Privacy Policy
App: Shifto — Auto Shift Scheduler
Package name: com.hcb.smartshift
Developer: seungHo Hyun
Contact: sh7903@gmail.com
Effective date: May 14, 2026
Last updated: May 14, 2026
This Privacy Policy applies to the mobile application "Shifto — Auto Shift Scheduler" (package name com.hcb.smartshift; hereinafter "Shifto", "the App", "we", "us"), published on Google Play by seungHo Hyun. It describes how the App collects, uses, and protects your information. By installing or using the App, you agree to the practices described below.
1. Information We Collect
We collect the minimum information necessary to operate the App's features.
a. Account information (via Google Sign-In)
- Unique user ID (UID), email address, display name
b. Profile information (provided voluntarily by you)
- Name, role, allowed shift types, hire date, friend code
c. Channel and schedule data
- Channel configuration (name, member list, shift definitions, time-slot demands, holidays, invitation code)
- Monthly schedule assignments (auto-generated and manually edited)
- Off-day requests (dates, reasons, status, cancellation requests)
- Personal calendar events (note, date)
- Friend connections and shared shift mirrors
d. Device and technical information
- Advertising ID (for Google AdMob ads)
- App version, OS version, device model, language setting, crash and diagnostic logs
e. Subscription and purchase information
- Purchase token, product ID, and subscription status (processed by Google Play Billing; we do not receive or store your credit card number)
2. How We Use Your Information
- To create and maintain your account, route you between channel and schedule screens
- To run automatic schedule generation, time-off approval, and friend shift sharing
- To provide and verify premium subscription benefits
- To display ads to non-premium users
- To diagnose crashes, prevent abuse, and improve the App
- To comply with applicable laws
3. Third-Party Services
We rely on the following third-party services. Each has its own privacy policy governing how it processes data.
- Firebase Authentication, Cloud Firestore, Analytics (Google LLC) — account auth, data storage, usage analytics. Firebase Privacy
- Google Sign-In & Credential Manager (Google LLC) — sign-in. Google Privacy
- Google AdMob (Google LLC) — ads. AdMob may collect the advertising ID and limited device information. AdMob Privacy
- Google Play Billing (Google LLC) — subscription purchases. Play Billing Terms
- Nager.Date (date.nager.at) — public holiday lookup. Only year and country code are transmitted; no user-identifying information is included. Nager.Date
4. Data Sharing
We do not sell your personal information. We share data only in these cases:
- Within the same channel: Shift schedules and time-off information are visible to admins and members of the same channel. This is the core purpose of the App.
- Between friends: When two users connect via a friend code, their own shift schedules and shared events become visible to each other (only after the user explicitly initiates the link).
- With service providers listed in Section 3, strictly to operate the App.
- When required by law, valid legal process, or to protect rights, safety, and property.
5. Data Retention
- Account and profile data: retained until you delete your account
- Channel, schedule, and time-off data: retained until you or the channel admin delete it, or until the account is deleted
- Crash and analytics logs: retained according to Firebase's default retention
Upon account deletion, we delete or anonymize your personal data within a reasonable period, except where retention is required by law.
6. Data Security
- Transport is encrypted via HTTPS/TLS
- Authentication is handled by Firebase Auth and Google Credential Manager
- Access to backend data is restricted by Firestore security rules
No method of transmission or storage is 100% secure, and we cannot guarantee absolute security.
7. Your Rights
Depending on your jurisdiction (including the EEA/UK under GDPR, California under CCPA/CPRA, and Korea under PIPA), you may have the right to:
- Access the personal information we hold about you
- Request correction or deletion
- Object to or restrict certain processing
- Withdraw consent at any time
- Data portability
- Lodge a complaint with your local data protection authority
You can exercise most rights directly in the App (edit profile, delete content, or use Settings → Delete Account) or by emailing the contact in Section 13.
8. Children's Privacy
The App is intended for users aged 14 and older (or the higher minimum age required in your jurisdiction). We do not knowingly collect personal information from children under that age. If you believe a child has provided us with personal information, please contact us and we will delete it promptly.
9. International Data Transfers
The App relies on Google Cloud infrastructure. Your information may be processed in countries other than your own, including the United States. Where required, we rely on appropriate safeguards such as Google's Standard Contractual Clauses.
10. Permissions
- Internet — required to communicate with Firebase, AdMob, and the public holiday API
- Billing — required by Google Play Billing for subscriptions
11. Account Deletion
You can delete your account and all associated personal data at any time from within the App by using Settings → Delete Account. Deletion removes your profile, time-off history, friend links, and your own subscription records within a reasonable period. Channel-level data authored by an admin (channel configuration, monthly schedules) is deleted when that channel is deleted by its admin.
12. Changes to This Policy
We may update this Privacy Policy from time to time. Material changes will be announced within the App or on this page with an updated "Last updated" date. Continued use of the App after the changes take effect constitutes acceptance of the updated policy.
13. Contact
For questions, requests, or complaints about this Privacy Policy or your data, please contact: