ShiftKit Privacy Policy

Last updated: June 30, 2026

ShiftKit ("ShiftKit," "we," "us") is an employee scheduling and time-tracking app
for restaurants and other shift-based businesses. This policy explains what we
collect, how we use it, and your choices.

ShiftKit is operated by NS Ventures LLC. Questions?
Email daniel.dae.lee808@gmail.com.

How ShiftKit is used (controller vs. processor)

ShiftKit is a multi-tenant product: each business ("your employer" or
"organization") sets up an account and adds its staff. For work-related
information (schedules, shifts, time entries, pay rates, time-off), your
employer is the data controller and ShiftKit acts as a service provider /
processor on their behalf. For questions about your work data, contact your
employer's owner or manager. For account and app-level questions, contact us.

Information we collect

  • Account information. Your name and email address, used to create and sign
    in to your account.

  • Work information provided by you or your employer. Job role, employment
    status, availability, scheduled shifts, clock-in/clock-out time entries,
    break times, time-off requests, shift swaps/claims, pay rate, and notes. This
    is used to operate the schedule and time-tracking features for your business.

  • Shared notes. Note content you create and the teammates you invite to a
    note. Notes are visible only to the note's owner and the members they invite.

  • Push notification token. If you enable notifications, we store your
    device's push token so we can deliver alerts (e.g. "your schedule is posted").

  • Device information. Basic device type/operating system and diagnostic logs
    needed to operate and troubleshoot the app.

We do not collect your contacts, precise location, photos (other than a
profile photo you choose to upload), or advertising identifiers, and we do not
use tracking for advertising.

Voice input (speech-to-text)

If you use the voice option to dictate an AI scheduling request, speech
recognition is performed on your device by the operating system (Apple's
Speech framework on iOS, the device recognizer on Android). The audio is not
sent to or stored by ShiftKit; only the resulting text you choose to submit is
processed like any other typed request.

AI features

ShiftKit offers AI features that draft schedules and summarize labor reports. When
you use them, the text of your request plus the relevant scheduling context (e.g.
staff names, roles, availability, and the deterministic numbers computed by our
database) is sent to our AI provider, Anthropic (the Claude API), to generate
the draft or summary. Per Anthropic's API terms, this data is not used to train
their models. The AI proposes; a human always reviews before anything is saved.

How we use information

  • Provide and operate scheduling, time tracking, reporting, and notifications.

  • Authenticate you and keep accounts secure (row-level access controls).

  • Deliver notifications you've enabled.

  • Provide support and improve reliability.

  • Comply with legal obligations.

We do not sell your personal information.

Who we share information with

  • Your organization. Owners and managers of your business can see the
    work-related information described above as needed to run the schedule.

  • Service providers that operate the app on our behalf:

    • Supabase - database, authentication, and hosting.

    • Expo - delivery of push notifications.

    • Anthropic - AI drafting/summarization features (as described above).

  • Legal. We may disclose information if required by law or to protect rights
    and safety.

Data retention

We keep information for as long as your (or your employer's) account is active and
as needed to provide the service, then delete or anonymize it within a reasonable
period, unless a longer period is required by law (for example, wage-and-hour
records your employer must retain).

Security

Data is encrypted in transit (HTTPS/TLS) and protected by row-level security so
each organization can only access its own data. No system is perfectly secure,
but we work to protect your information.

Your choices and rights

  • Notifications. Turn push notifications on or off in your device settings.

  • Profile. Update your name, photo, status note, and password in the app.

  • Access, correction, deletion. Because most data is controlled by your
    employer, direct those requests to your organization's owner/manager. For
    account-level requests, or to delete your ShiftKit account, contact us at the
    email above and we will assist, subject to your employer's record-keeping
    obligations.

Children's privacy

ShiftKit is intended for use by employees and is not directed to children under
16. We do not knowingly collect information from children under 16.

International users

We operate in the United States and process data there. By using ShiftKit you
understand your information may be processed in the U.S.

Changes to this policy

We may update this policy from time to time. We'll revise the "Last updated" date
above and, for material changes, provide notice in the app.

Contact

NS Ventures LLC
Email: daniel.dae.lee808@gmail.com