Privacy Policy

1. Introduction

Shiftlare (“we”, “our”, or “us”) operates the Shiftlare web app and iOS app, which helps you organise liftsharing with colleagues. This Privacy Policy explains how we collect, use, store, and protect your information when you use our services.

2. Information We Collect

We collect information you provide directly and data generated through your use of the app:

• Account information: Email address, nickname (display name), and optionally a profile picture (avatar).
• Authentication data: When you sign in with email and password or with Apple Sign-In, we receive and store the identifiers needed to authenticate you and link your profile.
• Liftshare data: Group memberships, schedules (driving dates), cover requests, and credit balances. This data is shared with other members of your liftshare group.
• Push notification tokens (iOS app): If you enable push notifications, we store your device token so we can send you alerts about cover requests and other liftshare activity.

3. How We Use Your Information

We use your information to:

• Provide and maintain the Shiftlare service
• Authenticate you and manage your account
• Store and display your liftshare schedules, cover requests, and credits
• Share relevant information (e.g. nickname, schedule) with other members of your liftshare group
• Send push notifications about cover requests and liftshare updates (when you opt in)
• Respond to support requests and improve our service

4. Third-Party Services

We use the following third-party services to operate Shiftlare:

• Supabase: Hosts our database, authentication, and backend services. Your data is stored on Supabase infrastructure. Supabase processes data in accordance with its privacy practices.
• Apple: When you use “Sign in with Apple”, Apple provides us with a unique identifier and, if you choose to share it, your email address. Apple’s privacy policy governs that flow.
• Apple Push Notification service (APNs): Used to deliver push notifications to the iOS app. Device tokens are stored and sent via APNs.

5. Data Sharing

We do not sell your personal information. We share data only:

• Within your liftshare group: Other members of your liftshare can see your nickname, schedule, and credit balance to operate the service.
• With service providers: Supabase and Apple, as described above, to run the app.
• When required by law: If we are legally obliged to disclose information.

6. Data Retention

We retain your data for as long as your account is active. When you delete your account, we remove your profile, liftshare memberships, schedules, cover requests, device tokens, and related data. Auth records are also deleted. Some data may remain in backups for a limited period before being overwritten.

7. Your Rights

Depending on where you live, you may have the right to:

• Access the personal data we hold about you
• Correct inaccurate data
• Request deletion of your account and data
• Object to or restrict certain processing

You can delete your account at any time from the Profile section of the app. For other requests, contact us at support@shiftlare.com.

8. Security

We use industry-standard measures to protect your data, including encryption in transit and at rest, and access controls. No system is completely secure; we encourage you to use a strong password and keep your account credentials private.

9. Children

Shiftlare is not intended for users under 13. We do not knowingly collect personal information from children under 13. If you become aware that a child has provided us with personal data, please contact us and we will delete it.

10. International Transfers

Your data may be stored and processed in countries where our service providers operate. We take steps to ensure appropriate safeguards are in place where required by law.

11. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by posting the updated policy on this page and updating the “Last updated” date. Continued use of Shiftlare after changes constitutes acceptance of the updated policy.

12. Contact Us

For questions about this Privacy Policy or your data, contact us at support@shiftlare.com.