ShiftHawk

Privacy Policy

Last updated: 2 June 2026

1. Our Privacy Principle

ShiftHawk has no backend. Your data stays on your device.

ShiftHawk runs no server, so there is nowhere to upload your data to. Your schedule, your calendar link, and your coworkers' contact details live only on your phone. We can't see them, because they never reach us.

This isn't a promise we ask you to take on faith — it's the architecture. There is simply no place on our side for your data to go.

2. Information ShiftHawk Handles (and Where It Lives)

Everything below stays on your device. Nothing here is transmitted to ShiftHawk.

  • Your calendar URL — the .ics link to your schedule. Stored securely in the iOS Keychain or Android Keystore.
  • Your fetched schedule — the shifts read from that calendar. Held in on-device storage only, so the app can search for swaps.
  • Colleagues' names and phone numbers — the contacts you enter so ShiftHawk can draft swap messages. Names sit in on-device storage; phone numbers are kept in the Keychain / Keystore.
  • App settings and preferences — your role, rest rules, marked vacations, and similar choices. Stored on-device.

3. What ShiftHawk Does NOT Do

  • No backend collection — we operate no server that receives your data.
  • No analytics service receives your schedule or your usage.
  • No selling or sharing of your data — ever, with anyone.
  • No ads, and no upselling beyond the in-app purchases you choose.
  • No tracking you across other apps or websites.
  • No PHI (protected health information) — ShiftHawk handles your work schedule, not patient data. It is outside HIPAA's scope by design.

4. How Data Leaves Your Device (Only Two Ways)

There are exactly two moments when information moves off your phone, and neither one passes through ShiftHawk:

  • Calendar fetches go directly between your device and your scheduling provider. When ShiftHawk refreshes your schedule, your phone talks straight to your provider (Amion, QGenda, MedRez, ShiftAdmin, Symplr, Lightning Bolt, or whoever exports your .ics). We are not in the middle.
  • Messages you draft are sent by you. ShiftHawk composes a text or email; you read it, approve it, and send it from your own SMS or email app. The app never sends anything on its own and never sends anything you haven't seen.

5. Payments & RevenueCat

Subscriptions and in-app purchases are processed by Apple's App Store and Google Play. We use RevenueCat as our purchase broker: it reads the purchase receipt from Apple or Google so the app knows which features you're entitled to. RevenueCat handles receipts and entitlement state — not your schedule, not your contacts.

Apple and Google handle the actual payment, including your card details. ShiftHawk never sees or stores your payment-card information. For how RevenueCat handles its data, see the RevenueCat Privacy Policy.

6. Third-Party Services

ShiftHawk relies on a small, deliberate set of third parties:

  • Apple App Store / Google Play — app distribution and payments.
  • RevenueCat — subscription and purchase management (receipts and entitlements only).
  • Your scheduling provider — your device fetches your calendar directly from it. ShiftHawk is not affiliated with any scheduling provider; it simply reads the .ics export you already have access to.

Each of these has its own privacy policy that governs the data it handles.

7. Data Retention & Deletion

Because your data lives on your device, you control all of it. We hold nothing to delete on your behalf. To remove your data:

  • Delete the app. Removing ShiftHawk from your phone deletes its on-device storage, including your schedule and saved colleagues.
  • Clear data inside the app. Use the in-app reset or clear options to wipe saved colleagues, settings, and cached schedule data without uninstalling.
  • Revoke your calendar URL. Remove or replace the calendar link in the app's settings to stop ShiftHawk from fetching your schedule. The stored URL is cleared from the Keychain / Keystore when you do.

Securely stored items (your calendar URL and colleagues' phone numbers in the Keychain / Keystore) are removed when you clear them in-app or uninstall the app, following the platform's secure-storage rules.

8. Children's Privacy

ShiftHawk is a professional tool for people who work shifts and is not directed at children. We do not knowingly collect information from anyone under 13 (or under 16 where local law sets that age). The app is meant for working adults managing their own work schedules.

9. Your Rights

Privacy laws such as the GDPR and CCPA give you rights to access, correct, and delete your personal data. With ShiftHawk you already have all of that, directly: your data is on your device, under your control, and you can view, edit, or delete it at any time using the steps in Section 7. We hold no copy to hand over or erase. If you have a question about your rights, email us at [email protected].

10. Changes to This Policy

If we change how ShiftHawk handles data, we'll update this page and revise the "Last updated" date above. Because our model is on-device by design, any change that affected it would be significant — and we'd flag it clearly in the app.

11. Contact

Questions about your privacy? Email [email protected]. A real person reads every message.