Before this page goes live, delete this box. Drafted from what the application's source code does. Check every claim against the finished product and fill in the bracketed items. Not reviewed by a lawyer. Pay particular attention to section 3 — location handling is the most common cause of a Play Store rejection.
ShiftSync — Privacy Policy
ShiftSync handles two things people are rightly protective of: where they were, and what they were paid. This policy sets out exactly what the application collects, when it collects it, and who can see it.
1. Who we are
ShiftSync is operated by Goshen Labs Ltd, House No. 20, Donut Street, Community 25, Tema, Greater Accra, Ghana, who are the data controller for the information described here. Contact us at info@goshenlabs.tech.
Where your employer deploys ShiftSync for their team, they determine who is scheduled and what records are kept. In that arrangement your employer is also a controller of your data, and requests about your schedule or your employment record are best directed to them.
2. What we collect
| Category | Examples | Why we need it |
|---|---|---|
| Account information | Name, email address, phone number, job role, the company you belong to | To create your account and place you on the right team |
| Schedule data | Shifts assigned, swaps requested, leave booked, availability | To build and publish the roster |
| Roster photographs | Images of paper duty rosters you upload | To read the existing schedule and convert it into a digital one |
| Clock-in records | Time you started and finished, and your location at that moment | To confirm attendance and to produce accurate payroll figures |
| Device and diagnostic data | Application version, device type, operating system, error reports | To keep the application working and investigate faults |
3. Location — read this section
ShiftSync uses your device's location to confirm that you are at your place of work when you clock in or out. This matters, so we want to be precise about it.
- Location is captured only at the moment you tap clock-in or clock-out. The application does not track your position continuously and does not collect location while it is closed or in the background.
- What is stored is the result, not a trail. We record the timestamp and whether you were inside the permitted area, along with the coordinates recorded at that instant.
- Your employer can see your clock-in records — including whether a clock-in was made outside the permitted area. That is the purpose of the feature.
- You can refuse the permission. If you do, location verified clock-in will not work and your employer may ask you to record attendance another way.
[CONFIRM the above matches the shipped behaviour exactly, including whether coordinates or only a pass/fail result are stored.]
Other permissions
- Camera and photo library — only when you photograph or upload a roster, or set a profile picture.
- Notifications — to tell you when a schedule is published, a swap is approved, or a shift is about to start.
4. What we do not do
- We do not sell your personal data.
- We do not show you advertising or share your data with advertising networks.
- We do not track your location outside of a clock-in or clock-out action.
- We do not use your schedule or attendance data to build profiles for any purpose other than operating the service for your employer.
5. Who processes your data on our behalf
| Provider | What it handles | Where |
|---|---|---|
| Google Firebase | Authentication, the database holding schedules and attendance, file storage, push notifications, and server-side functions | [CONFIRM your Firebase project region] |
Firebase operates internationally, so your information may be stored or processed outside Ghana and outside your own country, under Google's contractual data protection terms.
6. Who else can see your information
Managers and administrators at your employer can see your schedule, your swap and leave requests, and your attendance records. Colleagues on the same team can see who is rostered for a shift.
Beyond that, we disclose data only where legally required, or where it is necessary to investigate fraud or a serious breach of our terms.
7. How long we keep it
Attendance and payroll records are kept for [CONFIRM period — Ghanaian employment and tax law will set a minimum] because they may be needed to resolve a pay dispute or satisfy a tax audit. Schedule history is kept for [CONFIRM period]. If you leave the company, your employer may retain your records for the periods above.
If you close your account we delete your profile and stop processing your data, subject to those retention obligations.
8. How we protect it
- Traffic is encrypted in transit using TLS.
- Data is encrypted at rest by Firebase.
- Access rules restrict each user to their own company's data.
- Administrative access is limited to those who need it to run the service.
If a breach occurs that is likely to put your rights at risk, we will notify you and the relevant authority without undue delay.
9. Your rights
You may ask us to give you a copy of your data, correct it, delete it, export it, or stop processing it in certain circumstances. Write to info@goshenlabs.tech and we will respond within 30 days. Where the request concerns your employment record, we may need to refer you to your employer.
In Ghana you may complain to the Data Protection Commission. In the UK or EU, to your national supervisory authority.
10. Children
ShiftSync is a workplace tool and is not intended for anyone under the minimum legal working age. We do not knowingly collect data from children.
11. Changes to this policy
We will update this page and the date above when our practices change, and tell you inside the application before a significant change takes effect.