Shifty

Privacy

Last updated 23 October 2026

The short version

Shifty is a small side project, not a company. Here's what it keeps and why, without the legal fog.

If you don't sign in

Your shifts, workplaces and settings live only on your device (in the browser, for the web version). Nothing leaves it, apart from reminder times if you use reminders in the web version (see below).

If you sign in

A copy of a few things is kept so your shifts are safe and appear wherever you sign in:

This is used to make Shifty work for you, and nothing else. It isn't sold, used for ads or used to build a profile of you.

Why it's kept, and for how long

Your information is used to provide the service you signed up for: backing up your shifts and keeping them in step across your devices. It's kept for as long as you have an account. When you delete your account, your data is removed, though copies may stay in backups for a short while before they're cleared.

An account that hasn't been used for a year is deleted, with an email 30 days beforehand. Opening Shifty while signed in is enough to keep it.

Accounts are by invitation for now. An invited email address is kept so that person can sign up, and removed if the invitation is withdrawn or their account is deleted.

Who else handles it

Like most apps, Shifty relies on a few trusted services to store data, send sign-in emails and run this website. Information is only shared where it's needed to run Shifty, keep it safe or follow the law. Email services may note whether a message was delivered or opened.

Some of these services may handle data outside the UK or the EU. Where that happens, it's protected in line with data protection law.

Reminders

In the Android app, shift reminders are set up on your device itself, so nothing about them leaves it.

Web browsers can't set reminders on their own, so on iPhone and in the browser, your device sends Shifty the times its reminders are due and their short text (such as "Your shift starts in 2 hours, 09:00 – 17:00"), with no name, account or workplace. Each reminder is deleted once it's sent, and turning reminders off removes them all.

Shifts from email

If you turn on your Shifty email address, rota emails you forward to it are read automatically to find your shifts, which are then added for you to check. The email itself isn't kept: only the shifts found, and a short note of who it came from and how many shifts it contained, which is cleared after 90 days. Only emails you choose to forward are ever seen. Turning the address off makes later emails bounce.

If you allow notifications, Shifty keeps a notification address for your device so it can tell you when new shifts arrive. It's removed when you sign out.

Sharing your shifts

If you choose to share your shifts with family or a partner, Shifty keeps the email addresses you add and sends them your confirmed shifts for the coming days (times, workplace and role, never your notes). A calendar link works the same way while you keep it switched on. Each email has a link to stop them, and that choice is respected. You can remove people, or turn sharing off, at any time.

No ads, no tracking

Shifty has no ads, and no tracking or analytics are used in the app or on this website.

Deleting your data

Your rights

You can ask to see the data Shifty holds about you, to correct it, to get a copy of it, or to have it deleted. You can also object to how it's used. Just email support@shiftyapp.uk.

If you're unhappy with how your data is handled, you can also contact your data protection authority. In the UK, that's the Information Commissioner's Office.

Age

Shifty is meant for people aged 16 and over.

If this changes

Shifty is still growing. If something changes what it keeps, this page will be updated, along with the date at the top.

Who to contact

Shifty is run independently. For anything about your data, or any other question, email support@shiftyapp.uk.