This Privacy Policy explains how Shiftzi ("we", "us"), the company that operates the Shiftzi workforce-management application and website (the "Service"), collects, uses, and protects your information.
Most people use Shiftzi because their employer does. That organization decides which features are turned on, who can see what, and how long the workspace runs; we process the workspace data on its behalf.
Account information: name, work email, password (stored securely by our authentication provider), and your company/workspace details.
Workforce data: employee names, positions, schedules, shift assignments, clock-in/out times, timesheets, pay-period and payroll figures, and team chat messages that you or your team enter into the Service.
Photographs: if your employer turns on photo verification, the app opens your device camera at clock-in and captures a single still photo of you, which is stored with that timesheet entry and visible to your managers as proof of attendance. You can also attach images to team chat messages, which are stored with the conversation. Photos are only captured when you take the action that captures them; we do not access your camera or photo library at any other time. We do not perform face recognition or any other biometric matching on these images, and we do not use them to train models.
Billing information: where an organization pays for the Service, the billing contact details and transaction records for that arrangement are handled by our third-party payment processor. We do not receive or store full card details.
Usage & device data: basic technical information such as browser type, device, and app interactions, used to operate and improve the Service.
Location data (optional): if your employer enables live-location features and you opt in, we collect your device's approximate or precise GPS location during your scheduled working hours to support GPS-verified clock-ins, geofence checks, and shift ETA. It is never collected when the feature is off, when you have not opted in, or outside your confirmed shift.
When enabled by your employer and confirmed by you, Shiftzi may: (a) record your location at clock-in/out and periodically only during your scheduled shift, or the short window before it once you confirm you are on your way; (b) check whether you are within a defined work area (a geofence) and alert your manager if you leave it during a shift; and (c) estimate your ETA to a work location so your manager knows when to expect you. Location is not collected outside your confirmed working hours, and tracking stops automatically when your shift ends or when you withdraw consent. On the web, tracking only runs while the app is open on your device.
To provide and operate the Service (scheduling, time tracking, payroll calculations, attendance verification, messaging); to authenticate users; to administer an organization's account; to provide support; to secure the Service; and to comply with legal obligations.
We do not sell personal data, we do not use it for advertising, and we do not use your content to train machine-learning models.
We do not sell your data. We share information only with service providers that help us run Shiftzi: Google Firebase (authentication, database, file storage, hosting), a third-party payment processor (handling an organization's payments, where it has a paid arrangement with us), and — only when an admin uses AI auto-scheduling — Anthropic (we send the typed instructions plus the relevant employee and store names so it can interpret them into scheduling rules). Each company's workspace data is isolated and accessible only to that company's authorized users and our platform administrators for support and operations.
Data is encrypted in transit (HTTPS) and stored with our cloud provider's security controls. Access to company data is restricted by per-company security rules. No method of transmission or storage is 100% secure, but we take reasonable measures to protect your information.
We retain your data while your account is active and as needed to provide the Service. You can delete your own account and its personal data from inside the app (Profile → Delete my account, or Settings → Security). You may also request deletion of a whole workspace and its associated data by emailing us at info@shiftzi.org; some records — for example time and pay records an employer must keep — may be retained as required by law.
Depending on your location, you may have rights to access, correct, export, or delete your personal data. To exercise these rights, contact us at the email below.
The Service is intended for businesses and is not directed to children under 16.
We may update this policy. Material changes will be reflected by the "Last updated" date above.
Questions about privacy, or requests to access or delete your data? Email us at info@shiftzi.org, reach us through Settings → Security in the app, or reply to any email you receive from Shiftzi, and we'll get back to you.