Shift Agent Privacy Policy
Last updated: September 16, 2026
Shift Agent (formerly ShiftKit) ("Shift Agent," "we," "us") is an employee scheduling, time-tracking and payroll-preparation app for restaurants and other shift-based businesses. It is available on iPhone and iPad and on the web at app.moalab.ai. This policy explains what we collect, how we use it, and your choices.
Shift Agent is operated by NS Ventures LLC. Questions? Email daniel.dae.lee808@gmail.com.
How Shift Agent is used (controller vs. processor)
Shift Agent is a multi-tenant product: each business ("your employer" or "organization") sets up an account and adds its staff. For work-related information (schedules, time entries, pay, time off, staff records), your employer is the data controller and Shift Agent acts as a service provider / processor on their behalf. For questions about your work data, contact your employer's owner or manager. For account and app-level questions, contact us.
Information we collect
Account information. Your name, email address and password (stored only as a secure hash), used to create and sign in to your account.
Staff profile. Information you or your employer add to your staff record, which may include phone number, birthday, home address, emergency contact, uniform size, hire date, job roles, employment status, profile photo, a short status note, and notes your managers keep. Your employer chooses which of these fields it uses.
Work information. Availability, scheduled shifts, clock-in and clock-out times, breaks, time-off requests, shift drops, pickups and swaps, attendance records, pay rate and pay basis, and the audit trail of any corrections a manager makes to your hours.
Clock-in code. A short numeric code used to clock in on a shared store device and to unlock the app on your phone.
Location at clock-in. If your employer turns on the store-location check, the app reads your device's location at the moment you clock in or out and stores that position with the punch, to confirm you were at the store. Location is not collected at any other time, and it is not tracked in the background.
Messages, notes and shift logs. Messages you send to teammates, shared notes and the people you share them with, announcements, and shift logs written by managers. Messages and notes are visible only to the people in them.
Documents and spreadsheets. Files your employer or you upload (for example handbooks, forms and personal documents), and spreadsheets a manager uploads to import staff or to fill in an accountant's payroll template.
Business sales data. If a business connects its point-of-sale system (Square or Clover), we receive hourly sales totals to compare labor with sales. We do not receive customers' card details.
Purchases. Subscriptions and AI credits are bought through Apple. Apple processes the payment; we receive the transaction details needed to confirm the purchase, not your card information.
Push notification token. If you enable notifications, we store your device's push token so we can deliver alerts (for example "your schedule is posted").
Device information. Basic device type, operating system, app version and diagnostic logs needed to operate and troubleshoot the app.
We do not collect your contacts or advertising identifiers, and we do not track you for advertising.
Face ID and saved sign-in
If you turn on Face ID or Touch ID, your device checks your face or fingerprint; Shift Agent never receives biometric data. If you choose "Remember me," your sign-in details are stored in your device's secure keychain, not on our servers.
Voice input (speech-to-text)
If you dictate an AI scheduling request, speech recognition is performed on your device by the operating system (Apple's Speech framework on iOS). The audio is not sent to or stored by Shift Agent; only the text you choose to submit is processed like any other typed request.
AI features
Shift Agent's AI features draft and edit schedules, answer questions about a pay period, write report summaries, read a staff spreadsheet for import, and work out the layout of an accountant's payroll spreadsheet. When a manager uses them, the request plus the context needed to answer it is sent to our AI provider, Anthropic (the Claude API):
Scheduling: staff names, job roles, availability, approved time off and existing shifts.
Pay-period questions and summaries: hours, overtime and punch details, with totals computed by our database, not by the AI.
Payroll templates: the spreadsheet's headings and layout only. Names and figures in the file are replaced with placeholders before anything is sent.
Staff import: the spreadsheet's header row and first five rows, so the AI can tell which column is which. The rest of the file is read by our own code.
Under Anthropic's API terms this data is not used to train their models. The AI proposes; a person reviews before anything is saved or sent.
How we use information
Provide and operate scheduling, time tracking, messaging, documents, reporting, payroll preparation and notifications.
Authenticate you and keep accounts secure.
Send account emails (invitations, sign-in links, security codes and password resets) and notifications you have enabled.
Process purchases and provide support.
Keep the service reliable and comply with legal obligations.
We do not sell your personal information.
Who we share information with
Your organization. Owners and managers of your business can see the work-related information described above as needed to run the business. Co-workers see only limited roster details (such as your name, photo, job roles, status note and the posted schedule).
Service providers that operate the app on our behalf:
Supabase — database, authentication, file storage and server functions.
Expo — push notification delivery and web hosting.
Anthropic — AI features, as described above.
Resend — delivery of account emails.
Apple — App Store purchases and subscriptions.
Square or Clover — only if your business connects its point-of-sale system.
Legal. We may disclose information if required by law or to protect rights and safety.
Data retention
We keep information for as long as your (or your employer's) account is active and as needed to provide the service, then delete or anonymize it within a reasonable period, unless a longer period is required by law (for example, wage-and-hour records your employer must keep).
Security
Data is encrypted in transit (HTTPS/TLS). Row-level security means each organization can access only its own data, and within a business sensitive details such as pay, contact information and hours are limited to you and your managers. Uploaded documents are private and opened through short-lived links. No system is perfectly secure, but we work to protect your information.
Your choices and rights
Notifications. Choose which notifications you receive in the app, or turn them off in your device settings.
Profile. Update your name, photo, status note, contact details and password in the app.
Delete your account. Go to Profile → Delete my account in the app. This deletes your sign-in and personal account. Work records your employer is legally required to keep (such as hours worked and pay) stay with that business.
Access and correction. Because most work data is controlled by your employer, direct those requests to your organization's owner or manager. For account-level requests, contact us at the email above.
Children's privacy
Shift Agent is intended for use by employees and is not directed to children under 16. We do not knowingly collect information from children under 16.
International users
We operate in the United States and process data there. By using Shift Agent you understand your information may be processed in the U.S.
Changes to this policy
We may update this policy from time to time. We'll revise the "Last updated" date above and, for material changes, provide notice in the app.
Contact
NS Ventures LLC
Email: daniel.dae.lee808@gmail.com