Privacy

Personal workplaces, shifts and time sessions are saved in the app’s private storage on your device. We do not track location in the background. Team use sends your chosen name, username, memberships, availability, schedules and requests to the Amir-OS service over HTTPS. Authorized teammates see the shared roster; managers see requests needed for approvals. Passwords are stored as salted hashes. Push tokens are used only for notifications. Purchase verification sends transaction data and your account identifier, not your personal timesheets. No advertising or analytics SDK is included.

You can erase personal records in Settings without deleting a team account. Account deletion requires your password and removes access sessions and memberships. An owner must explicitly delete multi-person teams first. Existing team records may remain with names removed where required to preserve other members’ schedules. Keep your recovery code private. Contact support for data questions. This early version is not intended as the only copy of critical employment records.

Purchases can use a random purchase identifier without a Shift profile, name or email. Apple processes payment. The server retains verified transaction IDs and credit usage to restore access and prevent double use. Linking a purchase to a team account is optional and explicit. Personal checklists, goals, received payments, expenses and corrections remain on your device.

Your connection suggests a country, not your phone language. VPNs can affect it; confirm where you work.

Directory browsing sends only the selected country, search and page to the Shift service, which queries the named public register. No maps or GPS search.

Preview in development. Store availability, native device acceptance and push delivery are not yet confirmed.