Privacy Policy

Who this policy covers

This policy covers the ShiftMoon iPhone app, optional ShiftMoon Cloud and this website. Contact the ShiftMoon operator at support@shiftmoon.app for privacy questions and data requests.

Your data on your iPhone

Your profile, work schedule, recorded hours, shift notes, pay settings, pay comparisons and custom pay rules are saved in the app’s local container. Widgets use a shared on-device container to display your schedule. Local usage events and pending sync records are stored separately.

If device backups are enabled, Apple or your local backup system may also hold a copy under your backup settings. You can use ShiftMoon without creating a Cloud account.

Optional Cloud Sync

If you enable free Cloud Sync, Supabase stores your account and workspace on behalf of ShiftMoon. The configured project region is Paris, EU. Apple, Google and email are sign-in methods, not separate workspace databases. Account information may include an account identifier, email address and linked sign-in identities. Email login codes are delivered through Resend.

Your workspace may include your profile, shifts, recorded work, pay settings, personal notes, pay comparison history and saved planning preferences. Use the same account on your devices. A local copy remains available offline. Access is restricted to the signed-in account using server-side access rules. Cloud data is not end-to-end encrypted by ShiftMoon.

Sync updates while the app is open and online. Turning sync off stops new transfers but keeps the existing cloud copy. Delete Cloud Copy removes that account’s workspace copy. Delete Account permanently deletes the account and its active workspace; Apple-linked deletion may require fresh Apple authorisation. Existing local data stays on the iPhone until you erase it separately. Provider backups and security records may remain until the provider’s retention periods expire.

Optional payslip import

When you choose import, the file is read on your iPhone. The app removes lines without amounts, percentages or hours and masks detected names, addresses, account numbers, identity details, phone numbers, emails and old dates. Redaction may be imperfect: review the exact text shown before choosing to send it. The file itself is not uploaded.

Only the text you approve is sent through ShiftMoon’s backend to OpenAI to interpret the pay structure. The backend does not persist or log the text or result. OpenAI’s API may retain requests for up to 30 days for abuse monitoring and does not use API data to train models by default. Calculations run on the iPhone. This processing is optional.

Apple App Attest protects requests. A free import can use DeviceCheck to remember eligibility on a device. Apple-signed transaction data may be used to verify Premium; no name or card details are included or sent to OpenAI.

Calendar, Health and alarms

Calendar Sync is optional and requires iOS permission. ShiftMoon copies shift types, times and a record marker to your chosen calendar. Personal notes are included only if you opt in; pay is not included. Only events marked as created by ShiftMoon are changed or removed. Your chosen calendar provider may sync those events under its own terms. Revoke access in iOS Settings to stop access.

If you connect Apple Health, the Sleep Planner can read recent sleep stages from the past 30 days to suggest planning times. Raw sleep records and their summary remain in memory and are not uploaded. A bedtime you choose to save becomes a profile preference and can sync with your workspace. Health data is not used for advertising. Stop using Health in the app and revoke permission in Apple Health or iOS Settings if needed.

Reminders are scheduled locally when you grant permission. Shift alarms use supported system features, subject to iOS availability. ShiftMoon has no remote push server for these reminders. Sleep and alarm tools are planning aids, not medical services.

Purchases, advertising and usage records

Apple processes App Store payments. ShiftMoon reads products and transaction status to unlock Premium. We do not receive card details.

ShiftMoon does not sell personal data and has no advertising or external analytics SDK. Limited usage records, such as onboarding completion or opening the Premium screen, are stored locally with a random installation identifier and basic app/device information. They do not include shift details or pay amounts. The current production app has no configured analytics upload endpoint.

This website and support

This website does not set advertising cookies or run marketing analytics. Our hosting provider processes technical request information such as IP address, requested path and browser information to deliver and secure the website. It may set necessary security cookies for bot protection.

If you email support, your email address, message and any attachments you send are processed to answer your request. Do not send passwords, login codes, full identity documents or an unredacted payslip. Necessary support records are kept only as long as needed to handle the request and associated security or legal obligations. The website does not have a mailing-list signup or contact-form database.

Why information is processed and your choices

Where applicable, information is processed to provide the service you request, based on your permission for optional features, and for legitimate interests in security and responding to support. Device permissions can be withdrawn in iOS Settings. Turning off an optional feature does not automatically delete its previous cloud copy.

You can request access, correction, deletion or restriction of your personal data, and portability or an objection where applicable, by emailing support. You may also complain to your local data-protection authority. Providers may process some technical or account data outside your country using their applicable contractual safeguards.

Erasing data and closing an account

In the app, open Profile → ShiftMoon Cloud → Delete Account to remove the cloud account and its active workspace. Open Delete All Data to erase local app data and cancel scheduled reminders. If Calendar Sync was used, review the option to remove the events created by ShiftMoon. Backups are controlled separately.

Deleting an account does not cancel an App Store subscription. Manage subscriptions in your Apple Account settings. A prior purchase remains associated with Apple and may be restored where supported. If you cannot access the app, email support from the account address; we will verify ownership before handling a deletion request.

Children and policy updates

ShiftMoon is intended for people of working age and is not directed at children. Material changes to this policy will be published on this page with an updated date.