Privacy Policy
Last updated: October 14, 2026
Shift Runner ("we", "us") helps you track shift earnings, hours and paychecks. This policy explains what data we collect, why, and the choices you have. It applies to the Shift Runner iOS app and the website at shiftrunner.pro.
1. Data we collect
- Account data: your email address and a password. Passwords are stored only as a one-way cryptographic hash (Argon2id). We never see or store your actual password.
- Data you enter: shift entries (date, amount, shift type, notes, hours, optional mood rating), weekly paycheck amounts and hours, and app settings such as industry preset and week start day.
- Purchase status: whether you have Shift Runner Pro, which plan (subscription, free trial or lifetime) and when it renews or expires. Payments are processed by Apple; we never receive your payment card details. Purchases are verified by our provider RevenueCat, which receives your internal Shift Runner account ID (not your email) and your App Store transaction data.
- Basic usage data: an anonymous daily count of active accounts (your internal account ID is recorded for up to 30 days to count unique daily users). We do not use advertising identifiers and we do not track you across other apps or websites.
2. How we use your data
- To provide the service: store and sync your shifts across your devices and show your statistics.
- To secure your account: login, password reset codes, and preventing abuse (for example rate limiting failed logins).
- To provide Pro features you purchased and restore them.
- To send essential emails (welcome, password reset, verification codes). We do not send marketing emails.
We do not sell your data, share it with advertisers, or use it for tracking.
3. Service providers
We use a small number of providers to run the service. They process data only on our behalf:
- Vercel (application hosting) and Redis / Upstash (database), located in the United States.
- Resend (transactional email delivery).
- Apple and RevenueCat (in-app purchase processing and verification).
4. Data retention and deletion
We keep your data while your account exists. You can permanently delete your account and all associated data at any time:
- In the iOS app: Settings → Account → Delete Account.
- On the website: Settings → Account → Delete Account.
- Or by emailing us from your account email address (see Contact).
Deletion removes your account, shift data and sessions from our live database immediately. Copies in encrypted backups are overwritten within 30 days.
5. Security
All traffic is encrypted with HTTPS. Passwords are hashed, login sessions can be revoked, and repeated failed logins are rate limited. No method of storage is 100% secure, but we work to protect your data.
6. Your rights
Depending on where you live (for example under GDPR or CCPA), you may have the right to access, correct, export or delete your personal data, and to object to processing. Contact us to exercise these rights; we will respond within 30 days.
7. Children
Shift Runner is not directed to children under 13 (or under 16 in the EU), and we do not knowingly collect their data.
8. Changes
If we change this policy we will update the date above and, for material changes, notify you in the app or by email.
9. Contact
Questions or requests: support@shiftrunner.pro