Your shifts stay on your device by default. If you create an account to sync them across devices, this page explains what is collected, where it goes and how to get it back.
The controller of the data collected through ShiftPro is the app's developer, who can be contacted at the address at the bottom of this page. ShiftPro does not belong to a third-party company and does not share data with other apps.
02 What data we collect
ShiftPro works entirely offline, on your device, until you choose to create an account.
Use without an account — shifts, rotas, pay, settings: only on your device, nothing leaves the iPad or iPhone.
With an account and sync switched on — email address, password (never in plain text, handled by the authentication provider), the same shift, rota and pay data: on Supabase's servers, in an instance based in the European Union.
ShiftPro Premium subscription — the receipt and payment details stay on Apple's systems: ShiftPro never sees them. If you buy while signed in, our servers record a purchase identifier assigned by Apple, which plan you have and until when it is valid, together with your account. They serve two purposes: knowing who the subscription belongs to, so it doesn't show as active for another person using the same device, and giving it back to you when you sign in on another device — even with a different Apple Account. They contain no amounts, no payment method and nothing about your card.
What we don't do: no advertising identifier, no tracking across third-party apps, no selling or sharing of data for marketing, no ads in the app.
03 Why we process it
We process your data only to provide the service you asked for:
Running the app — calculating shifts, overtime and the pay estimate (legal basis: performance of the app's terms of use).
Syncing across devices, only if you choose to switch this feature on by creating an account (legal basis: performance of a contract, at your explicit request).
Managing the Premium subscription, if you take it out (legal basis: performance of a contract).
We never process your data for profiling, targeted advertising or any purpose other than the ones you actively chose by using the app.
04 Where and for how long
If you don't create an account, the question doesn't arise: the data stays in your device's protected storage, under your sole control, and is deleted if you uninstall the app.
If you create an account, the synced data is kept on Supabase's servers (European instance) for as long as the account is active. You can delete the account and all associated data at any time from the app's Settings: deletion is immediate and permanent.
05 Who else sees it
Only three parties, all strictly necessary for the features you choose to use:
Supabase — provider of the authentication and sync infrastructure, acting as data processor. It hosts data only if you create an account, and — if you buy while signed in — also the purchase identifier described in point 02.
Resend — delivers the service emails on Supabase's behalf (sign-up confirmation, password reset), acting as data processor: it receives your email address and the text of the message, nothing else, and only if you create an account. It is a US company and processes data in the United States, with the safeguards required by the GDPR: it participates in the EU-U.S. Data Privacy Framework and its data processing agreement includes the European Commission's standard contractual clauses.
Apple — handles payment for the Premium subscription as an independent controller of the billing data: ShiftPro neither sees nor receives it.
No one else — no advertising network, no behavioural analytics service, no selling of data to third parties.
In exceptional cases provided for by law — for example a court order or an investigation into unlawful use of ShiftPro — we may be required to disclose your data to the competent authorities, to the extent strictly necessary.
06 Security
Connections between the app and the servers are encrypted (HTTPS/TLS).
Your session tokens are kept in the device's encrypted Keychain, never in plain text.
Row Level Security rules on the database prevent any user — you included, if not properly signed in — from reading another account's data.
The local archive file is protected by iOS system encryption when the device is locked.
Who runs the service
The controller has technical access to the database, like anyone who runs a service with stored data: row-level rules protect users from each other, not from whoever owns the project. That access is not used to read your shifts — it's for maintenance and support, and only when you ask for it.
If you'd rather your data didn't leave the device, don't create an account: ShiftPro works fully offline, and without an account nothing is ever sent.
07 Your rights
As a data subject under Regulation (EU) 2016/679 (GDPR), you have the right to:
Access and portability — export a complete backup in a readable format from Settings → Data → Export backup (in the app, still in Italian: “Impostazioni → Dati → Esporta backup”), at any time.
Rectification — you edit shifts, rotas and pay directly in the app: there's no need to ask us.
Erasure — permanently delete your account and synced data from Settings → Sync → Delete account (in the app, still in Italian: “Impostazioni → Sincronizzazione → Elimina account”).
Restriction and objection — you can stop syncing at any time by signing out: the app goes back to working only locally.
For any request you can't complete yourself in the app, write to us: we reply within 30 days, as the GDPR requires.
08 Children
ShiftPro is not designed for or aimed at people under 16. We do not knowingly collect data from children under that age.
09 Changes to this policy
If we make substantial changes to how we process your data, we update this page and the date at the top. Changes are never retroactive with respect to consent already given under different conditions.
10 Complaints and supervisory authority
If you believe the processing of your data breaks the law, you can lodge a complaint with the Garante per la protezione dei dati personali (www.garanteprivacy.it), the competent Italian authority, or with the authority of your country of residence if it isn't Italy.