ShiftWink privacy policy

This policy covers the ShiftWink Android app (com.externum.shiftplanner), its optional cloud services and these support pages. Some cloud and purchase features may be unavailable in your app version.

Records on your device

You can use the local calendar without an account. Shifts, income sources, wages, deductions, actual pay, notes and tracked time are stored on your device. Exporting or sharing a file sends the information you select to the destination you choose. Other apps and recipients handle those copies under their own practices.

Image imports

Selected schedule and pay-stub images are processed on your device by Google's ML Kit text recognition. ML Kit does not send the image or recognized text to Google for recognition. Its SDK collects technical diagnostics and usage information, including app and device information, installation identifiers, performance metrics and feature events. See Google's ML Kit disclosure. Review recognized amounts and dates before saving.

Optional account and cloud backup

Creating an account sends your email and authentication information to Supabase, our account-service provider. Supabase processes password authentication; the app does not include server credentials. Resend delivers account confirmation and password-recovery emails.

A cloud backup is uploaded only when you choose to upload. It can contain the complete local record set, including financial records, private notes and tracked sessions. Supabase stores the uploaded backup and account-linked service records. Backups are private to your account through access controls and HTTPS connections; they are not end-to-end encrypted. A backup is a snapshot, not automatic background synchronization.

Calendar sharing and email reminders

If you create a sharing invitation, an accepted recipient can view a limited upcoming schedule: planned shift times and time zones with generic titles. This shared view excludes financial fields and private notes. You can revoke access, but cannot retrieve copies a recipient already saved.

Optional email reminders use the last uploaded schedule and your verified account email. Resend processes recipient addresses, message content and delivery events. Later edits on your phone do not update that schedule until you upload again.

Purchases

Google Play processes purchases and payment details. When you use purchase verification or restoration, ShiftWink sends the product identifier and purchase token to its backend and Google to verify membership. Account-linked purchase records support verification and restoration. ShiftWink does not receive your full payment-card details. Signing out or deleting an app account does not cancel your Google Play subscription.

Service operation and support

Our service providers process technical connection and security logs, which can include IP addresses and request metadata, to operate and protect the services. Vercel hosts these support pages. Contacting support gives us your email and the information you include. We use it to respond and troubleshoot. ShiftWink does not display advertising or sell your personal records.

Retention and deletion

Local records remain until you delete them, clear app storage or uninstall, subject to any device backups you control. Optional uploaded records remain until replaced or deleted. In-app account deletion removes the account and linked application records from the active service database. Provider backups, security logs, support correspondence and records required for legal or fraud-prevention purposes may remain according to the relevant retention requirements; deletion is not a promise of immediate removal from every backup or log.

You can request account deletion without the app using our account-deletion instructions. Local files, exported copies held by others and Google's transaction records are separate. Google manages cancellation and its payment records.

Your choices and contact

Use local features without signing up, choose whether to upload a backup, disable email reminders, revoke sharing, export your own records or request deletion. Contact hello@externum.dev about privacy, access or deletion. Depending on where you live, you may have additional rights over your information. We may verify identity before acting on a request.

Audience and changes

ShiftWink is a work-planning tool, not a service directed to children under 13. Contact us if you believe a child provided information without appropriate permission. We update this page when our practices change and show the effective date above.