Your records, under your control.

The iPhone app: local records

The app saves the workplace and pay rules you enter, shifts, paystub drafts and confirmed fields, comparison results and their input snapshots, and payroll inquiry drafts in its local ledger on your iPhone. The app uses these records to calculate estimated gross earnings, compare a confirmed paycheck, and prepare an inquiry you can review. It does not automatically send your records to us or to your employer. You can inspect, edit, export, back up, restore, or delete ledger records using the app’s controls.

The app protects its local ledger with iOS file protection to limit access while your device is locked. Your device settings and operating system affect access to local data. Apple device backups may also contain app data, depending on your settings.

The iPhone app: imports and temporary files

When you select a photo or PDF, ShyftPay reads it on your device and uses Apple’s on-device document and text-recognition tools to suggest fields. You must review and confirm the suggestions. The original photo or PDF and full extracted text are not stored in the saved ledger; the structured fields you choose to save remain there until you delete them. A selected source may still remain in Photos, Files, or another place you obtained it.

When you create a PDF or CSV inquiry export, the app writes temporary files for the iOS share sheet. It removes export files older than seven days when you create a later export, and attempts to remove its export directory when you use Delete all ledger data. The app warns you if that cleanup cannot finish. A file you save or send through Files, Mail, cloud storage, or another destination is controlled by that destination and is not removed by deleting the ledger.

The iPhone app: backups, deletion, and the free-comparison marker

Portable backups contain the full ledger and are encrypted with a password you choose. ShyftPay does not receive that password or backup and cannot recover a forgotten password. Restoring a backup replaces the local ledger only after you preview and confirm it. Keep backup files and passwords safe.

A separate, device-only Keychain marker records only whether your one free new-paycheck comparison has been used. It contains no pay amount, paystub, employer, account, or other financial record and is not sent to us. It remains when you delete the ledger or restore a backup, so those actions do not reset the one-time allowance. Deleting the ledger also does not remove copies you exported, Apple device backups, or an Apple subscription. Manage those separately.

The iPhone app: purchases and Apple services

Apple processes App Store purchases, renewals, cancellations, and refunds. ShyftPay reads verified StoreKit transaction and entitlement information on your device to enable Plus and restore purchases; we do not receive payment card details. Apple may provide crash reports, TestFlight feedback, and purchase information according to your Apple settings and Apple’s policies. See Apple’s privacy policy for its practices.

The website and support email

This static website has no account, contact form, advertising, or third-party analytics script. We do not intentionally set analytics or advertising cookies. Our web host, Hostinger, may process technical request information such as IP address, requested page, date and time, browser or device information, and error or security logs to serve and protect the site. Hostinger controls its own infrastructure and retention; see Hostinger’s privacy policy.

If you email support, we receive your email address and whatever you choose to include. We use it to answer your request and address related issues. Please do not send unredacted paystubs, patient information, bank details, or other sensitive records unless needed after we agree on a safe way to receive them. Email and host records are kept as needed for support, security, and applicable legal obligations. Retention depends on the request and the applicable provider’s practices. Copies held by your email provider or ours are governed by those services.

Across these services: sharing, security, and retention

We do not sell personal information or share it for targeted advertising. Hosting and email providers process the website requests and support messages needed to provide those services. We may disclose information we actually hold when required by law or reasonably necessary to protect the service, address fraud or security incidents, or exercise legal rights. This does not give us access to your on-device ledger.

Local ledger records remain until you change or delete them or remove the app; copies in device backups and other destinations can remain longer. The separate free-use marker may remain in the device Keychain after app removal. Support correspondence and website logs can be processed in countries where we or our providers operate. We use the protections described above, but no storage or transmission method can be guaranteed completely secure.

Your choices and requests

You can enter a paystub manually instead of importing it, decline optional sharing, and use Settings → Your data to back up, restore, or delete the local ledger. We cannot remotely read or delete records kept only on your iPhone. For questions or requests about support messages or website data, email hello@shyftpay.app. We will respond to applicable access, correction, or deletion requests after verifying what records we hold and any legal limits.

Children and policy updates

ShyftPay is intended for people reviewing their own work and pay and is not directed to children. If you believe a child sent us personal information through support, contact us. We may update this policy as the app or website changes; the date at the top shows the current version. Material changes will be reflected here before or when they take effect.

See the ShyftPay service terms, app license guide, and support page for more information.