Ömer Elmas
TR
Shift4You

Privacy Policy

Privacy policy for the Shift4You application.

Last updated

1. Introduction

This policy explains which data the Shift4You app (“App”), developed by Ömer Elmas (“Developer”), processes, why it processes it, and the choices you have.

In short:

  • There is no account. The App never asks for your name, email or phone number.
  • Your shift calendar, notes, leave and pay details stay on your device and, if you choose, in your own iCloud account. They are never sent to the Developer’s servers.
  • The App is ad-supported. It uses Google AdMob for adverts, Google Analytics for Firebase for usage statistics and Firebase Crashlytics for crash reports.
  • Location, camera, calendar, notification and alarm permissions are requested only when you use the related feature.

2. Data Stored on Your Device

The following data is stored on your device:

  • your shift pattern, start date and team,
  • day edits, notes and annual leave,
  • overtime and work records, pay and payslip settings,
  • theme and app settings.

Home Screen and Lock Screen widgets and the Live Activity read this data from the App’s shared container on your device. None of it is sent to the Developer. Deleting the App deletes the on-device copy.

3. iCloud Sync (Optional)

When iCloud sync is on, the data in section 2 is stored through Apple CloudKit in the private area of your own iCloud account and synced between your devices. The Developer cannot access it.

If a backup is found in iCloud when you reinstall the App, you are asked before anything is restored. You can turn sync off in the App’s Settings and manage the iCloud data from your device’s iCloud settings. This service is subject to Apple’s privacy policy: apple.com/legal/privacy

4. Advertising and Tracking

4.1 Google AdMob

The App shows banner adverts through Google AdMob. AdMob may collect:

  • device and app information (model, operating system version, language),
  • your IP address and an approximate location derived from it (country or city level),
  • ad impressions and clicks,
  • performance and diagnostic information (for example ad load times and errors),
  • only if you allow tracking: your device’s Advertising Identifier (IDFA).

AdMob uses this data to serve and measure adverts, to prevent fraud and, if you allow it, to personalise adverts. Google may link some of this data to device identifiers, which is why the App Store privacy label lists it under “Data Linked to You”. Ad content is limited to the “Teen” rating.

For details, see Google’s privacy policy and its explanation of how Google uses data from partners’ apps: policies.google.com/privacy, policies.google.com/technologies/partner-sites

4.2 App Tracking Transparency (ATT)

Before accessing the Advertising Identifier, the App asks once for iOS tracking permission (App Tracking Transparency).

  • If you choose “Ask App Not to Track”, the Advertising Identifier is not shared. Advertising and analytics data is not linked to Google’s ad personalisation or ad measurement services. Adverts are still shown.
  • You can change your choice at any time in iOS Settings → Privacy & Security → Tracking.

4.3 European Economic Area, United Kingdom and Switzerland

In these regions, a GDPR consent form from Google’s User Messaging Platform (UMP) is shown before the tracking prompt. You can change or withdraw your choice at any time from Settings → Ad Preferences in the App.

If you have not allowed tracking, ad requests in these regions are sent as non-personalised.

5. Usage Statistics and Crash Reports

5.1 Google Analytics for Firebase

The App uses Google Analytics for Firebase to understand and improve how it is used. It collects:

  • a random app instance identifier (it changes when you reinstall),
  • device model, operating system and app version,
  • language and an approximate region derived from your IP address,
  • session information,
  • in-app interactions (for example completing setup, or previewing or applying a theme).

Your name, email, shift contents, notes and pay details are never sent. This data is linked to a random app instance identifier. The Developer sees it in the Firebase console only in aggregate and does not know who you are.

  • In the European Economic Area, the United Kingdom and Switzerland, measurement follows your choice in the consent form. It stays off until you choose.
  • In other regions, in-app measurement is on by default.
  • Advertising-related signals (ad user data and ad personalisation) are turned on only if you allow tracking. If you do, this data may be linked to Google’s ad measurement services.

