Privacy Policy

1. Information we collect

• Account information — your email address, name (if provided) and authentication identifiers, including data returned by Google sign-in when you choose it.
• Content you enter — shifts, rotation patterns, shift notes and logbook entries, sleep and nap records, fatigue and hydration check-ins, caffeine logs, meals, contracts, pay rules, bonuses and expense records.
• Subscription and billing data — your plan, trial and renewal dates, and identifiers from our payment processor. Card numbers are entered directly with the processor and are never stored on our servers.
• Technical data — basic device, browser and log information needed to operate, secure and debug the service.

2. How we use your information

We use your information to provide the features you request: generating rotating schedules, calculating estimated pay and allowances, producing sleep, fatigue and earnings reports, sending the alerts and reminders you enable, answering AI Shift Coach questions, and managing your subscription. We also use it to keep accounts secure, prevent abuse, and improve reliability.

3. AI features

When you use the AI Shift Coach, the relevant context from your schedule, wellness and contract data is sent to our AI provider to generate a response. We do not permit that data to be used to train third-party models. Coach output is informational only.

4. Sharing

We do not sell your personal information. We share data only with service providers that run the product on our behalf — hosting and database infrastructure, authentication, our AI provider, and our payment processor — and only as needed to deliver the service. We may disclose information where required by law.

If you create a partner share link or a calendar subscription link, anyone holding that link can see the limited availability information it exposes. You can revoke these links at any time in the app.

5. Storage, security and retention

Your data is stored in our managed cloud database with row-level access rules so that each account can only read its own records. Access is protected by authentication and encrypted in transit. We keep your data while your account is active and delete it, or irreversibly anonymise it, after account deletion, except where we must retain records for legal, tax or accounting purposes.

6. Your choices and rights

You can view, edit and export your data in the app, and you can request access, correction, export or deletion of your personal information by contacting us at support@shiftlife.ai. Depending on where you live, you may have additional rights under laws such as the GDPR or CCPA; we honour verified requests under those laws.

7. GDPR and CCPA/CPRA data rights

If you are in the European Economic Area, the United Kingdom or Switzerland, you have rights under the GDPR to access, correct, delete, restrict or object to the processing of your personal data, to receive a portable copy, and to withdraw consent at any time. Our legal bases are performance of our contract with you (running your account and subscription), your consent (wellness tracking, marketing email, optional integrations), and our legitimate interests (security, fraud prevention, product improvement).

If you are a California resident, the CCPA/CPRA gives you the right to know what personal information we collect and how it is used and disclosed, the right to delete it, the right to correct inaccurate information, the right to limit the use of sensitive personal information, and the right to opt out of “sale” or “sharing” of personal information. We do not sell your personal information and we do not share it for cross-context behavioural advertising. We will never discriminate against you for exercising these rights.

How to make a request

• Access or portability: export your shifts, pay, wellness logs and reports from Settings → Data & privacy in the app, or email privacy@shiftlife.ai with the subject line “Data access request”.
• Correction: edit your profile, pay profile and shift records directly in the app, or email us the correction if you cannot change it yourself.
• Deletion: use Settings → Data & privacy → Delete account, or email privacy@shiftlife.ai with the subject line “Delete my account”. Deletion removes your schedule, wellness and contract data; we retain limited billing and tax records where the law requires it.
• Opt out: turn off marketing email and optional analytics in Settings → Notifications, use the unsubscribe link in any email, or email us with the subject line “Opt out”. Because we do not sell or share personal information, no separate “Do Not Sell or Share My Personal Information” process is required, but we will honour Global Privacy Control signals we receive.
• Limit sensitive information: you can stop wellness tracking (sleep, fatigue, caffeine, hydration) at any time in Settings and delete previously logged entries.

We verify requests using the email address on your account and may ask for additional confirmation before acting on sensitive requests. We respond within 30 days (GDPR) or 45 days (CCPA/CPRA), and may extend once where permitted, telling you why. An authorised agent may submit a request on your behalf with written permission that we can verify.

If you believe we have not resolved your request, you may appeal by replying to our response with the subject line “Privacy appeal”, and you also have the right to complain to your local supervisory authority (EEA/UK) or the California Privacy Protection Agency.

8. Children

NorthAura ShiftFlow AI is intended for working adults and is not directed to children under 16.

9. Health and financial information

Sleep, fatigue, caffeine, hydration and meal entries are lifestyle records, not clinical medical records, and NorthAura ShiftFlow AI is not a medical device. Pay, per diem and tax figures are estimates based on the rules you enter, not financial or tax advice.

10. Changes and contact

We will update this page when our practices change and revise the date above. Questions about privacy can be sent to support@shiftlife.ai.