Privacy policy

Last updated: 4 November 2026 · Version 2.5

This policy explains how the Shiftvilo Android app and the shiftvilo.com website handle data. Shiftvilo is a local-first shift planner. Core scheduling, alarms, sleep planning and meal reminders work without an account and without uploading your schedule.

The short version

• No Shiftvilo account is required, and there is no Shiftvilo social or cloud account.
• Schedules, shifts, temporary changes, sleep records, wake confirmations, meal settings and preferences are stored on your device.
• Core functionality works offline. The free app may show small adaptive banner ads in Dashboard, Calendar and Settings.
• Ads never appear on the alarm screen, during snooze or dismiss actions, in wake confirmation, in critical permission dialogs, or on the Premium screen.
• Ads are handled by Google AdMob with Google UMP consent controls. Purchases are handled by Google Play Billing.
• Shiftvilo does not send schedules, alarms, sleep records, meal settings or backups to an advertising or purchase server.
• This website is static. It has no analytics, tracking pixels, advertising cookies or contact database.

Who is responsible

Shiftvilo is responsible for the app and this website. Contact: [email protected].

Data stored in the Android app

The app stores the following locally in private app storage:

• shift definitions, rotation blocks, anchor dates and effective schedules;
• temporary weekly or daily overrides;
• sleep plans, sleep records and wake confirmations you enter;
• alarm, departure, snooze, sleep, nutrition, language and appearance settings;
• imported private audio files you select for alarms;
• a local Premium entitlement record after Google Play confirms a purchase.

This data is not uploaded to a Shiftvilo server. It remains in private app storage until you change it, delete it in the app, clear app storage or uninstall the app. Android backup and device-transfer exclusions are configured so that app-private schedule and sleep data are not included in Android cloud backup or device-to-device transfer. Manufacturer tools, rooted devices or future platform features may behave differently; Shiftvilo does not claim universal prevention.

You can export a JSON backup to a document provider you choose. That document is under your control and may be stored in a cloud service by the provider you select. Importing a backup restores schedule data, but never restores Premium entitlement or Android system permissions.

Advertising and consent

The free app may show only small, adaptive banner advertisements in Dashboard, Calendar and Settings. Shiftvilo does not use interstitial, rewarded, app-open, full-screen or pop-up advertising. Ads do not control scheduling, alarms, sleep calculations or meal calculations.

Google Mobile Ads and Google UMP may process device data such as device or advertising identifiers, IP address, approximate location derived from IP, ad interactions, and diagnostic or fraud-prevention information. Google processes this data under its own terms and privacy policy. Where required by law, including in the EEA, UMP requests consent before ads are requested. Refusing or limiting consent is supported; the free app continues to work.

You can review or change advertising choices in the app under Settings → Privacy and ads → Manage ad consent when UMP reports that privacy options are required. If consent cannot be obtained, if the advertising SDK is unavailable, or if you are offline, no ads are requested. Premium users make no ad requests and see no ad placements.

Google privacy policy: policies.google.com/privacy. Google’s advertising technologies: policies.google.com/technologies/ads.

Premium purchases

Optional Premium removes advertisements only. Every other feature remains free. Premium is available as a monthly auto-renewing subscription and a one-time lifetime purchase. The price shown by Google Play at checkout is authoritative and includes applicable tax. Shiftvilo does not hardcode the consumer price in the purchase screen.

Google Play Billing processes payment. Shiftvilo does not receive card numbers, bank details or Google account passwords. The app stores a local entitlement record after Google Play confirms an active purchase, including the product type, the verification time and, for subscriptions, an expiry time when available. The app rechecks purchases with Google Play when it starts, when it resumes, and when you tap Restore purchases.

If a purchase-verification endpoint is configured in a release build, the app may send only the Google Play purchase token, product identifier, product type and package name to that endpoint. The endpoint verifies the purchase with the Google Play Developer API. It does not receive schedules, shifts, alarms, sleep records, meal settings, backups or any Shiftvilo account identifier. Shiftvilo does not require an account to use the free app. Service-account credentials are never included in the app.

Refunds, cancellations, grace periods, account holds and payment disputes are handled by Google Play. Deleting the app does not cancel a subscription. Use Manage subscription in Google Play to cancel.

Notifications, alarms and device permissions

Reminders and alarms are scheduled locally with Android AlarmManager and WorkManager. Notification content is generated on the device. The app may request notification permission, exact-alarm access, full-screen-intent eligibility and notification-policy (DND) access. Denying a permission disables the related feature but does not block the rest of the app. Automatic DND remains off unless you explicitly enable it.

Retention

• Local app data is retained until you delete it, clear app storage or uninstall the app.
• Exported backups are retained by you and the document provider you choose.
• Purchase verification is transient. A verification endpoint does not need to store purchase tokens in a database; Google Play remains the source of truth for entitlement.
• Web-server security logs may contain an IP address, timestamp, requested path and user agent for a short period to operate and protect the service. They are not used for analytics or advertising.
• Google retains advertising and purchase data according to Google’s policies.

Legal bases in the EEA

Where the GDPR applies: advertising consent is based on your consent; purchase handling is necessary to perform the contract; security, fraud prevention and service operation rely on legitimate interests; and legal obligations apply where relevant. You may withdraw advertising consent at any time without affecting the lawfulness of earlier processing.

Your rights

Subject to applicable law, you may request access, correction, deletion, restriction or portability of personal data, object to processing, and withdraw consent. Most schedule and sleep data is only on your device, so you can exercise deletion directly in the app or by uninstalling it. For other requests, contact [email protected]. You may also complain to the Swedish Authority for Privacy Protection (IMY) or your local supervisory authority.

International processing

Google may process advertising and purchase data outside the EEA using the safeguards described in Google’s privacy policy. Shiftvilo does not operate a separate advertising profile or sell personal data.

Children

Shiftvilo is intended for working adults and is not directed at children. Shiftvilo does not knowingly collect personal data from children.

Security

Schedule and sleep data stay in private app storage protected by Android application sandboxing. Purchase verification uses HTTPS and never embeds service-account credentials in the app. No system can be guaranteed perfectly secure; keep your device lock enabled and install updates.

Changes

This policy is updated when the app’s data practices change. The date and version at the top show the latest revision.

Contact