Privacy Policy

ShiftDue · Effective May 16, 2026

TL;DR. ShiftDue does not collect your shifts, your salary, or your tax code. Everything is processed on your device. We collect anonymous crash reports and basic usage analytics only if you opt in. We use Google Play Billing (via RevenueCat) for purchases. That's it.

1. Who we are

ShiftDue ("the app") is published by Mănduc S-V. Emanuel-Sorin Persoană Fizică Autorizată, reachable at support@actinfinity.app.

This Privacy Policy explains what data ShiftDue accesses on your device, what data leaves your device, and your rights regarding that data.

2. What ShiftDue does on your device

ShiftDue helps you estimate your UK shift pay. You enter your work type (NHS, retail, hospitality, or other), your hourly rate or NHS band, and a shift (date, start, end, break). The app calculates a gross and take-home range using publicly available UK 2025/26 tax tables. This processing happens entirely on your device. Your hourly rates, profiles, shifts, pay bands, pension percentages, and tax settings are stored locally on your phone using SQLite (via the Drift library). They never leave your device unless you explicitly export them (CSV export, share image, share text).

ShiftDue uses the following Android permissions:

• INTERNET — required only for optional crash reports and analytics (both off by default) and for validating Pro purchases via Google Play.
• ACCESS_NETWORK_STATE — required by the in-app purchase library to detect whether you are online before retrying.

ShiftDue does not request photos, camera, microphone, location, contacts, calendar, phone/SMS, body sensors, or storage access. There is nothing on your phone for ShiftDue to harvest.

When you uninstall the app, all local data is deleted by Android.

3. What data leaves your device

ShiftDue transmits only the following limited categories of data, all of which are anonymous:

a. Crash reports (Firebase Crashlytics) — off by default

If you turn this on in Settings → Privacy, when the app crashes we send a stack trace, your device model, OS version, free RAM at crash time, and a randomly generated install ID (not linked to you). Crash reports do not contain your shifts, salary, pay band, pension percentage, or any pay-related data.

b. Anonymous usage events (Firebase Analytics) — off by default

If you turn this on in Settings → Privacy, we send a maximum of 12 event names such as shift_calculated, history_opened, or paywall_viewed. Events carry only category-level parameters (e.g. "vertical = NHS"), never values. We do not send your salary, your hourly rate, your shift count, your band, or your take-home estimate. Events are tied to a randomly generated install ID, not to you personally.

c. Purchase validation (RevenueCat + Google Play Billing)

If you buy ShiftDue Pro (£12.99 lifetime), ShiftDue uses RevenueCat to validate your purchase with Google Play. RevenueCat assigns you an anonymous ID (not linked to your name or email) and stores your purchase status. We do not receive your credit card number, billing address, or Google account email. Google Play handles all payment information. See RevenueCat's privacy policy for their own retention rules.

4. What we never do

• Upload your shifts, salary, or any pay-related content
• Sell, rent, or share data with advertisers
• Show you ads
• Build a profile of you for ad targeting
• Track you across other apps or websites
• Connect to HMRC, your employer, your bank, or any payroll system
• Provide financial or tax advice — see the Terms of Use

5. Children's privacy

ShiftDue is intended for adults working paid shifts in the UK. It is not directed to children under 16. We do not knowingly collect any data from anyone under 16. If you believe a child has used ShiftDue with analytics enabled, please email us and we will delete any associated anonymous data.

6. Your rights (UK GDPR)

• Opt out of analytics. Open the app → Settings → Privacy → toggle "Anonymous usage analytics" off. This stops Firebase Analytics events immediately. Crashlytics can be disabled the same way.
• Request deletion. Email support@actinfinity.app from any address. We will delete the anonymous data associated with your install ID within 30 days.
• Refund a purchase. Lifetime purchases are managed by Google Play. Open the Play Store app → Profile → Payments & subscriptions → Budget & history → Order history → Request refund. Refund requests within 48 hours of purchase can be made directly through Google Play.

7. Data retention

• Crash reports: retained 90 days, then deleted by Firebase.
• Analytics events: retained 14 months, then deleted by Firebase.
• RevenueCat purchase records: retained for the lifetime of your purchase plus the period required by Romanian tax law (typically 10 years for PFA accounting).

8. International transfers

Firebase and RevenueCat are US-based services. By using ShiftDue with optional analytics or crash reporting enabled, you consent to the transfer of the anonymous data described in section 3 to the United States. Both services are SOC 2 compliant and use industry-standard encryption.

9. Changes to this policy

If we make material changes to this Privacy Policy, we will update the "Effective date" at the top, post a notice in the app, and require you to acknowledge the changes the next time you open the app.

10. Contact

Questions, deletion requests, or concerns: support@actinfinity.app. We respond within 24 hours.