14 months. Google’s Analytics retention control does not govern standard aggregated reports, which may remain as aggregated statistics. Changing the ATT setting does not automatically erase data already transmitted.

Firebase Crashlytics data

Google states that Crashlytics keeps crash stack traces and associated installation identifiers for 90 days before beginning removal from live and backup systems. When tracking is not authorized, Shiftora keeps automatic Crashlytics collection off and requests deletion of unsent crash reports stored on the device.

Deletion requests

You may contact us to request deletion of data already sent. Because Shiftora has no account and does not set a custom Firebase user ID, we may need a technical identifier available from your installation and may not be able to associate a particular crash report with you. We will explain the result of your request.

Children’s privacy

Shiftora is intended for adults managing work schedules and is not directed to children. We do not knowingly collect personal information from children. If you believe a child has provided information to us, contact us so we can review the matter.

Security

We use reasonable technical and organizational safeguards appropriate to the limited information we process. Shift details remain in local app storage, subject to your device and backup settings. Google states that Firebase data is transmitted using HTTPS and that Crashlytics data is encrypted at rest. No method of electronic storage is completely secure, so we cannot guarantee absolute security.

Your choices

• Tracking, analytics, and diagnostics: manage Shiftora under Settings > Privacy & Security > Tracking on iOS. Shiftora rechecks the system status when it becomes active and at launch. If authorization is withdrawn, it stops future Analytics and Crashlytics collection, resets Analytics data stored on the device, and requests deletion of unsent crash reports. Data already uploaded remains subject to the retention and deletion terms above.
• Local shift data: delete individual shifts in the app, clear app data in device settings, or uninstall Shiftora.
• System backup: manage app backup behavior through your operating-system or backup-provider settings.
• Privacy rights: depending on where you live, you may have rights to request access, correction, deletion, restriction, or objection regarding information we process.

International processing

When tracking is authorized, Google may process Analytics and Crashlytics data on global infrastructure in countries other than your own. User-entered shift and pay content is not included in that transfer. Device backups remain controlled by your operating system or backup provider and may be processed where that provider operates.

Changes to this policy

We may update this Privacy Policy when Shiftora changes or when legal requirements change. The “Last updated” date above identifies the latest revision. Material changes will be presented through the app or this website when appropriate.

Contact

For privacy questions or requests, contact Adstar Labs: