Key Privacy Highlights for Shiftx Users
- No Data Sales: We never sell your personal data or workforce records to advertisers.
- Biometrics Stay Local: Fingerprint / Face ID checks are handled entirely on your device hardware; we never transmit or store your biometric data.
- Location Usage: Location data is strictly used to verify shift locations/clock-ins as authorized by your employer.
- Control & Right to Delete: You can request full deletion of your profile and data through your employer administrator or our support team.
1 Introduction & Data Controller
Welcome to Shiftx ("Workday, simplified", also referred to as "Shiftly Pro", "we", "our", or "us"). Shiftx is a workforce workforce management solution designed to streamline shift scheduling, employee attendance tracking, shift swaps, internal manager communications, and document access.
This Privacy Policy outlines how we collect, use, process, and safeguard your personal data when you use the Shiftx mobile application available on Google Play Store and Apple App Store. Shiftx operates primarily as a Data Processor on behalf of your employer or organization (the Data Controller), who determines the operational scope and purpose of employee management data.
2 Information We Collect
To provide full workforce optimization functionality, Shiftx collects several types of information dependent on app configuration and permissions granted:
Personal Identification Data
Mobile phone number (used for primary login authentication), Full Name, Employee Identification Number (e.g., Employee #29), Job Title/Role (e.g., Barista, Sales Staff), and Profile Photo.
Work & Operational Data
Shift schedules, assigned working hours, clock-in and clock-out timestamps, active break tracking, shift swap/replacement requests, availability preferences, and vacation or sick leave balances.
Location Data
Geolocation data (GPS or workplace address tags, e.g., Tel Aviv branch) associated with work shifts and clock-in/check-in verification to confirm on-site presence.
Documents & Pay Records
Digital payroll slips, uploaded employment documents, sickness confirmations, and shift approval records managed via the app interface.
Communication & Messages
In-app chat messages, broadcast announcements, and shift assignment discussions exchanged between shift managers, HR, and fellow employees.
Technical & Device Identifiers
Push notification tokens (for shift alerts/reminders), operating system version, device model, app crash logs, and localized browser cache data.
3 Biometric Authentication Disclaimer
Important Note on Fingerprint & Face ID Login
Shiftx provides an optional Biometric Login setting (e.g., Face ID or Fingerprint recognition). Biometric validation is performed exclusively on your physical device using native operating system frameworks (Apple LocalAuthentication or Android BiometricPrompt).
Shiftx does NOT collect, capture, transmit, or store biometric data or fingerprint templates on our servers. The device OS simply returns a cryptographic success/failure token to unlock your session.
4 How We Use Your Information
We use the collected information solely for genuine operational workforce management, including:
- Account Authentication: Verifying employee identity via mobile phone numbers and profile IDs.
- Shift Management & Scheduling: Enabling managers to assign shifts, evaluate smart match availability, process shift swap approvals, and calculate total hours.
- Time Tracking & Attendance: Logging clock-ins, break times, and total monthly working hours for accurate payroll processing.
- Real-time Notifications: Sending push alerts for shift reminders (e.g., 30 minutes before shift start), approval updates, urgent open shift offers, and incoming chat messages.
- Internal Workplace Messaging: Facilitating direct line communications between shift team leads, HR staff, and colleagues.
- Document Access: Delivering pay slips, tax forms, and company policy documents securely within the app.
5 Data Sharing & Third Parties
We respect your personal privacy. We do NOT sell, rent, or trade your personal data to third-party ad networks or data brokers. Data is shared strictly under the following parameters:
- Your Employer / Organization Admins: Designated administrators, HR personnel, and shift managers have access to shift schedules, clock-in times, leave requests, and submitted documents to manage business operations.
- Infrastructure Service Providers: Trusted cloud hosting providers (e.g., Amazon Web Services / Google Cloud Platform), database maintenance services, and SMS gateway operators who operate under strict non-disclosure and security agreements.
- Push Notification Gateways: Device notification identifiers are processed through Apple Push Notification Service (APNs) and Firebase Cloud Messaging (FCM) to trigger alert banners.
- Legal Requirements: Disclosures made to comply with applicable laws, judicial proceedings, or legal requests from government authorities.
6 Data Retention & Account Deletion
Personal and operational shift data is retained for as long as your employer maintains an active account with Shiftx, or as necessary to satisfy statutory payroll and legal obligations.
How to Request Account & Data Deletion:
As Shiftx is an enterprise workforce application, data deletion requests are primarily managed in coordination with your employer's HR administrator. However, you can initiate a deletion request directly by:
- Navigating to In-App Menu > Settings & Notifications and selecting account support.
- Sending a written request to privacy@shiftx.app with your mobile phone number and employer name.
Upon confirmation, your personal data will be purged or anonymized within 30 days, subject to mandatory employer tax and payroll compliance obligations.
7 Security Measures
We employ industry-standard technical and organizational security protocols to protect your workforce data against unauthorized access, loss, or alteration. These include:
8 Your Rights & Choices (GDPR / CCPA)
Depending on your geographical region (e.g., European Union GDPR or California CCPA), you hold statutory rights regarding your personal data:
- Right to Access & Export: Request a copy of your shift logs, payroll records, and profile info.
- Right to Rectification: Update inaccurate employee profile information directly or via your HR lead.
- Notification Preferences: Toggle push notifications for shift reminders, open shifts, or chat messages at any time via Settings & Notifications.
- Biometric Control: Turn biometric unlock on or off at will within app settings.
9 Children's Privacy
Shiftx is an enterprise workforce application intended strictly for adult workers and legally authorized youth employees. It is not directed toward children under 16 years of age. We do not knowingly collect personal information from individuals under 16.
10 Contact Us
If you have questions, concerns, or requests regarding this Privacy Policy or Shiftx data practices, please contact our Data Protection Office:
Shiftx Legal & Privacy Team
Email: support@shiftx.app / privacy@shiftx.app
Address: Shiftx Software Ltd., Tech Park Center, Tel Aviv, Israel