ShiftiFy Manager (desktop) and ShiftiFy GO (mobile) apps · Last updated: 1 November 2026 · Versione italiana
ShiftiFy is a tool for planning and viewing work shifts, made up of ShiftiFy Manager (a desktop app a scheduler uses to organise and publish shifts) and ShiftiFy GO (a mobile app each person uses to view their own shifts and send requests). The tool is general-purpose and not tied to any industry. The Common section applies to both apps; it is followed by two sections describing what is specific to each.
Two distinct roles are involved in processing personal data:
Data uploaded to the cloud is stored on Supabase infrastructure, with servers located in the European Union (Ireland). ShiftiFy Manager is also local-first: most data stays on the scheduler's computer and never leaves the device (details in the Manager section).
We apply appropriate technical measures: encrypted transmission (HTTPS), authentication and row-level access rules (Row Level Security) which, in the app for staff, restrict each person to their own data only. Access to the apps can additionally be protected, at the user's choice, with Face ID or fingerprint.
Data is not used for advertising purposes nor transferred to third parties for such purposes. ShiftiFy does not use any third-party analytics, tracking or profiling tools. Any technical crash or malfunction reports are handled anonymously by Apple through its distribution tools.
Under Regulation (EU) 2016/679 (GDPR), you have the right of access, rectification, erasure, restriction, objection and data portability. To exercise them:
You also have the right to lodge a complaint with the competent supervisory authority; in Italy this is the Garante per la protezione dei dati personali (Italian Data Protection Authority).
We may update this policy, showing the date of the latest revision at the top of the page; significant changes will be clearly highlighted. For any privacy-related request: support@shiftifygo.com.
In short: the Software is local-first — most data stays on your computer and never leaves the device. Staff personal data is uploaded to the cloud only through explicit actions (creating a GO account or publishing shifts); until you take one of them, it stays only on your computer.
The Software does not require you to enter real identifying data. The staff member “name” field is free text: it only needs to be unique within the group, so you can use a nickname or an internal code instead of the real name. You decide how much and which personal data to enter; if you choose to enter real data, you are responsible for it as controller.
| Data | When it is uploaded |
|---|---|
| Workgroup name | At initial setup. It is a label chosen by you. |
| Staff member details (initials, name, email, group, access status) | When you create that staff member's GO account, or when you publish shifts. |
| Staff member login credentials (email) | When you create the staff member's GO account. |
| Services, absence types, shifts and absences for the period | When you publish shifts. |
No staff personal data is uploaded until you take one of these actions. The legal basis for processing is determined by you as controller (typically performance of the employment relationship, a contractual obligation or a legitimate organisational interest).
With ShiftiFy GO each staff member signs in with their own account to view the shifts and absences that concern them, send requests (shift swaps, absences) to the scheduler and add optional personal notes. Thanks to row-level access rules, each staff member sees only their own data.
| Category | ShiftiFy's role | Legal basis (GDPR) |
|---|---|---|
| Account data: name, email, credentials | Controller | Art. 6(1)(b) — performance of the service |
| Shifts, shift swaps, holidays, leave and absences | Processor (on behalf of whoever enters them) | Determined by the controller of the content |
| Personal notes entered voluntarily | Processor | Voluntary entry by the user |
| Technical data: access logs, device identifiers | Controller | Art. 6(1)(f) — legitimate interest (security) |
ShiftiFy GO shows whether a person is absent and the generic category defined by whoever fills in the schedule (e.g. absence, holiday, leave, sick leave), but does not record the clinical cause, diagnosis or any other health details. In line with the principle of data minimisation, the tool is designed not to collect special categories of data under Art. 9; should a controller configure categories that reveal health data, the related legal basis remains their responsibility.
Users can delete their account directly from ShiftiFy GO: deletion removes the login credentials; shifts and history, whose controller is whoever entered them, remain in the schedule but are no longer linked to the login identity.