Shift Scheduler Privacy Policy
English · 中文版
Last updated: 2026-11-13
Shift Scheduler is a shift calendar for people who work rotating shifts. Your shifts, notes and settings stay on your own device, and the app needs no account. One feature sends something over the internet: Import from a Photo, and only after you have chosen a picture and confirmed. The details follow.
Where your data is kept
Shifts, rotation patterns, single-day changes, notes and marks, hourly pay and pay settings are stored on your own device. Apart from Import from a Photo, described below, the app does not send any of it to the developer or to anyone else.
Import from a Photo
Import from a Photo reads your month of shifts from a picture of a roster. That means sending a picture over the internet. Before the first one is sent the app says what is sent and asks for your consent; after that a picture is sent only when you tap Next or The whole picture is my own month.
What is sent
- The two rows you cut out of the photo: the row with the dates, and your own row. They are joined into one picture; the rest of the photo is not sent.
- If you choose The whole picture is my own month, the whole photo is sent (reduced in size).
- The year and month the roster is for.
- The names of the shifts you have set up in the app, to help recognise the codes on the roster.
- A randomly generated install identifier, used only to limit how often the feature is used per day.
If what you cut out includes colleagues' names or anything else, that is sent too, so cut out only the dates and your own row.
What is not sent
The shifts and notes already in the app, hourly pay and pay settings, other photos in your library, your name or contact details, your location. The app does not read your location.
Who receives it
The picture goes to the servers of ThinkSpread, the developer of Shift Scheduler, which use a third-party AI service to read it. Before the first picture is sent, the app says what will be sent and asks for your consent.
What ThinkSpread keeps
- No picture and no result. Both are discarded once the reading is done.
- The install identifier and the IP address a request comes from are irreversibly hashed and used only as counters that limit daily use. They are deleted after at most two days. We do not use them to identify you.
- The server log records only whether a request succeeded and how long it took: no pictures, no results, no IP addresses.
The result is shown to you day by day first. Nothing is written to the calendar until you tap Apply.
How to opt out
If you do not use Import from a Photo, nothing is sent. Filling in shifts by hand and everything else in the app work without a connection.
Camera and photos
The app uses the camera or your photos only when you use Import from a Photo. Choosing from the library uses the system photo picker: the app receives only the picture you pick and cannot see the rest of your library. The app does not keep these pictures.
Calendar
Only after you switch calendar sync on does the app write your shifts to the system calendar. It manages only the events it has written itself and does not upload your calendar. Whether those events sync through iCloud is decided in the system Calendar settings.
Notifications and alarms
Shift reminders are notifications scheduled on the device; with Ring as an Alarm switched on, the system alarm is used. Neither goes through a server.
Sharing and backups
The picture made by Share This Month and the file made by Back Up to a File… are handed to the system share sheet, and go to the app or place you choose. They do not pass through our server.
If iCloud Backup or computer backups are on, the app's data is included in the device backup, which is handled by Apple.
Widgets
The Home Screen widgets read the shift data on the device. They do not use the network.
Purchases
Import from a Photo can be used three times for free. After that a one-time purchase, made through Apple's In-App Purchase, is needed to keep using it. Payment and refunds are handled by Apple; the developer never receives your payment details and only learns from Apple whether the purchase exists on this device. Everything else in the app is free.
Analytics and advertising
The app contains no ads and no third-party analytics or tracking code, and it does not track you across apps or websites.
Writing to us
If you email us, we receive your email address and what you write, and use them only to answer you.
Children
Shift Scheduler is a tool for working adults. It is not directed at children and does not collect information from them.
Deleting your data
Deleting a shift in the app deletes it from the device; deleting the app deletes everything it stored on the device. Pictures sent by Import from a Photo are not kept on the server, so there is nothing there to delete.
Changes
If this policy changes, this page and the date above will be updated.