5.2 Firebase Crashlytics

When the App crashes, Firebase Crashlytics sends a crash report. For some errors that do not crash the App (for example a failed save, backup restore or reminder scheduling), it sends a similar error report. Reports contain:

  • technical details of the error,
  • device model, operating system and app version,
  • memory and storage state at the time of the crash,
  • a timestamp and a random installation identifier,
  • basic app state: whether the App was started in the background, tracking permission status, theme, pattern length, and whether reminders, the Live Activity and iCloud sync are on,
  • a short list of recent app events (for example opening the App or moving it to the background).

Your notes, shift contents and pay details are never included. These reports are used only to find and fix bugs. They are not linked to your identity and are not used for tracking. Firebase also uses a random installation identifier and technical diagnostic information to operate the service.

Firebase’s data processing and retention information: firebase.google.com/support/privacy

6. Location and Weather (Optional)

Location permission is requested only when you ask for it in the weather section of Settings.

  • If you allow it: your location is read approximately (to the kilometre). The forecast for the start of your shift is requested from Apple WeatherKit, and the place name is looked up with Apple’s location services.
  • You can pick a city instead: what you type while searching is sent to Apple Maps (MapKit) for suggestions. The chosen city’s coordinates are stored on your device.
  • Holiday region suggestion: your location or chosen city may also be used to suggest your state or province for public holidays (see section 7).

Your location is never sent to the Developer. The App does not pass your location to advertising or analytics services. Weather data is provided by Apple Weather.

7. Public Holidays

Public holiday data is built into the App, so holidays appear even without an internet connection. To receive corrections and newly announced days (for example administrative leave), the App checks the Developer’s own server (data.omerelmas.com.tr) at most once every 12 hours while it is in use, and right after you change the country or region.

  • These requests contain no personal data. The App downloads a signed list of the available data and, if it has changed, only your selected country’s holiday file, so the server can see which country’s file was downloaded.
  • As with any internet request, the server sees your device’s IP address and may keep standard access logs (IP address, time, requested file). These logs are not used to identify you and are not linked to other data.
  • Downloaded files are checked against a digital signature before they are used.

State or province filtering happens on your device. If you have allowed location for weather or picked a city, the App may use it on your device, together with Apple’s location services, to suggest your state or province; this location is not sent to the Developer. You can turn holidays off in Settings.

8. Camera, QR Codes and Pattern Sharing

8.1 Camera and QR Scanning

The camera is used only on the Scan QR screen, to read the QR code of a pattern shared by a coworker. The image is processed instantly on your device. No photo or video is recorded, stored or sent.

Instead of the camera, you can pick an image with the system photo picker. Only the image you pick is read, on your device, and no photo library permission is needed. A link on the clipboard is read only when you tap Paste.

8.2 Share My Pattern

Share My Pattern creates a QR code and a link. They contain:

  • the pattern’s name and cycle,
  • shift types (name, colour, icon, times and break),
  • the optional sections you select: start alignment and team, team names, overtime rules, holiday country and region.

You choose which optional sections to include. Your pay is never included. Your notes, leave and day edits are not included either.

The data travels in the part of the link after “#” and is never uploaded to a server.

  • If the link is opened in a browser, the page at omerelmas.com.tr/shift4you/p/ decodes it inside the browser.
  • Browsers do not send the part after “#” to the server. The page has no analytics and no cookies.
  • Like any website, the server may keep standard access logs (IP address, browser information, time). The part after “#” is not part of these logs.

Anyone who has the link or QR code can see its contents, so share it only with people you choose. A pattern sent to you is added to your calendar only after you have reviewed and confirmed it.

