Privacy Policy

ShiftTracker ("we," "us," or "our") operates the website at shifttrackerapp.com and the ShiftTracker mobile and web application (collectively, the "Service"). This Privacy Policy explains how we collect, use, disclose, and protect your personal information when you use our Service.

By using ShiftTracker, you agree to the collection and use of information as described in this policy. If you do not agree, please do not use the Service.

1. Information We Collect

1.1 Information You Provide

• Account Information: When you create an account, we collect your name, email address, and password.
• Profile Information: You may optionally provide information about which gig platforms you use, your vehicle details, and work preferences.
• Shift Data: You manually enter or import shift earnings, hours worked, tips, and platform-specific data.
• Expense Data: You may log fuel costs, maintenance expenses, and other work-related deductions.
• Communications: When you contact us via email or the in-app contact form, we collect the contents of your message and any information you provide.

1.2 Information Collected Automatically

• Location Data: With your explicit permission, we collect GPS data to track mileage during active shifts. You can disable location access at any time in your device settings.
• Device Information: We collect device type, operating system version, browser type, and unique device identifiers for troubleshooting and analytics.
• Usage Data: We collect information about how you interact with the Service, including pages visited, features used, time spent, and click patterns.
• Cookies & Tracking: We use cookies and similar technologies to maintain sessions, remember preferences, and gather analytics. See Section 11 for details.

2. How We Use Your Information

We use the information we collect to:

• Provide, maintain, and improve the ShiftTracker Service
• Generate personalized earnings analytics, shift summaries, and AI-powered insights
• Track mileage and generate IRS-compliant mileage reports
• Send service-related communications (account verification, updates, security alerts)
• Respond to your support requests and feedback
• Detect and prevent fraud, abuse, and security incidents
• Conduct anonymized, aggregated analytics to improve our platform
• Comply with legal obligations

3. Data Sharing & Disclosure

We do not sell, rent, or trade your personal information. We may share data only in these limited circumstances:

• Service Providers: We share data with trusted third-party vendors who help us operate the Service (hosting, analytics, email delivery). These providers are contractually obligated to protect your data and use it only for the services they provide to us.
• Legal Requirements: We may disclose information if required by law, regulation, legal process, or government request.
• Business Transfers: If ShiftTracker is involved in a merger, acquisition, or sale of assets, your information may be transferred as part of that transaction. We will notify you of any such change.
• With Your Consent: We may share information for other purposes when you give us explicit consent.

4. Data Storage & Security

Your data is stored on secure servers provided by industry-standard cloud infrastructure providers. We implement appropriate technical and organizational measures to protect your personal information, including encryption in transit (TLS/SSL) and at rest, access controls, and regular security audits.

While we strive to protect your data, no method of electronic transmission or storage is 100% secure. We cannot guarantee absolute security, but we commit to promptly notifying affected users in the event of a data breach.

5. Data Retention

We retain your personal data for as long as your account is active or as needed to provide the Service. If you delete your account, we will remove your personal data within 30 days, except where retention is required by law or for legitimate business purposes (such as resolving disputes or enforcing our agreements).

Anonymized, aggregated data that cannot identify you may be retained indefinitely for analytics and product improvement.

6. Your Rights

Depending on your location, you may have the following rights regarding your personal data:

• Access: Request a copy of the personal data we hold about you.
• Correction: Request that we correct inaccurate or incomplete data.
• Deletion: Request that we delete your personal data, subject to legal retention requirements.
• Portability: Request a machine-readable copy of your data for transfer to another service.
• Restriction: Request that we limit processing of your data under certain circumstances.
• Objection: Object to the processing of your data for specific purposes.
• Withdrawal of Consent: Where processing is based on consent, you may withdraw consent at any time without affecting the lawfulness of prior processing.

To exercise any of these rights, contact us at team@shifttrackerapp.com. We will respond to your request within 30 days.

7. GDPR (European Economic Area Users)

If you are located in the European Economic Area (EEA), the United Kingdom, or Switzerland, you have additional rights under the General Data Protection Regulation (GDPR). We process your data based on one or more of the following legal bases:

• Contract Performance: Processing necessary to provide the Service you requested.
• Legitimate Interests: Processing for our legitimate business interests (analytics, security, product improvement), balanced against your rights.
• Consent: Processing based on your explicit consent (location tracking, marketing emails).
• Legal Obligation: Processing required to comply with applicable law.

You may lodge a complaint with your local data protection authority if you believe we have violated your rights under the GDPR.

8. CCPA (California Users)

If you are a California resident, the California Consumer Privacy Act (CCPA) provides you with additional rights:

• Right to Know: You may request details about the categories and specific pieces of personal information we have collected about you.
• Right to Delete: You may request that we delete personal information we have collected from you.
• Right to Opt-Out of Sale: We do not sell your personal information. If this ever changes, we will provide a clear opt-out mechanism.
• Non-Discrimination: We will not discriminate against you for exercising your CCPA rights.

To submit a CCPA request, contact us at team@shifttrackerapp.com. We will verify your identity before processing the request.

9. Children's Privacy

ShiftTracker is not intended for use by anyone under the age of 16. We do not knowingly collect personal information from children. If we become aware that we have collected data from a child under 16, we will take steps to delete that information promptly. If you believe a child has provided us with personal data, please contact us at team@shifttrackerapp.com.

10. Third-Party Services

Our Service may integrate with or contain links to third-party services, including:

• Google Analytics: For anonymized usage analytics. See Google's Privacy Policy.
• Supabase: For authentication and database services.
• Stripe: For payment processing. Stripe handles all payment data directly; we do not store your credit card information.

These third-party services have their own privacy policies, and we encourage you to review them. We are not responsible for the privacy practices of third-party services.

11. Cookies

We use the following types of cookies:

• Essential Cookies: Required for authentication, session management, and core functionality.
• Analytics Cookies: Help us understand how users interact with the Service (Google Analytics).
• Preference Cookies: Store your settings and preferences for a better experience.

You can manage cookie preferences through your browser settings. Disabling essential cookies may prevent you from using certain features of the Service.

12. Changes to This Policy

We may update this Privacy Policy from time to time. When we make material changes, we will notify you by posting the updated policy on this page and updating the "Last Updated" date. For significant changes, we may also notify you via email or in-app notification.

Your continued use of the Service after any changes constitutes your acceptance of the updated policy.

13. Contact Us

If you have any questions about this Privacy Policy or our data practices, please contact us:

• Email: team@shifttrackerapp.com
• Website: shifttrackerapp.com/contact