Privacy Policy
Last updated: 1 October 2026
1. Who we are
Shiflo (“we”, “us”) makes shift-scheduling and time-tracking software for hospitality teams, and is based in Latvia.
For anything to do with your data — questions, requests, or a complaint — email info@shiflo.app. We reply within one month, as the law requires.
2. What this covers
This policy covers the Shiflo app for iPhone and Android, our website, and the web app you sign in to at shiflo.app. Shiflo Inventory is a separate product with its own privacy notice.
If your employer put you here
Most people use Shiflo because their workplace does. Your employer decides what goes into Shiflo and why — which shifts are recorded, how hours are tracked, who manages the team. We hold and process that information for them.
So:
- Questions about why your shifts or hours are recorded go to your employer.
- Requests to see, correct or delete that information can come to us, and we may need to involve your employer.
- For your own account — your name, email, login and app settings — come straight to us.
3. What we collect
We do not collect your location, contacts, camera, photos or microphone, and we use no advertising identifiers. The app asks for none of those permissions.
| What | Where it comes from |
|---|---|
| Your name, email address and password (stored scrambled, never readable) | You, when you sign up |
| Your Apple ID email, or the private address Apple gives if you choose “Hide My Email” | Apple, if you sign in that way |
| Your team, your role, your job titles and your venue | Your employer |
| Shifts: dates, times, roles, open shifts and swaps | Your employer, and you |
| Clock-in and clock-out times, including special events, and whether an entry was added by hand | You, or a manager correcting it |
| Tips you record | You |
| Days off and holiday requests | You and your employer |
| Forgot-to-clock-out requests: the day, the times and your note | You |
| Notes to your manager or your team, with your first name | You |
| Anonymous feedback. We do not record who wrote it | You |
| App settings: language, dark mode, notifications, reminders | You |
| A notification token, so we can reach your phone | Your device, once you allow notifications |
| A record of who changed which shift | Automatic |
| Your team’s plan and subscription status | Apple or Google |
| Crash reports: your account and team reference, the screen you were on, your device and app version, and the city your connection appears to be in | Automatic, when something goes wrong |
We do not collect profile photos, and we never see your card details — subscriptions are paid through the App Store or Google Play.
4. Why we use it
| What we do | Why we are allowed to |
|---|---|
| Run your account and show your schedule | To provide the service you signed up for |
| Record clock-in and clock-out times | Your employer has to keep accurate working-time records and pay you correctly |
| Show hours and reports to your manager | Your employer needs them to run the rota and payroll |
| Send shift reminders and schedule alerts | Part of the service. You can turn each type off in Settings |
| Pass notes between you and your team | Day-to-day handover between shifts |
| Collect crash reports | Our interest in a product that works and stays secure |
| Handle subscriptions and trials | To run the paid service |
We never use your data for advertising or profiling, we make no automated decisions about you, and we do not sell or rent it to anyone. There is no analytics or tracking software in the app or on our website.
5. Who can see your data
You see everything on your own account.
Your managers see your name, job title, shifts, clock-in and clock-out times, hours totals, tips you record, days off, holiday and forgot-to-clock-out requests, and notes you send them. They can also correct your clock records.
Your colleagues see your name, job title and scheduled shifts, plus any note you choose to send the team, which carries your first name. They do not see your hours, tips, clock times or time-off requests.
Anonymous feedback reaches managers with no author attached. We do not record who sent it, so not even we can tell you.
Nobody outside your team sees your data, apart from the companies in section 6 that help us run the service.
6. Companies that help us run Shiflo
| Company | What it does for us | Where |
|---|---|---|
| Sentry | Receives crash reports when something breaks | Germany |
| Expo | Delivers push notifications and app updates. Notification text passes through them, which can include names, shift times and note text | United States |
| Apple | Sign in with Apple, and App Store subscriptions | United States and EU |
| Google Play subscriptions | United States and EU | |
| Titan | Our info@shiflo.app mailbox | — |
We use no analytics, advertising networks, tracking pixels, chat widgets, social media embeds or web fonts. Our website loads nothing from anyone else.
7. Where it lives, and how it is protected
Your data is stored in the European Union, in Ireland. Crash reports go to a service in Germany.
Everything is encrypted on its way to us and while stored. Access is enforced at the database itself, so one team can never read another’s data.
Some of it sits outside the EU. Our website is hosted in the United States, where visitors’ IP addresses are seen. Expo, which delivers notifications and app updates, is also based there, and Apple and Google handle subscriptions outside the EU. All of these transfers are covered by the standard contractual clauses in each provider’s data processing terms.
If a breach ever puts your data at risk, we will tell the supervisory authority within 72 hours and tell you where the law requires it.
8. How long we keep it
| What | How long |
|---|---|
| Your account and profile | Until you delete it |
| Shifts, clock records, tips and time off | While your account is open. If your team stops using Shiflo, 12 months, then deleted |
| Notes you wrote with your name on them | Deleted with your account |
| Anonymous feedback | Kept. It carries no author, so it cannot be traced back to you or removed on request |
| Crash reports | 90 days |
| Notification token | Until you turn notifications off or delete your account |
| Emails you send us | 24 months |
Your employer may have to keep working-time records for longer than this to meet their own legal duties. Where that applies, those records stay with them.
Deleting your account
Settings → Delete account permanently removes your profile and login, your shifts, clock records, tips, days off, holiday requests, special events, availability notes, tasks assigned to you, shift swaps, forgot-to-clock-out requests, and the notes you wrote that carry your name.
Two things stay behind, on purpose:
- Anonymous feedback you sent, because nothing records that it was you.
- Your team’s own data, which is not yours to erase. If you set the team up, it carries on without you.
You can also ask us to delete your account by emailing info@shiflo.app.
9. Your rights
If you are in the EU, you can:
- See a copy of what we hold about you.
- Correct anything wrong. Most of it you can edit yourself, and your manager can fix clock records.
- Delete your data — Settings → Delete account, or ask us. See section 8 for what that reaches.
- Pause our use of your data while a dispute is sorted out.
- Object to uses we base on our own or your employer’s legitimate interests.
- Take your data with you in a readable format. Managers can already export a team’s hours.
- Change your mind about anything you agreed to, such as notifications, in Settings.
All of these are free. Email info@shiflo.app from the address on your account and we will reply within a month. If the data belongs to your employer’s team, we may need to pass your request to them.
Complaints
Tell us first — we would rather fix it. You also have the right to complain to a data protection authority: in Latvia that is the Datu valsts inspekcija (dvi.gov.lv), or the equivalent where you live or work.
10. Cookies
We use no cookies at all — none on the website, none in the web app, and none for analytics or advertising. There is nothing to agree to, which is why you will never see a cookie banner on our site.
Your browser does keep three small things for us: your choice of English or Latvian, and a sign-in token for each of our two web apps so you stay logged in. None of them tracks you or follows you to other websites. Clearing your browser data removes them and signs you out.
The app keeps the same kind of information on your phone, along with a copy of your own schedule so it opens instantly without signal. Deleting the app removes it.
11. Age
Shiflo is a workplace tool, given to you through your employer. It is not meant for children, and we do not knowingly collect data from anyone below the minimum working age where they live.
If you think a child’s data has reached us, email info@shiflo.app and we will remove it.
12. Changes, and reaching us
When we change this policy we update the date at the top. If a change really affects how we use your data, we will tell you in the app or by email before it takes effect, rather than leaving you to notice.
Earlier versions are available on request.
Questions, requests or complaints: info@shiflo.app
Version 2.0. Replaces the version dated 22 April 2025.