Shifts Privacy policy
The short version
- Shifts doesn't sell your data, doesn't show ads and doesn't track you across apps.
- It only reads what you give it: your settings and the listings you share. It can't see your messages, your contacts or your iPhone's location.
- To fill in a listing's card, its text is read by an AI model (Claude, made by Anthropic), with your permission. Anthropic doesn't use it to train its models.
- Your data is hosted in Australia.
- You can delete your account and everything in it from the app's Settings, in two taps.
1. Who is responsible
Shifts by Taelyos is published by Gaétan Forestier, a sole trader based in Australia, publishing under the Taelyos brand (ABN 64 731 055 865). He decides how your data is used and is accountable for it. Questions: contact@taelyos.com. The postal address is in the legal notice.
We follow the Australian Privacy Principles in the Privacy Act 1988 (Cth) and, for the people it protects, the European Union's General Data Protection Regulation (GDPR).
2. What Shifts handles and why
| Data | What for | Legal basis (GDPR) | How long |
|---|---|---|---|
| Account your Apple user identifier for the app, email (or Apple relay address if you chose Hide My Email), first name, language | Create your account and recognise you | Contract | Until you delete your account |
| Profile city, starting point (address and coordinates), how you get around, TFN or ABN, minimum hourly rate, earliest departure, time to get ready, maximum travel time; the documents you say you have, as yes or no (White Card, RSA, licence…), never the document itself or its number | Work out travel time, wake-up time and take-home pay; sort offers by your limits | Contract | Until you delete your account |
| Schedule and wardrobe days you're looking for work or not, usual week, items in your wardrobe | Only show you the days that matter; compare the required outfit with what you own | Contract | Until you delete your account |
| Listings you share text, link, screenshot or photo, and the card we build from it | Build the decision card | Contract; your permission for AI reading | Until you delete your account |
| Alerts you forward job alert emails (Seek, Indeed, Jora…) sent to your Shifts address | Pull out the offers | Contract | The email is erased once read; the offers stay until you delete your account |
| Offers and tracking offers from your shares and alerts, what you did with them (dismissed, reply sent, taken), history of shifts and earnings | Schedule, history, keeping track of shifts | Contract | Until you delete your account |
| Notifications your iPhone's notification token, device type and model | Send you alerts | Contract | Until you delete your account |
| Technical logs time of each request, the function called and its parameters, response code, app version; app errors (message, screen). Our server doesn't record your IP address. | Security, fixing outages | Legitimate interest: running the service safely | 30 days |
| Support your emails and our replies | Answer you and handle your requests | Contract; legal obligation for requests about your data | 2 years after the last exchange |
| Demo account made-up data | Show the app without creating an account | Legitimate interest | 24 hours |
Shifts only sees what you share yourself, one listing at a time.
Your profile, schedule and wardrobe are optional. No starting point means no travel times; no wardrobe means no outfit check. Everything else still works.
3. How AI reads listings
To fill in a card, Shifts sends the listing's text, or the image you shared, to Claude, Anthropic's AI model. Nothing else goes with it: not your name, your email or your starting point.
- Anthropic processes this data on our behalf. Its commercial terms don't allow it to train models on it, and it deletes it from its servers within 30 days, unless it detects a breach of its usage policy.
- The app asks for your permission before the first time. You can withdraw it in Settings: sharing listings stops, the rest of the app keeps working.
- Each listing is read once. The result is kept with no link to your account and reused for anyone who shares exactly the same text, so it stays after you delete your account.
- AI can get things wrong. When it can't find a detail, the card says "not found" instead of guessing, and the original text stays right next to it.
4. Automatic sorting
Shifts sorts offers and sets some aside based on your own settings: minimum rate, maximum travel time, days off, earliest departure. This sorting doesn't decide anything for you. An offer that was set aside stays visible under its day, with its reason, and "Show anyway" puts it back in the list. Shifts doesn't pass any ranking or profile to employers.
