Privacy Policy

This Privacy Policy explains how ShiftMy collects, uses, shares, and protects information when you use shiftmy.me and the ShiftMy web app.

Information We Collect

We collect information that is needed to provide the service, protect the app, manage accounts, and support paid access when checkout is available.

• Account information, such as your email address and password authentication data.
• Session and visitor identifiers, including cookies used to keep you signed in and manage free usage limits.
• Service activity, such as selected coordinates, reset requests, recent location-change activity, timestamps, and related technical status.
• Payment and subscription records, such as selected pass, payment status, amount, provider reference, and access expiration time.
• Technical and security data, such as IP address, browser type, device information, request logs, error logs, and abuse-prevention signals.
• Analytics data, such as pages viewed, referrer, browser and device type, screen size, language, approximate region, and high-level app events.
• Advertising data, such as ad impressions, interactions, device identifiers, cookie identifiers, and approximate location.

How We Use Information

• Provide, operate, maintain, and improve ShiftMy.
• Create and manage accounts, sessions, free usage limits, active passes, and access expiration.
• Process checkout, confirm payment status, and provide support for account or access issues.
• Understand which parts of the app are used, find broken flows, and improve setup, search, account access, checkout, set-location, and reset features.
• Display, personalize where permitted, measure, and protect advertising.
• Protect the service from abuse, automated signups, fraud, and excessive traffic.
• Respond to support requests and communicate about service, security, or account issues.
• Comply with legal obligations, enforce our terms, and protect the rights and safety of users and the service.

Payments

When paid passes are available, checkout is handled by a third-party payment provider. The payment provider may collect and process payment details, billing details, device data, fraud-prevention signals, and transaction information according to its own privacy policy and terms.

ShiftMy stores payment records needed to verify access, such as pass type, amount, payment status, provider reference, and expiration time. ShiftMy does not store full card numbers, bank account numbers, or other sensitive payment credentials on its servers.

Cookies and Similar Technologies

ShiftMy and its advertising providers use cookies and similar local storage technologies to keep users signed in, remember app state, enforce free usage limits, protect the service, understand app usage, and deliver and measure advertising. You can control cookies through your browser settings, but some features may not work correctly if cookies are disabled.

Analytics

ShiftMy uses self-hosted Umami analytics on shiftmy.me. Analytics helps us count visits, understand general app usage, and see whether important flows such as setup, search, account access, checkout, set location, and reset are working.

Analytics events do not include your account password, exact selected coordinates, card numbers, bank details, or full payment identifiers.

Advertising

ShiftMy uses Google AdSense to display and measure advertising. Google and its advertising partners may use cookies, local storage, device identifiers, IP addresses, approximate location, and ad interaction data to serve, personalize where permitted, measure, and protect ads.

For information about how Google uses data when you use sites that use its services, see How Google uses information from sites or apps that use its services. You can manage Google advertising preferences through My Ad Center.

ShiftMy uses the TikTok Pixel to measure visits, account creation, checkout activity, and confirmed purchases. When you are signed in, ShiftMy may send TikTok a SHA-256 hash of your normalized email address for conversion matching. ShiftMy does not send TikTok your password, raw email address, phone number, selected coordinates, or exact place searches. TikTok may also process browser, device, network, referrer, and advertising interaction data according to its Privacy Policy.

Cloudflare Turnstile

ShiftMy uses Cloudflare Turnstile on account registration and sign-in to help confirm that requests are legitimate and to protect the service from automated abuse. Turnstile may process browser, device, interaction, and network data according to Cloudflare's terms.

For more information, see Cloudflare's Turnstile Privacy Addendum.

How We Share Information

We do not sell or rent personal information. We may share information only as needed to operate and protect ShiftMy, including with:

• Payment providers that process checkout, verify transactions, prevent fraud, and manage payment disputes.
• Infrastructure, hosting, database, security, analytics, and anti-abuse providers that help us run the service.
• Advertising providers that deliver, personalize where permitted, measure, and protect ads.
• Professional advisers, authorities, or other parties when required by law, legal process, fraud prevention, security, or protection of rights.
• A successor organization if ShiftMy is involved in a merger, acquisition, financing, restructuring, or sale of assets.

Data Security

We use technical and organizational measures designed to protect personal information, including HTTPS, access controls, restricted server permissions, password hashing, rate limits, and security monitoring. No online service can guarantee absolute security, but we work to protect information against unauthorized access, loss, misuse, and alteration.

Retention

We keep personal information for as long as needed to provide the service, manage accounts and passes, comply with legal and accounting obligations, prevent abuse, resolve disputes, enforce agreements, and maintain security records. We may keep backup, log, and fraud-prevention records for a limited period after account data is removed where reasonably necessary.

Your Choices and Rights

You may contact us to request access to, correction of, or deletion of your account information. We may need to verify your request before taking action, and some information may be retained where required for security, legal, tax, accounting, dispute, or fraud-prevention purposes.

You can sign out of the app, clear cookies through your browser, or contact support if you want help with your account.

Children's Privacy

ShiftMy is not directed to children under 13, and we do not knowingly collect personal information from children under 13. If you believe a child has provided personal information to us, contact us so we can review and remove it where appropriate.

International Users

ShiftMy may be operated from servers and service providers located in different countries. By using the service, you understand that information may be processed in countries where privacy laws may differ from those in your location.

Changes to This Policy

We may update this Privacy Policy from time to time. When we make changes, we will update the "Last updated" date above. Material changes will apply going forward unless otherwise required by law.

Contact

Questions, requests, or concerns about privacy or account data can be sent to support@shiftmy.me.