Your information
Privacy notice
What SHFTRS keeps, where it's kept, who else handles it, and how to get it back or delete it.
The short version
- We never ask which police force you're in, and we don't want to know.
- No adverts, no advertising trackers, no analytics in the app. We don't sell your information.
- Your rota, pay, leave and records back up to your account, so you can change phones.
- Everything else you choose. Body and training details, food and water, and your check-ins stay on your phone unless you say yes to backing them up. Your date of birth, Offload notes and anything from Apple Health or Health Connect never leave your phone.
- If you link your phone calendar, your shifts and your own events stay in that calendar. We don't copy them to our servers.
- Circle shares only what you choose, with the people you choose.
- You can download your data or delete your account from inside the app.
SHFTRS is in beta. This notice describes how the app works today. We'll update it before the public beta, and whenever something here changes.
Who we are
SHFTRS Ltd is a company registered in England and Wales, company number 17463559. We decide how your information is used in the SHFTRS app and on this website, which makes us the "controller" under UK data protection law.
Email privacy@shftrs.app with any privacy question.
What we keep and where
Each kind of information is kept in one of three places:
- Your phone only on your phone. We can't see it.
- Your account backed up to your SHFTRS account, so it's there if you change phones.
- Shared sent to the people in your Circle, because you chose to share it.
| What | Examples | Where |
|---|---|---|
| Account | Your email address, the name you give, your password (stored scrambled) and two-step sign-in settings | Your account |
| Your job | Officer or staff; where you serve (Home Office force, Non-Home Office force or Other); rank; role; hours; the dates you joined and reached your rank; pay point | Your account |
| Rota and records | Your pattern, shift times, changes, late finishes, leave, your answers to Rights questions and the results | Your account |
| Pay and TOIL | Pay settings, Wallet entries, leave and TOIL history. If you're police staff, your yearly salary and weekly hours stay on your phone only. | Your account (salary and hours: your phone) |
| Date of birth | Used to check you're 18 or over, and in the energy estimate if you use it. Your account only records that the age check was passed. | Your phone |
| Body details (optional) | Height, weight, and sex as the energy formula uses it (female, male or an average of both) | Your phone, and your account if you say yes to backing them up |
| Food and water (optional) | Planned meals, your recipes, shopping list, food log and targets if you track, water | Your phone, and your account if you say yes to backing them up |
| Training (optional) | Your programme, sessions, sets, reps, weights and personal bests | Your phone, and your account if you say yes to backing them up |
| Apple Health or Health Connect (optional) | Sleep, workouts, steps, heart rate, heart rate variability, weight, active calories and water, read to fill in your sleep, activity, recovery, weight and water. Workouts you log can be saved to it. If you turn on Save food to Health, the energy, protein, carbs and fat of the food you log are saved too. See "Apple Health and Health Connect" below. | Your phone |
| Wellbeing check-ins | How you slept and how you feel, recovery, and which parts of your plan you've done | Your phone, and your account if you say yes to backing them up |
| Place of work (optional) | A name you choose, used for leave-by times, and an address if you add one, for directions from your phone calendar. Please don't use a sensitive location. | Your phone (and your calendar, if you choose) |
| Phone calendar (optional) | If you turn it on, your shifts are written into a calendar you pick. If you link it, your own events show on your Rota and you can add or change them there. | Your phone's calendar Not our servers. |
| Offload | Short work notes you park until your next shift | Your phone |
| Circle | Who you share with, their first name, what each person sees, and Running late or home safe when you send them | Your account Shared |
| Notifications | A token that lets your phone receive Circle alerts, and which kind of alert it was | Suppliers |
| Support | Emails you send us, and anything you choose to include | Our email |
Your phone's copy of your information stays until you delete your account, erase the app's data, or remove the app. You can turn any backup on or off in Settings › Backup and sync. Turning one off deletes the backed-up copy from your account.
Apple Health and Health Connect
SHFTRS can connect to Apple Health (iPhone) or Health Connect (Android) if you allow it. You choose each type of data in your phone's own settings, and you can take that permission back there at any time.
- What we read: only the types you allow, and only to use inside the app:
- sleep and exercise sessions, to show your sleep and recovery around your shifts;
- daily steps, to show how active you were around your shifts;
- resting heart rate and heart rate variability, as signs of how well you're recovering, so we can suggest an easier day after hard shifts;
- weight, if you track it in another app, so you don't have to type it twice;
- active calories burned, so food guidance matches how active you've been;
- water you logged in other apps, so the water tracker shows your full day.
- What we save: workouts you log in SHFTRS. If you turn on Save food to Health (off unless you turn it on), we also save the energy, protein, carbs and fat of each food you log. If you delete it in SHFTRS, we remove it from Health too. We never read food from Health.
- Where it goes: nowhere else. Health data stays on your phone. It isn't sent to our servers, isn't backed up to your account, and is never shared with your Circle, sold, or used for advertising.
- Other apps: once something is saved in Apple Health or Health Connect, other apps you've allowed there can see it. You control that in your phone's settings.
Our use of information from Health Connect follows the Health Connect Permissions policy, including its Limited Use requirements.
Your phone calendar
SHFTRS asks for your phone's calendar permission only if you turn one of these on:
- Shifts in your calendar. We write your shifts for the next three months into a calendar you pick. You choose what shows (times, shift names, leave, rest days, place of work). Sick days, notes, Rights, pay and health are never added. Stop and remove shifts takes them all out again. If you delete SHFTRS first, the shifts stay in your calendar.
- Your own events on the Rota. We show the events from your phone's calendars on your Rota, and add, change or remove one only when you ask. We don't keep a copy, and they're never shared with your Circle or in a guest link.
