Privacy Policy

Last updated: 6 November 2026

This policy explains what the Shiftday Android app ("Shiftday", "the app") collects, why, and the choices you have. Shiftday is published by The First Labs ("we", "us"). Contact: support@thefirstlabs.live.

Summary

Data stored on your phone

Shifts, rotations, calendars, notes, day photos and drawings, alarms, pay settings and app settings are stored in the app's private storage on your device. If you allow it, Shiftday reads and writes your phone calendar (Calendar permission) to copy your shifts there; that data stays on your device and in the calendar account you choose.

Account and cloud sync (optional)

Signing in is optional. When you sign in with Google or with email and password, we use Firebase Authentication (Google) to create your account. We receive your email address, your name and profile picture (Google sign-in only) and a user ID.

When signed in, Cloud Firestore (Google Firebase) stores in your private account space:

Only you can read your private data (enforced by security rules). Data is encrypted in transit (TLS) and at rest by Google Cloud.

Public holidays

To show public holidays, the app sends the chosen country and year to the free Nager.Date API (date.nager.at). No personal data is sent.

App usage statistics

To understand which features are used and to fix problems, the app uses Google Analytics for Firebase. It records which screens are opened, when you finish setup, sign in or buy Pro, and basic device and app information (device model, Android version, app version, country, and an app instance ID). It never receives your shifts, notes, photos, pay or email address. Google keeps this data for up to 14 months. Learn more: firebase.google.com/support/privacy.

Advertising (free version)

The free version shows ads served by Google AdMob. To show and measure ads and to prevent fraud, the Google Mobile Ads SDK may collect your device's advertising ID, IP address, approximate location derived from the IP address, device and app information, and ad interactions. In the EEA, the UK and Switzerland we ask for your consent through Google's consent message before personalised ads are shown; you can change your choice at any time in More → Help → Privacy choices. You can also reset or delete your advertising ID in your phone's settings. Learn how Google uses data: policies.google.com/technologies/partner-sites.

Shiftday Pro removes all ads.

Purchases

Subscriptions and the lifetime purchase are processed by Google Play Billing. We do not receive your payment card details; Google tells the app only whether you own Pro.

What we do not do

Data retention and deletion

Data on your phone is deleted when you uninstall the app or clear its data. Cloud data is kept while your account exists. You can delete your account and all cloud data in the app (More → your account → Delete account) or by email; see Delete your account. Deletion is permanent and completed within 30 days at most (normally immediately).

Children

Shiftday is meant for adults who work shifts. It is not directed to children under 13 (or under 16 in the EEA) and we do not knowingly collect their data.

Your rights

Depending on where you live (for example under the GDPR or CCPA), you may ask to access, correct, export or delete your data, or object to processing. Email support@thefirstlabs.live. The legal bases we rely on are performing our contract with you (app features, sync), consent (personalised ads where required) and legitimate interests (security, fraud prevention).

Service providers

ProviderPurpose
Google Firebase (Authentication, Cloud Firestore)Sign-in, sync, backups, sharing
Google Analytics for FirebaseApp usage statistics
Google AdMobAds in the free version, consent (UMP)
Google Play BillingPurchases
Nager.DatePublic holiday lists

Changes

We will update this page when the app's data practices change and change the date above.

Shiftday is made by The First Labs. Contact: support@thefirstlabs.live