Shift Vault privacy policy
Last updated: 1 October 2026
Shift Vault is a free shift-calendar app. Calendars work locally on the device. Internal testers can optionally create an account and join a private family calendar to synchronise selected shifts through Shift Vault's authenticated service.
Information you provide
- Account information: email address, display name and a securely hashed password when password sign-in is used. If you choose Google sign-in, we verify Google's identity token and store your Google account identifier, email address and display name to identify your Shift Vault account. We do not receive your Google password.
- Calendar information: shift dates, names, start and end times, colours, notes, patterns and imported ICS content.
- Sharing information: family-calendar name, membership, role, invite email when one is supplied, and expiring invite records.
- App preferences and profile details that you choose to store. Most preferences remain on the device.
How information is used
We use this information to provide local calendar features, authenticate accounts, synchronise permitted calendar records, process family invitations, recover from temporary offline use, prevent duplicate changes and protect the service. Private calendars are visible only to authenticated members of that calendar. Members can edit their own shifts by default; the calendar owner manages membership.
Storage, transfers and security
Local data is held in Android's app-private storage. Optional account, membership and synchronised calendar data is sent over HTTPS to Shift Vault's application API and stored in its server-side database. Phones do not connect directly to the database and database credentials are never included in the app. Session and invite secrets are stored in hashed form where applicable. No Internet service can be guaranteed completely secure.
Invitations and sharing
An owner can use Android's share sheet to send a scoped join link. Invite links expire, can be revoked and do not replace sign-in. If an invite is restricted to an email address, only the signed-in account using that address can accept it. The destination chosen in Android's share sheet applies its own privacy terms.
Other network access
The app may access non-personal public-holiday information and Google Play platform services. Shift Vault does not sell personal information or use calendar data for advertising.
Optional Google sign-in uses Google's authentication services; Google's privacy terms apply to that service. Shift Vault's hosted application API and database use Fasthosts/IONOS hosting infrastructure. Network requests necessarily disclose a connection IP address to the receiving service. Hosting operators may process technical connection and security logs to operate and protect their services. We do not claim a verified product-specific log-retention period or infer precise location from that address in the Shift Vault application. See Fasthosts' privacy notice and its applicable data-processing terms for provider information.
Optional shift reminders use Android notification permissions and device scheduling. Calendar access, notification delivery and family sharing remain subject to the permissions and membership you choose.
Retention and deletion
Local records remain until you delete them, clear app storage or uninstall the app. Synchronised calendar records remain while the account or family calendar is active, subject to membership and backup retention needed for service integrity. Revoked or expired invite links stop working; associated security records may be retained for a limited audit period. You can use the account deletion request page to request deletion of server-held account data without reinstalling the app. Removing the app alone does not delete server-held account data.
Your choices
Account and family synchronisation are optional. You can keep using local calendar features without sharing a calendar. You control which calendar is joined and which destination receives an exported ICS file or invite link.
Children
Shift Vault is a general calendar utility and is not directed to children.
Changes
This policy will be updated before a release materially changes how information is processed.
Contact
For privacy questions, access or deletion requests, email admin@shiftvault.uk.
Website beta applications and feedback
When you apply for the free Android beta, we record your name or nickname, Google Play email, confirmation that you have an Android phone, and your consent choices with their date and policy version. Your email is held with the existing ShiftVault interest list; applying or being on that list does not automatically enrol you in Google Play testing.
We use these details to confirm your email, review your application, send approved testing instructions and manage your participation. If approved, your Google Play email may be used for Google's closed-test tester list. Google controls its own account and testing services. Instructions and optional testing reminders have separate consent choices; we do not enrol interest-list subscribers as testers without their beta consent.
We also record your optional recruitment-source selection as self-reported information to understand where applications come from; it does not prove testing eligibility. Optional reminder consent for new applications permits up to five brief reminders at the advertised testing stages. Earlier consent retains its original limit. Private feedback includes the comments you send, any optional device model or Android version, and your reports about installation or test participation. We keep consent, participation evidence and message records to administer the test and avoid repeated messages. A registration, email delivery or installation report does not itself prove continuous Google Play opt-in.
To limit automated signup abuse, we use temporary protected rate-limit records derived from your connection address. The raw address is not kept in these records. These records expire within two hours and are cleared when later signup requests are processed; hosting connection logs are separate.
Tester emails, private feedback and the owner dashboard are not published on the public website. The website uses ShiftVault's existing hosting and email services; the hosting-provider information above also applies to this website. Your mailbox provider and Google process information under their own privacy terms. Your private confirmation, feedback and email-preference links should not be shared.
Use your email-preference link to stop beta instructions and reminders. This does not opt you out of Google Play or automatically erase your application, existing interest-list entry, feedback or test records. Website beta records and private delivery records currently have no automatic deletion schedule. For access, correction, withdrawal or deletion requests, email admin@shiftvault.uk from your registered address; requests are handled manually.
Please do not submit passwords, activation codes, sensitive rota details or other people's personal information in feedback.