Shiftstracker ("the App") is a workforce shift-management and attendance application provided by Oktay Halil (AHO Media Solutions) ("we", "us", "our"). This policy explains what information the App collects, how it is used, who it is shared with, and the choices and rights you have. By using the App you agree to this policy.
Shiftstracker is a business tool used by organizations to manage their staff. If you are a worker or manager, your account is created by your employer ("the Organization"), who acts as the controller of your employment data. We process that data on the Organization's behalf.
| Category | Examples | Why |
|---|---|---|
| Account & identity | Name, email address, phone number, role (admin/organization/manager/worker) | To create and secure your account and route you to the correct app experience |
| Employment data | Position, hourly wage, shift schedule, attendance records (clock-in/out times, lateness), leave requests and balances, shift-swap requests | Core scheduling, attendance and payroll-estimate features |
| Location (optional) | Precise device location at the moment of clock-in, only when your Organization enables GPS verification | To confirm you are at the workplace when recording attendance. Location is not tracked continuously or in the background. |
| Camera | Camera is used to scan the workplace attendance QR code | To clock in/out. QR scans are processed on-device; no photos or video are stored or transmitted. |
| Device & push | Firebase Cloud Messaging (FCM) push token | To deliver notifications (e.g. new shifts, approvals) |
| Diagnostics | Crash reports and diagnostic data (Firebase Crashlytics) | To detect and fix bugs and crashes |
The App offers an optional AI scheduler that proposes a draft shift plan.
When an Organization uses this feature, we send a limited, anonymized
request to our AI provider (OpenAI). Workers are replaced with neutral
codes (e.g. W1, W2) — names, emails and
phone numbers are never sent. Only role, wage, availability and
scheduling constraints are included so a draft can be generated. The
Organization reviews and edits every draft before it is applied.
We do not sell your personal data, and we do not use it for advertising.
We share data only with service providers that process it on our behalf:
| Provider | Purpose |
|---|---|
| Google Firebase (Authentication, Firestore, Cloud Functions, Cloud Messaging, Crashlytics) | Hosting, database, authentication, push notifications and crash reporting |
| OpenAI | Generating draft schedules from anonymized data only (see section 2) |
We may also disclose information where required by law, or to your own Organization, which controls its workers' employment data.
We retain your data for as long as your account and your Organization's account remain active. When an account or Organization is deleted, the associated personal data is deleted within approximately 30 days, except where we are required to keep certain records longer to comply with the law. You can request earlier deletion at any time (see section 8).
Data is encrypted in transit. Access to records is restricted by server-side security rules and role-based permissions, and sensitive operations (attendance, payroll, approvals) are validated on our servers. No system is perfectly secure, but we work to protect your data using industry-standard measures.
Shiftstracker is a workplace tool and is not directed to children. We do not knowingly collect data from anyone under 16.
Because your employer is the controller of your employment data, please also contact your Organization for requests relating to that data. To reach us directly, use the contact details below.
Data may be processed on servers operated by our providers in regions including the European Union. By using the App you consent to this processing in accordance with this policy.
We may update this policy from time to time. Material changes will be reflected by updating the "Last updated" date at the top of this page.
Oktay Halil — AHO Media Solutions
Email: info@ahomediasolutions.com