Privacy Policy — Shiflow

Last updated: May 2026

Shiflow (“the App”) is used by restaurant staff and managers to view schedules, submit requests, exchange messages, and manage timecards.

Information we collect

• Account information: name and credentials you use to sign in (authenticated through our server and Supabase).
• Work-related data: schedule assignments, time-off and swap requests, messages, and time clock punches stored in our database.
• Device data: technical data needed to run the app (network requests to our servers).

We do not sell your personal information.

How we use information

• Operate scheduling, messaging, and timecard features
• Authenticate users and enforce manager vs employee access
• Improve reliability and support

Where data is stored

Data is stored in Supabase and processed by our application servers. Data may be stored in the United States or other regions where our providers operate.

Sharing

We share data only with service providers required to run the app, when required by law, or with your employer’s authorized administrators.

Security

We use HTTPS and access controls. No method of transmission or storage is 100% secure.

Your choices

You can permanently delete your Shiflow account in the app or on the website: open Account, choose Delete account, and type DELETE to confirm. Contact your employer for roster or punch corrections that belong to the business.

Children

The App is not intended for children under 13.

Changes

We may update this policy. Continued use after changes means you accept the updated policy.

Contact

For privacy or support questions, email support@shiflow.app or visit Support.