Shiftloop is a shift calendar and pay tracker. It's built so that your schedule and pay stay yours: there's no account, no advertising, no analytics and no tracking, and the developer of Shiftloop never receives your data.
What Shiftloop stores, and where
Everything you enter is stored on your iPhone: your shifts, shift types, jobs, pay rates and rules, holidays, notes and settings.
- iCloud sync: if you're signed in to iCloud, Shiftloop keeps a copy in your private iCloud database so your iPhone and iPad stay the same. Only you can read it; the developer can't. You can turn it off in the Settings app → your name → iCloud.
- Widgets on the same iPhone read a copy of your upcoming shifts.
- Apple Watch: if you have one paired, the iPhone sends it your upcoming shifts directly.
- Device backups: if you back up your iPhone to iCloud or a computer, Shiftloop's data is included, as it is for any app.
- Backup files: a backup you export from Shiftloop is a file that goes wherever you choose to save or send it.
Live sharing (optional)
Live sharing is off unless you turn it on. When you share your calendar, Shiftloop saves a copy of it in your own iCloud account using Apple's CloudKit, and only the people you invite can see it. The copy contains:
- shift names, dates, times, colours and icons
- the name you choose to show
- which job each shift is for, if you have more than one job
- shift notes, only if you turn on "Include shift notes"
Pay is never shared. No rates, earnings or overtime leave your phone.
The developer of Shiftloop can't read this copy. It's stored in your iCloud account under Apple's privacy policy. When you stop sharing, the copy is deleted and everyone you invited loses access. People you shared with can also remove your calendar from their app at any time.
When someone shares their calendar with you, Shiftloop keeps a copy on your iPhone so you can see it offline. To keep shared calendars up to date, Apple sends your iPhone silent notifications through its push service. These contain no schedule information.
Teams and shift swaps (optional)
Teams are off unless you create or join one. No account, email or iCloud is needed: Shiftloop signs you in anonymously with Google Firebase, and you join a team with its invite code. Team data is stored in Shiftloop's Firebase project (Cloud Firestore, in the United States). Only people in the same team can see:
- the name you enter for teams, and your shift names, dates and times (from two months ago to a year ahead)
- shifts you release: the shift, an optional note, who applied for it, and which admin decided
The person who creates a team is its admin; admins can make other members admins. Admins decide who takes a released shift, and can remove people from the team.
If your team's admins plan the schedule in Shiftloop, the shifts they publish for you are added to your calendar on your iPhone, and your coworkers see them like your other shifts. Shifts they haven't published yet are visible only to admins. If you ask for time off or mark days you can't work, the dates and the reason you type are visible only to you and the team's admins. Admins can also set a weekly hours target for each person, which only admins and that person can read.
Pay and shift notes are never shared with a team. Security rules on the server make sure that only members can read a team, that nobody can change another person's shifts or apply in their name, and that only admins approve swaps or remove people.
To send you notifications about swaps, Shiftloop stores your device's push token (Firebase Cloud Messaging) and uses it only for that. If you report someone's swap request, the report (who reported whom, and the reason you type) is stored so the developer can review it.
You can delete everything at any time in Settings → Teams & swaps → Delete my team data: you leave every team, teams you created are deleted for everyone, and your anonymous sign-in and push tokens are removed. Leaving a team removes your shifts, your swap requests and your time off requests from it, and upcoming shifts the team scheduled are removed from your calendar (past ones stay, so your pay history doesn't change). Firebase processes this data under Google's privacy terms.
Shiftloop Admin website (team admins only)
Team admins can manage their teams at shifter-9ff7c6.web.app. It shows the same team data as the app: people, their shifts, and released shifts with who applied and who decided, plus the schedule admins plan, time off requests and hours per person. It doesn't show pay or personal shift notes.
- Signing in with a QR code: the website makes a one-time sign-in request that expires after 10 minutes. When you scan it with your iPhone and confirm, the website is signed in as you. Unused requests are deleted within a day.
- Google or email (optional): if you link a Google account or an email address and password, Firebase Authentication stores that email address (and, for Google, your Google account ID) so you can sign in without your phone. Passwords are handled by Firebase and never seen by Shiftloop. Deleting your team data in the app removes the sign-in too.
The website uses no cookies for tracking, no analytics and no ads.
Web link (optional)
The web link is off unless you create one. It lets anyone with the link see your shifts in a web browser. When you create one, Shiftloop saves a copy of your schedule in the public database of Shiftloop's iCloud container (Apple's CloudKit), under a random name that is part of the link. The copy contains the same things as live sharing (shift names, dates, times and colours, the name you choose to show, which job each shift is for, and notes only if you turn on "Include shift notes"). Pay is never included.
Unlike live sharing, this copy isn't private to people you invite: anyone who has the link can open it, so only send it to people you trust. The copy can't be searched for or listed; it can only be opened with the link. Because it's stored in Shiftloop's container rather than your own iCloud account, the developer of Shiftloop could technically see it, but doesn't look at it or use it for anything. The web page doesn't use cookies, analytics or trackers, and asks search engines not to list it.
Turning the link off deletes the copy and the link stops working. Making a new link deletes the old copy.
Purchases
Shiftloop Pro is bought through the App Store. Apple handles the payment, and the developer doesn't receive your name, email or payment details. Shiftloop only asks the App Store whether you have Pro.
Siri, Shortcuts, reminders and calendar export
- Siri and Shortcuts: when you use them, Shiftloop answers on your iPhone. Apple processes your voice requests under its own privacy policy.
- Shift reminders: these are scheduled on your iPhone and aren't sent anywhere.
- Calendar export: it creates a file that you choose where to send.
- Scanning a roster: photos, screenshots and PDFs you scan are read on your device, by Apple's on-device text recognition and, where available, Apple Intelligence running on the device. They aren't uploaded or kept. Only the shifts you choose to add are saved.
- Calendar app (optional): if you turn it on, Shiftloop adds a "Shiftloop" calendar with your shifts (names, times and notes, never pay) to your device's Calendar app, in the calendar account you use there. Shiftloop only changes events in that calendar. Turning it off lets you remove the calendar.
Deleting your data
- Everything on your iPhone: delete the app.
- Your synced copy in iCloud: in the Settings app → your name → iCloud → Manage Account Storage → Shiftloop, delete its data.
- Your live-sharing copy in iCloud: stop sharing in Settings → Live sharing.
- A calendar someone shared with you: remove it from its menu.
Children
Shiftloop isn't directed at children and doesn't collect personal information from anyone.
Changes
If this policy changes, the new version will be published here with a new date.
Contact
Questions about privacy: whitecarrotstudios@gmail.com