Privacy Policy

Shiftwell is operated by Nneoma Isinguzo, who is the data controller for the personal data described in this notice. Contact us at any time about your data: christianakelechi995@gmail.com.

• Account data — name and email address, to create and secure your account (legal basis: contract performance).
• Login credentials — stored in hashed form by our authentication provider, to sign you in (contract performance).
• Schedule data — shifts, units, notes and pay settings you enter, to provide the calendar and pay estimates (contract performance).
• Wellness data — sleep, fatigue and mood check-ins you choose to log, to show your rest trends (consent; you can stop logging at any time).
• Support messages — emails you send us, to respond to you (legitimate interests).
• Usage and device data — basic telemetry, device identifiers and IP address, for security, fraud prevention and product improvement (legitimate interests).

Payment details are collected and processed by Paddle, our Merchant of Record — we never see or store your card number.

• Service providers — hosting, authentication and analytics subprocessors that help us run Shiftwell, bound by data-processing terms.
• Paddle — our Merchant of Record, for the sale of subscriptions, payment processing, tax compliance and invoicing.
• Professional advisers — legal and accounting advisers where needed.
• Authorities — where required by law.

People you share a schedule link with can see your display name and shift dates, types and times until you revoke the link. Your pay, sleep, fatigue, mood, unit and notes are never shared.

Some of our service providers process data outside the UK/EEA. Where they do, we rely on appropriate safeguards such as Standard Contractual Clauses or adequacy decisions.

We keep your data while your account is active. When you delete your account, or data is no longer needed for the purposes above, it is deleted or anonymised within a reasonable period, except where the law requires us to keep it longer (for example tax records held by Paddle).

Depending on your location, you have rights to access, rectify, erase, restrict or port your personal data, to object to processing, and to withdraw consent at any time (without affecting prior processing). You also have the right to complain to your supervisory authority. We respond to requests within one month. To exercise any right, email christianakelechi995@gmail.com.

We use appropriate technical and organisational measures to protect your data, including encryption in transit and at rest, access controls, and row-level isolation so each user can only read their own records.

Shiftwell uses essential cookies and local storage to keep you signed in and remember your preferences. We do not use marketing cookies. You can clear cookies in your browser settings; essential cookies are required for sign-in to work.

We may update this notice from time to time. Material changes will be flagged in the app, and the "last updated" date above will change. Continued use after an update means you accept it.