5. Who receives data
Nobody buys your data. These services help us run Shifts:
| Service | Role | What it receives | Where |
|---|---|---|---|
| BinaryLane Mammoth Media Pty Ltd | Hosts the server and the database | Everything described above | Australia |
| Cloudflare Cloudflare, Inc. | Network, server protection, backups | Traffic between the app and the server, including your IP address; alerts forwarded to your Shifts address; our backups, encrypted before upload | Global network; United States |
| Apple | Sign in with Apple, notifications, maps on your iPhone | What you chose to share when signing in (identifier, email or relay address, first name); notification content | United States |
| Expo 650 Industries, Inc. | Delivering notifications | Your device token and the notification content, which Expo doesn't keep | United States |
| Anthropic Anthropic, PBC | AI reading of listings | The text or image of the listing | United States |
| OpenStreetMap OpenStreetMap Foundation (Nominatim) | Finding the coordinates of an address | The text of an address: a listing's, or your starting point while you search for it | United Kingdom |
| Transport for NSW NSW Government | Public transport trips | Start and end coordinates, date and time | Australia |
| Support Cloudflare, Google (Gmail), Brevo | Receiving and sending support emails | Your emails and our replies | United States, France |
The services that handle data on our behalf (host, Cloudflare, Expo, Anthropic, Google, Brevo) are bound by contract. They only use it to provide their service to us and must protect it at least as well as we do. Transport for NSW and OpenStreetMap only receive requests that don't say who you are.
We may also disclose data when the law requires it, for example at the request of an authority.
When you open a listing, you leave Shifts: the advertiser's site or app (WhatsApp, Seek, Indeed…) applies its own policy.
6. Your data outside Australia
Your data is stored in Australia. Some services process it elsewhere: in the United States (Anthropic, Expo, Cloudflare, Apple, Google), in the United Kingdom (OpenStreetMap) and in France (Brevo). Before we trust a service with data, we check that it commits by contract to protect it as the Australian Privacy Principles require.
For people protected by the GDPR, these transfers rely on the EU–US Data Privacy Framework or on the European Commission's standard contractual clauses; the United Kingdom has an adequacy decision. If the GDPR protects you, it keeps applying to your data in Australia. You can ask us for a copy of these safeguards.
7. How long we keep it
- As long as your account exists, we keep what you put in it. You can delete it at any time.
- When you delete it, everything is erased from the server straight away. Encrypted backups that still hold your data are overwritten within 30 days.
- The demo account is erased after 24 hours.
- Technical logs are erased after 30 days.
- Support emails are kept for 2 years after the last exchange, then erased.
8. Your rights
Whenever you like, at no cost, you can:
- see and correct your data in the app;
- get a copy of everything we hold about you, in a readable file, by emailing us;
- delete your account and all your data (see Delete your account);
- withdraw your permission for AI reading, in Settings;
- object to processing based on our legitimate interest, or ask us to restrict it;
- turn off notifications in your iPhone's settings.
We reply within 30 days at most. To check that a request really comes from you, we may ask you to write from the email address linked to your account.
If you're not happy with our answer, you can contact the OAIC in Australia (oaic.gov.au), the CNIL in France (cnil.fr) or the data protection authority in your country.
9. Security
- Everything travels over HTTPS.
- The server is used for Shifts only, and only the publisher can access it.
- No password: you sign in with Apple. Your session is kept in your iPhone's keychain; the server only keeps a fingerprint of it.
- Backups are encrypted before they leave the server.
If a data breach puts you at risk, we tell you as soon as we can, and we notify the relevant authority when the law requires it.
10. Children
Shifts is for people aged 18 and over. If we learn that an account belongs to someone younger, we delete it.
11. Cookies
The app doesn't use cookies. These pages set no analytics or advertising cookies.
12. Changes
If this policy changes in an important way, the app tells you before the change applies. The date of the current version is at the top of this page; earlier versions are available on request.