How ShiftTracker Protects Your Gig Worker Data

Gig work generates a lot of data. Every trip logged, every mile driven, every earnings entry — it all lives somewhere. Before you hand that over to any app, you deserve a straight answer about what gets collected, how it's stored, and who can see it.

This post breaks down how ShiftTracker handles gig worker data in plain language. No legal jargon. No buried footnotes. Just the facts about what we collect, why we collect it, and what you can do with your own information.

A 2023 Pew Research survey found that 79% of Americans say they are concerned about how companies use their data. For gig workers, that concern is higher — earnings and location data are financially sensitive in ways that general consumer data often is not.

Source: Pew Research Center, "How Americans Think About Privacy and Data," 2023

What Data ShiftTracker Actually Collects — 5 Categories, All Tied to Features

ShiftTracker collects exactly what it needs to track shifts, miles, and earnings — nothing more. There are five data categories, and each one maps directly to a specific feature.

None of these categories are collected for advertising profiles. There is no behavioral targeting, no sale to data brokers, no hidden third-party enrichment. The data serves the app — and you.

How GPS Data Is Processed: Traces Become Trips, Then Raw Data Is Deleted

Location data is the most sensitive category, so it gets the most careful handling.

When you start a shift, ShiftTracker begins collecting GPS pings. Those pings feed a trip segmentation algorithm that calculates start point, end point, route, and total mileage. Once that calculation is complete, the high-resolution raw trace — the continuous ping-by-ping movement record — is deleted. What remains is the trip-level summary: date, start/end locations, and distance. That's the record you need for IRS mileage documentation.

This approach is called data minimization. We only retain what you actually need for earnings analysis and tax preparation. The full location trail doesn't sit in a database indefinitely. Read more about IRS mileage tracking requirements to understand exactly what records the IRS needs from a deductible mileage log.

Under IRS Publication 463, a valid mileage log must include the date, destination, business purpose, and total miles for each trip. Digital logs that record this automatically — rather than relying on memory at year-end — have substantially lower audit risk than reconstructed records.

Source: IRS Publication 463, Travel, Gift, and Car Expenses

Security: Encryption, Access Controls, and Incident Response

Your earnings data, location history, and expense records are financially sensitive. Here's what protects them:

• Encryption in transit: All data moving between your device and our servers uses industry-standard secure protocols. Nothing travels in plaintext.
• Encryption at rest: Stored records — including GPS summaries, earnings, and receipt files — are encrypted so they're unreadable without authorized access keys.
• Role-based access controls: Internal team members can only access the data categories their job requires. No single employee has blanket access to all user records.
• Audit logs: Every internal access to sensitive data generates a log entry. That creates accountability and supports investigation if anything unusual occurs.
• Multi-factor authentication: All administrative access to production systems requires MFA and documented justification.

If a security incident occurs that affects your personal data, ShiftTracker follows regulatory notification timelines and communicates clearly about what happened, what was affected, and what steps to take. No vague reassurances — specific information.

Third-Party Sharing: Limited to Four Categories, All Contractually Restricted

ShiftTracker does not share your data with advertisers, data brokers, or unrelated commercial partners. Sharing happens with four categories of service providers, each bound by data processing agreements:

All service providers sign agreements prohibiting them from using your data for any purpose beyond the specific service they provide. None of them can resell or reuse your information.

Your Rights: Access, Correct, Export, and Delete Your Data

Under GDPR (for EU residents) and CCPA (for California residents), you have specific rights over your personal data. ShiftTracker supports all of them through in-app settings or a support request:

1. Access: Request a full export of your personal and usage data in a machine-readable format.
2. Correction: Edit inaccurate earnings entries, mileage records, or account details directly in the app.
3. Deletion: Request removal of non-essential data. Note that deleting historical records will affect analytics and reports tied to those entries.
4. Portability: Export earnings, trips, and expense reports as CSV or PDF for use with your accountant or another app.
5. Opt-out: Disable non-essential analytics and AI personalization through toggles in account preferences.

For most actions, you don't need to contact support — the in-app settings handle it directly. If you need help with a jurisdiction-specific request, the support team responds within regulatory timelines.

The California Consumer Privacy Act (CCPA) gives residents the right to know what personal information is collected about them, the right to delete it, and the right to opt out of its sale. As of 2023, similar protections apply in 12 additional states under their own privacy laws.

Source: International Association of Privacy Professionals (IAPP), U.S. State Privacy Legislation Tracker, 2024

The ShiftBuddy AI Assistant and Your Data

ShiftBuddy, the AI assistant inside ShiftTracker, generates scheduling recommendations based on your historical earnings patterns. It works on aggregated and anonymized features — trip frequency, average earnings by zone, shift duration trends — not on raw personal records.

Its recommendations are suggestions, not instructions. You can accept, modify, or ignore them. And if you'd rather opt out of AI personalization entirely, the settings toggle disables it without breaking the core shift and mileage tracking features.

Understanding what data drives recommendations is part of being a smart gig worker. Check out the full guide to securing your data as a gig worker for a broader look at digital safety on the platforms.

Frequently Asked Questions

Does ShiftTracker sell my personal data?

No. Personal data is never sold for advertising or unrelated commercial purposes. Sharing is limited to payment processors, cloud hosting, and legal compliance — all under contractual restrictions that prohibit secondary use or resale of your information.

What happens to my GPS data after a trip is logged?

Raw GPS traces are processed into trip summaries (date, start/end, mileage) and then deleted. The high-resolution ping-by-ping movement record is not stored indefinitely — only the IRS-compliant trip summary you need for mileage deductions.

How do I delete my ShiftTracker data?

Submit a deletion request through in-app account settings or a support ticket. The team verifies the request, processes it within regulatory timelines, and notifies you when complete. Deleting historical data removes it from analytics and reports tied to those records.

What privacy rights apply to gig workers under GDPR and CCPA?

GDPR covers EU residents; CCPA covers California. Both give you rights to access your data, correct inaccuracies, request deletion, export records, and opt out of non-essential processing. In-app settings handle most of these without needing to contact support directly.

Can I export my earnings data for my accountant?

Yes. ShiftTracker exports earnings summaries, mileage logs, and expense records as CSV or PDF. This is the same data that powers the IRS-ready reports inside the app — formatted for easy handoff to a tax preparer. Learn how gig worker tax filing works to prep your records correctly.