Privacy policy
ShiftTally handles your pay records, so this policy is written to be read, not skimmed past. It says exactly what we collect, why, who else touches it, and how to get rid of it.
The short version
- Your documents and pay data are private to your account. Other users cannot see them.
- We do not sell your data, share it with advertisers, or show you ads.
- The app contains no analytics, tracking, or advertising software.
- You can delete your account and everything in it from inside the app, at any time, without asking us.
What we collect, and why
| Data | Why we have it |
|---|---|
| Your email address | To create your account and sign you in. You can sign in with an email and password, or with Google. |
| Photos and PDFs you upload | Clockout slips, tip deposits, and pay stubs. This is the core of the product. We read the numbers off them and keep the original so you have a record. |
| Your pay data | Tips, sales, hours, wages, tip-outs, and pay amounts, either typed by you or extracted from the documents you photographed. This is what the app verifies and reports on. |
| Your settings | Your tip-out rate, your employer name if you enter one, and your preferences. |
| A Google Calendar token web app only, optional |
Only if you choose to connect Google Calendar on the web app, so ShiftTally can read your scheduled shifts. Disconnecting removes it. The mobile app does not use this. |
What we do not collect
No location. No advertising identifier. No device fingerprint. No analytics or crash-reporting telemetry. None of that software exists in the app, so there is nothing to opt out of.
Who else processes your data
We use a small number of service providers to run ShiftTally. They process data on our behalf and are not permitted to use it for their own purposes. We do not share your data with anyone else.
| Provider | What it sees |
|---|---|
| Supabase | Hosts our database, file storage, and authentication. Your documents and pay records live here. |
| Google Cloud Vision | When you import a document, the image is sent to Google's Vision service, which returns the text it reads. This is how ShiftTally gets the numbers off a photo without you typing them. Google returns the text and is not authorized to retain the image or use it for anything else. |
| Google Sign-In optional |
If you sign in with Google, Google handles that sign-in. It does not receive your slips, tips, or pay data. |
| Google Calendar web app only, optional |
If you connect it, we read your calendar events to find scheduled shifts. We do not write to your calendar or send it your pay data. |
How your data is protected
- Private to you. Every row and every file is locked to your account at the database level. Another signed-in user cannot read your data even if they try.
- Encrypted in transit. All traffic between the app and our servers runs over HTTPS.
- Encrypted at rest. Our hosting provider encrypts stored data and stored files.
- Private file storage. Your document images are not public. They are served to you through short-lived signed links.
No system is perfect, and we will not pretend otherwise. If we ever discover a breach affecting your data, we will tell you.
How long we keep it
We keep your data for as long as your account exists, because the whole point is a record that lasts. When you delete your account, we delete it. See Delete your account or data for exactly what goes and how fast.
Your choices
- Delete. Settings has a Delete Account button that erases everything. No support ticket, no waiting.
- Correct. Shifts, documents, and the values you entered can be edited or deleted in the app.
- Get a copy. Email us and we will send you your data. We will not charge you or make it difficult.
If you are in California, note that we do not sell or share personal information as those terms are used in the CCPA, and we never have.
Children
ShiftTally is built for working adults and is not directed to children. We do not knowingly collect data from children under 13. If you believe a child has created an account, email us and we will remove it.
Changes to this policy
If we change how we handle your data, we will update this page and change the date at the top. If the change is significant, we will tell you in the app before it takes effect.
Contact
Email support@getshifttally.com. A person reads it.