To use ShiftPro you need an account: your shifts, rotations and pay live on your account and on every device you sign in on. This page explains what is collected, where it goes and how to get it back.
This policy applies from ShiftPro version 1.1. If you're still on version 1.0.9 or earlier, the previous policy applies to you until you update the app.
01 Data controller
The controller of the data collected through ShiftPro is the app's developer, who can be contacted at the address at the bottom of this page. ShiftPro does not belong to a third-party company and does not share data with other apps.
02 What data we collect
To use ShiftPro you need an account. To create one you need an email address and a password: without them, you can't use the app.
Account — email address, password (never in plain text, handled by the authentication provider) and your phone's language, used to write your service emails in your language.
Your name, if you enter it — it's optional: you enter it yourself in Settings → Account and sync, and we only use it to greet you in the Calendar and on the ShiftPro Premium card. It's synced with your account, so you find it on all your devices. To delete it, just clear the field, or delete the account.
If you write to us — your email address, the text of your message and a technical line (ShiftPro version, iOS version, phone model) that you see before sending. No shifts, no pay.
If we refund you ourselves (Terms, section 8) — the name and IBAN you send us for the bank transfer, which go to our bank to carry it out. We use them only for the refund and keep them with our accounting records for 10 years, as the law requires (Art. 2220 of the Italian Civil Code). Legal basis: performance of a contract and legal obligation.
Your work data — shifts, rotations, pay and settings, including the country and region where you work, used to calculate public holidays and pay under local rules: on your device and, when synced, on Supabase's servers, in an instance based in the European Union, in Frankfurt (Germany).
ShiftPro Premium subscription — the receipt and payment details stay on Apple's systems: ShiftPro never sees them. When you buy, our servers record a purchase identifier assigned by Apple, which plan you have and until when it is valid, together with your account. They serve two purposes: knowing who the subscription belongs to, so it doesn't show as active for another person using the same device, and giving it back to you when you sign in on another device — even with a different Apple Account. They contain no amounts, no payment method and nothing about your card.
The proof of what we've told you — the version of the Terms and the Privacy policy you accepted when creating the account or by tapping "I accept the new terms" in the what's-new notice, with when they were shown to you and when you accepted them, and, for each what's-new notice the app shows you, which version of the text it was, when it was shown to you and when you tapped "Got it". These are linked only to the account's identifier: no email, no shifts, no pay.
What we don't do: no advertising identifier, no tracking across third-party apps, no selling or sharing of data for marketing, no ads in the app.
We don't ask for access to your location, contacts, photos, camera, microphone or calendar: exporting to your calendar creates a file that you save or share yourself.
03 Why we process it
We process your data only to provide the service you asked for:
Running the app — calculating shifts, overtime and the pay estimate (legal basis: performance of the app's terms of use).
Storing and syncing your data, including your name if you enter it, on your account, so you can find it on every device you sign in on (legal basis: performance of a contract).
Sending you service emails — the code to confirm your account, password recovery and the notices provided for in the Terms and by law, for example when a change takes something away from you or in case of a data breach (legal basis: performance of a contract and legal obligation).
Managing your Premium subscription, if you take it out (legal basis: performance of a contract).
Replying when you write to us (legal basis: performance of a contract or, for questions before you use the app, pre-contractual steps).
Keeping the proof of what we've told you — which Terms you had accepted and that we had told you about changes, so we can prove it if a dispute arises (legal basis: legitimate interest, Article 6, paragraph 1, point (f) of the GDPR). We only record dates and versions of the texts.
We never process your data for profiling, targeted advertising or any purpose other than the ones you actively chose by using the app. No decision about you is taken automatically: the estimates are calculations that only you see.
04 Where and for how long
On the device, the data lives in the app's protected storage and is deleted if you uninstall ShiftPro or sign out of your account.
On your account, it's kept on Supabase's servers (European instance, in Frankfurt) for as long as the account stays active. You can delete the account and all associated data at any time from the app's Settings: deletion is immediate and irreversible, on the server and on the device. Your name, if you entered it, follows the same rule; if you clear the field, it's also removed from your account at the next sync.
The messages you send us stay in our mailbox for as long as they are needed to reply to you and to handle any follow-up to the request; then we delete them.
The only exception is the proof of what we've told you: it stays for as long as the account exists and, after you delete it, for up to ten years, the ordinary limitation period for legal claims (Article 2946 of the Italian Civil Code). During that time we only use it to defend our rights if a dispute arises (Article 17, paragraph 3, point (e) of the GDPR); once it expires, it's deleted.
Our providers also keep technical logs, used only for security and to understand faults: Supabase records sign-ins to your account with your device's IP address: in the service logs for at most 7 days, and with your sign-in session until you sign out or the session expires; Resend keeps a log of the emails sent (address, subject, content, delivery result) for 30 days. We only look at them to fix a problem.