Your calendar is yours. If it's a Google or iCloud calendar, that company stores it under your account. Anyone you share that calendar with will see the shifts we add.
What we never collect
- The name of your police force, fire service, ambulance trust or employer.
- Anything operational: incidents, intelligence, evidence, official records or where you're deployed. Please don't type these into notes.
- Your location. SHFTRS doesn't use GPS.
- Anything for advertising. There are no ad trackers, no analytics and no crash-reporting services in the app.
Why we use it
| Purpose | Legal basis under UK GDPR |
|---|---|
| Running your account, rota, records and Rights results | It's needed to provide the app you asked for (contract) |
| Wellbeing, body details, food, water, training and health connections | Your explicit consent, which you give when you switch on each part and can withdraw by switching it off. This information can say something about your health, so the law treats it with extra care. |
| Sharing through Circle | Your consent, given person by person |
| Keeping accounts secure and stopping misuse | Our legitimate interest in running a safe service |
| Sign-in, password and account emails | Needed to provide the app (contract). We never send marketing from these. |
| The waiting list | Your consent, when you sign up |
| Counting visits to this website | Our legitimate interest in knowing which pages are useful and how people find us |
| Meeting legal duties | Legal obligation |
We don't make automated decisions about you that have legal or similar effects. A Rights result is an indication under reviewed rules, not a decision, and it can't guarantee a payroll or legal outcome.
Circle
Each person you add sees only what you choose for them: whether you're working, and if you allow it, the duty type and rough times (your planned times rounded to the hour). Running late and I'm home safe go only to people you've turned live updates on for.
When you invite someone, the message has a link to shftrs.app/join that opens SHFTRS with your invitation code filled in. The code sits after a "#" in the link, so it isn't sent to our website. You can still type the code instead.
Never shared: rest days, leave, sick days, location, notes, Rights, pay, health and wellbeing.
You can stop sharing with anyone at any time. Anyone you share with can see what you've shared while they have it, so only add people you trust.
Circle alerts on the lock screen only say that something changed. The details show once the app is open.
Who else handles it
We use a small number of suppliers to run SHFTRS. They can only use your information to provide their service to us.
| Supplier | What for | Where |
|---|---|---|
| Supabase | Accounts, sign-in and the database behind your account | London (UK) |
| Resend | Sign-up, confirmation and password emails | US |
| Expo | Delivering Circle alerts to your phone | US |
| Apple and Google | The app stores and notifications. Apple Health, Health Connect and your phone calendar run on your phone, and we don't send them anything. | Various |
| Open Food Facts | Looking up a food barcode you scan. Only the barcode number is sent (with your phone's internet address, as with any website). Results are saved on your phone. | France (EU) |
| Google Workspace | Our email, including support and privacy messages | Various |
| Netlify | Hosting this website (including the invitation link page), and keeping the waiting list | US |
| Cloudflare | Counting visits to this website (Cloudflare Web Analytics). Not used in the app. | Various |
Where a supplier handles information outside the UK, we rely on UK adequacy regulations or the approved contract terms the law provides. Ask us for details.
We don't share your information with any police force, the Police Federation, your employer or anyone else, unless the law requires us to.
How long we keep it
- Your account: until you delete it. Deleting removes it from our live database straight away.
- Your phone: until you delete your account, erase the app's data, or remove the app.
- Service logs: our database supplier keeps short technical logs (like the time of a request) for about a day.
- Backups: our supplier may hold copies for a short time after deletion. They aren't used to run your account and they expire.
- Support emails: deleted once your question is sorted, and within 12 months.
- Waiting list: until you join the beta, ask to leave, or 12 months after our last email, whichever comes first.
Your choices and rights
In the app:
- Settings › Account security › Download your data gives you a copy of your data as a file.
- Settings › Account security › Delete your account deletes your account and everything in it. See Delete your account.
- Delete my body data in Settings removes your height, weight and sex, and keeps everything else.
- Switch a part of the app off at any time. Switching off takes back your consent for that part.
- Stop sharing with anyone in your Circle.
You also have the right to see, correct, delete or restrict your information, to object to how we use it, and to take a copy with you. Email privacy@shftrs.app. We may need to check it's you before we act, and we'll reply within one month.
If you're unhappy with how we've handled your information, tell us first so we can put it right. You can also complain to the Information Commissioner's Office at ico.org.uk/make-a-complaint.
Waiting list
If you join the waiting list we keep your email address, whether you use an iPhone or an Android phone, your rota pattern if you give it, and which of our links you came from. Netlify holds the list for us. We use them to tell you when the beta has room, to send the right test invite (TestFlight for iPhone, Google Play for Android), and to pick testers across different shifts. We never ask for your force.
Every email has a link to leave the list, or email privacy@shftrs.app.
This website
This website uses Cloudflare Web Analytics to count visits: which pages are viewed, which link or website brought people here, and the type of device and browser. It doesn't set cookies or track you across other websites, and we don't use it for advertising. There's no advertising on this website. Netlify, which hosts it, keeps short technical logs of visits (such as the time and your internet address) to run and protect the site.
Security
Information travels between the app and your account over encrypted connections. Each account can only reach its own data, and you can turn on two-step sign-in in Settings › Account security.
Your phone's copy is protected by your phone's lock, so please use a passcode. We'll never ask for your password or sign-in codes.
Age
SHFTRS is for people aged 18 or over during the beta. The app checks your date of birth at setup. If you think someone under 18 has an account, email us.
Changes and contact
We'll update this notice when the app, our suppliers or the law changes, and tell you in the app or by email about anything important.
Privacy questions: privacy@shftrs.app. Everything else: support@shftrs.app.