Privacy Policy

Last updated: June 17, 2026

In short: Shiftomator collects only what it needs to run a scheduling group — your name, a login PIN, and (optionally) your email and mobile number for alerts. We never sell or rent your data, and we never use your phone number or email for marketing. Text alerts are opt-in and you can opt out anytime.

1. Who we are

Shiftomator is a private web app that helps a work group take turns choosing on-call and vacation days. It is operated for that group’s internal scheduling use, not as a public commercial service.

2. What we collect

Name — to identify you on the roster.
PIN — stored only as a secure one-way hash (bcrypt); we cannot see your PIN.
Email address (optional) — only if you provide it, used to send scheduling alerts.
Mobile number (optional) — only if you opt in, used to send scheduling text alerts.
Your picks — the days/weeks you choose.

3. How we use it

We use this information solely to operate the scheduling tool: showing whose turn it is, recording picks, and sending you alerts about your own turns. We do not use your contact details for marketing or advertising of any kind.

4. Text messaging

Text alerts are strictly opt-in (see our SMS Terms & Conditions). Your mobile number is used only to deliver those alerts. We do not send marketing texts. You may opt out at any time by replying STOP or removing your number in the app.

5. Who we share it with

We do not sell, rent, or trade your personal information. We share data only with the service providers that make the app work:

Our email provider (Resend) — to deliver email alerts.
Our SMS provider (TextMagic) — to deliver text alerts, only for numbers that have opted in.
Our web host — which stores the app’s database.

These providers process the data only to deliver the messages on our behalf. No mobile information is shared with third parties or affiliates for marketing or promotional purposes.

6. Data security

The site is served over HTTPS. PINs are stored as bcrypt hashes. Access to administrative functions requires an admin account. We apply login rate-limiting and standard web security protections.

7. Data retention & your choices

You can update or remove your email and mobile number at any time in the app. Ask your group administrator to remove you from a roster. When you opt out of texts, your number is deleted from the SMS list.

8. Children

Shiftomator is intended for workplace use by adults and is not directed to children under 13.

9. Contact

Questions about this policy? Email nlkushner@gmail.com.