Last updated: 28 July 2026
ShiftPilot helps shift workers plan recovery around irregular rosters. This
policy explains exactly what the app stores, who processes it, and how to get
rid of it. It covers the ShiftPilot iOS and Android apps
(com.mertapp.shiftpilot).
| Data | Why | Where it goes |
|---|---|---|
| Email address, and the name supplied by Apple or Google when you use those sign-in buttons | To identify your account and let you sign back in | Google Firebase Authentication |
| Your profile: name, role, shift pattern, chronotype, daily sleep goal, reminder preference | To personalise your recovery plan and the AI coach's advice | Google Cloud Firestore |
| Your shifts: dates, shift type, times, notes you write | To build your calendar and recovery timeline | Google Cloud Firestore |
| Messages you send to the AI Coach | To generate a reply | Sent to Google Gemini for the duration of the request. We instruct Google not to retain them, and we do not store the conversation on our servers — it lives only on your device. |
| Daily check-in: sleep hours and resting heart rate you type in yourself | To calculate your recovery score | Stored on your device only. It is never uploaded. |
| Subscription status and expiry date | To unlock Premium features and to know when access ends | RevenueCat, and a copy in Google Cloud Firestore |
| A daily count of AI Coach requests | To enforce the free-tier limit and prevent abuse | Google Cloud Firestore |
If you continue as a guest, an anonymous account is created for you. It holds the same profile and shift data but has no email or password attached, so it cannot be recovered if you delete the app or change device. Adding an account later upgrades the guest account in place and keeps everything in it.
We do not sell your data, and we do not share it with anyone beyond the processors listed above.
Data is held on Google Cloud infrastructure in the United States. Access is restricted by security rules so that an account can read and write only its own records; subscription and usage records are writable only by our server.
Your profile and shifts are kept until you delete them or delete your account. Deleting your account removes everything immediately and permanently.
Open Profile → Delete Account in the app. This erases your profile, shifts, subscription record and usage counters, and removes your sign-in credentials. It cannot be undone.
Deleting your account does not cancel an active subscription — only Apple or Google can do that. Cancel it in your App Store or Google Play subscription settings first, or billing will continue.
Depending on where you live, you may have the right to access, correct, export or erase your data, and to object to its processing. You can correct your profile at any time in the app, and erase everything with Delete Account. For anything else, write to us at the address below and we will respond within 30 days.
ShiftPilot is not directed at children under 13 (or under 16 in the EEA/UK) and we do not knowingly collect their data. If you believe a child has created an account, contact us and we will remove it.
If this policy changes materially we will update the date above and note the change in the app before the new version takes effect.
ShiftPilot — hezarfentech@gmail.com