05 Who else sees it
For the app, only four parties, all strictly necessary to run the app:
Supabase — provider of the authentication and sync infrastructure, acting as data processor. It hosts your account's data. The servers are in Frankfurt, Germany. The provider is a company based in Singapore (Supabase Pte. Ltd.): access from outside the Union is possible, with the European Commission's standard contractual clauses included in its data processing agreement.
Resend — delivers the service emails (the confirmation code, password recovery, the notices required by the Terms and by law) from a Resend account belonging to the controller, connected to Supabase to send them: it receives your email address and the text of the message, nothing else. It is a US company: messages are processed on infrastructure in Ireland, but access from the United States is possible, with the safeguards required by the GDPR: Resend participates in the EU-U.S. Data Privacy Framework and its data processing agreement includes the European Commission's standard contractual clauses.
Microsoft (Outlook) — the mailbox where the messages you send us by email arrive. It is a personal Outlook.com mailbox from Microsoft (for Europe, Microsoft Ireland Operations Limited, Dublin), which processes the messages under its own privacy statement. Microsoft is a US company: access from the United States is possible. Microsoft Corporation participates in the EU-U.S. Data Privacy Framework, covered by the European Commission's adequacy decision (EU) 2023/1795.
Apple — handles payment for the Premium subscription as an independent controller of the billing data: ShiftPro neither sees nor receives it.
No one else — no advertising network, no behavioural analytics service, no selling of data to third parties.
The shift-pro.it website is hosted by GitHub Pages (GitHub, Inc.), which logs visitors' IP addresses for security purposes. The website uses no cookies and no analytics tools.
In exceptional cases provided for by law — for example a court order or an investigation into unlawful use of ShiftPro — we may be required to disclose your data to the competent authorities, to the extent strictly necessary.
If ShiftPro passed to another controller, for example a company set up by the developer (Terms, section 13), we will tell you beforehand in the app and at your account email, saying who becomes the data controller. Your data passes only with the safeguards of this policy, and you can delete your account before the transfer.
06 Security
Connections between the app and the servers are encrypted (HTTPS/TLS).
Your session tokens are kept in the device's encrypted Keychain, never in plain text.
Row Level Security rules on the database prevent any user — you included, if not properly signed in — from reading another account's data.
The local archive file is protected by iOS system encryption when the device is locked.
Who runs the service
The controller has technical access to the database, like anyone who runs a service with stored data: row-level rules protect users from each other, not from whoever owns the project. That access is not used to read your shifts: it's for maintenance and support, and only when you ask for it.
If you no longer want your data to stay on our servers, delete the account from Settings: it's deleted straight away.
If something goes wrong — If a security breach puts your data at risk, we report it to the Italian data protection authority (Garante per la protezione dei dati personali) within 72 hours of becoming aware of it, when the law requires it (Article 33 GDPR). If the risk to you is high, we tell you without undue delay at your account email, explaining what happened and what you can do (Article 34 GDPR).
07 Your rights
As a data subject under Regulation (EU) 2016/679 (GDPR), you have the right to:
Access and portability — export a complete backup in a readable format from Settings → Backup and data → Export backup, at any time.
Rectification — you edit shifts, rotations and pay directly in the app: there's no need to ask us.
Erasure — permanently delete the account and all data, on the server and on the device, from Settings → Account and sync → Delete account. Only the proof of what we've told you remains and, if we refunded you, the bank-transfer details, for the periods described above; the messages you sent us follow the periods in section 4.
Restriction and objection — write to us to ask us to restrict or suspend processing; if you no longer want your data processed, delete the account.
For any request you can't complete yourself in the app, write to us: we reply within one month, as the GDPR requires.
08 Your right to object
We keep the records of what we told you on the basis of our legitimate interest (Article 6(1)(f) GDPR). You can object to this processing at any time, on grounds relating to your particular situation, by writing to matteo.de.min@outlook.it (Article 21 GDPR). We stop processing them unless they are needed to establish, exercise or defend legal claims.
09 Children
ShiftPro is not designed for or aimed at people under 16. We do not knowingly collect data from children under that age.
10 Changes to this policy
If we make substantial changes to how we process your data, we update this page and the date at the top. Changes are never retroactive with respect to consent already given under different conditions.
11 Complaints and supervisory authority
If you believe the processing of your data breaks the law, you can lodge a complaint with the Garante per la protezione dei dati personali (the Italian data protection authority) (www.garanteprivacy.it), the competent Italian authority, or with the authority of your country of residence if it isn't Italy.
12 This website
This website is hosted on GitHub Pages, a service of GitHub, Inc., a US company. Like any web server, GitHub logs the IP address of people who visit the pages, for the security and operation of the service; GitHub processes that data under its own privacy statement, which does not state how long it keeps it. The transfer to the United States is covered by the EU-U.S. Data Privacy Framework, in which GitHub participates.
The website uses no cookies and no analytics tools. The page for choosing a new password talks directly to Supabase, just like the app. Legal basis: legitimate interest in keeping the website online and protected (Art. 6(1)(f) GDPR).