9. Calendar, Notifications, Shift Alarm and Siri

  • Calendar export (optional): with your permission, the App creates a separate calendar named “Shift4You” on your device and adds your shifts to it, with your day notes if you choose. The App reads, updates and deletes only its own events in that calendar. If the calendar is created in an account on your device (such as iCloud), that account’s provider syncs it.
  • Notifications: shift reminders are local notifications scheduled on your device. No notification server is used.
  • Shift Alarm (optional): set with Apple AlarmKit on your device, with your permission.
  • Siri and Shortcuts: your voice requests are processed by Apple under Apple’s privacy policy. The App answers from data on your device.

10. Third Parties and International Transfers

The App uses the following services:

  • Google AdMob and User Messaging Platform: adverts and consent management.
  • Google Analytics for Firebase: usage statistics.
  • Firebase Crashlytics: crash reports.
  • Apple: iCloud and CloudKit, WeatherKit, MapKit, Siri, AlarmKit.
  • Shift4You holiday data (data.omerelmas.com.tr): the Developer’s own server for public holiday updates; no personal data is sent (see section 7).

Google and Apple may process data on servers outside Türkiye and the European Economic Area (for example in the United States), under their own safeguards. The Developer does not share data with any other third party and does not sell data.

11. Retention and Your Choices

Retention

  • Data on your device: until you delete it or uninstall the App.
  • Data in iCloud: until you delete it.
  • Advertising, analytics and crash data: for the periods Google sets for each service. The Developer keeps no separate copy.

Your Choices

  • Tracking: iOS Settings → Privacy & Security → Tracking.
  • Ad consent (EEA, UK, Switzerland): App → Settings → Ad Preferences.
  • Location, camera, calendar, notification and alarm permissions: iOS Settings → Shift4You.
  • iCloud sync: App → Settings.
  • Deleting everything: delete the App and remove its data from your device’s iCloud settings.

12. KVKK (Türkiye)

Under Turkish Personal Data Protection Law No. 6698 (“KVKK”):

Data Controller

Ömer Elmas — hello@omerelmas.com.tr

Data is processed for the purposes described above, automatically, through the software development kits in the App. The legal grounds are:

  • providing the service,
  • the Developer’s legitimate interest (fixing bugs, improving the App),
  • your explicit consent where required (tracking permission and the consent form).

Data is transferred to the service providers listed in section 10.

Your Rights

Under Article 11 of the KVKK, you have the right to:

  • learn whether your personal data is processed,
  • request information if it has been,
  • learn the purpose of processing and whether data is used accordingly,
  • know the third parties, in Türkiye or abroad, to whom data is transferred,
  • request correction of incomplete or inaccurate data,
  • request deletion or destruction under the conditions of Article 7,
  • request that corrections and deletions be notified to those third parties,
  • object to an outcome against you that results solely from automated analysis,
  • claim compensation for damage caused by unlawful processing.

You can send requests to hello@omerelmas.com.tr.

The App collects no identity information such as your name, email or phone number. Advertising and analytics data is linked only to random device and app identifiers, so we may be unable to single out this data as yours. You can also direct requests about this data to Google.

13. GDPR

For users in the European Economic Area, the United Kingdom and Switzerland:

  • Performance of a contract: the App’s core functions (calendar, holiday data, weather when you request it).
  • Legitimate interest: crash and error reports.
  • Consent: ad personalisation and usage statistics (given through the consent form) and tracking (given through the tracking prompt). You can withdraw consent at any time.

Your Rights

  • access,
  • rectification,
  • erasure (“right to be forgotten”),
  • restriction of processing,
  • data portability,
  • objection,
  • lodging a complaint with the data protection authority in your country.

14. Data Security

Your shift data is stored on your device or in your own iCloud account. The Developer uses no server-side data store. On-device data is protected by Apple’s device encryption. Connections are encrypted (HTTPS).

15. Children’s Privacy

Shift4You is not directed at children under 13. We do not knowingly collect personal data from children under 13. If you are a parent or guardian and believe your child has provided data, please contact us.

16. Changes to This Policy

This policy is updated as the App changes. Changes are published on this page with the date of the update.

17. Contact

For privacy questions: