ShiftScan · Last updated 7 August 2026
ShiftScan turns a work schedule into calendar events and alarms. It is built so that your schedule never leaves your phone. This policy sets out exactly what that means.
Everything that identifies you or your work:
There is no account, no sign-in, and no server holding your data. Nothing above is transmitted anywhere.
Two things, and neither contains your schedule.
1. Anonymous usage counts. ShiftScan reports which steps of the app are being used, so we can tell which parts work. This is the complete list of events:
scan_started · scan_parsed · commit_done · alarm_armed · paywall_shown ·
purchase_started · purchase_completed · purchase_cancelled · share_flow_shown ·
share_flow_completed
These are counts only. No shift times, no dates, no names, no image data, and no free text is attached to them.
Every event also carries technical details about your device and the app, so we can tell whether a problem affects one iPhone model, one iOS version, or one release:
Each event also carries a device identifier. It is the identifier iOS gives ShiftScan for your device, put through a one-way hash with a secret value before it is sent. It identifies the device, not you. It carries no name, no email address, and no Apple ID, it cannot be reversed, and iOS gives a different one to every app. Its only purpose is to tell whether ten events came from one phone or from ten.
TelemetryDeck does not build user profiles and does not use advertising identifiers.
2. Purchase status. If you subscribe, RevenueCat processes the purchase and tells the app whether your subscription is active. Apple handles the payment itself, and we never see your payment details. Your subscription is tied to an anonymous identifier, not to a name or an email address.
If a schedule fails to read, ShiftScan may offer to let you send us the photo so we can improve how it reads that layout. This is optional, it always asks first, and it never happens on its own. If you choose to send it, the photo is stripped of location and other embedded metadata before it is handed to the iOS share sheet, and you choose where it goes. Declining changes nothing about how the app works.
ShiftScan is intended for people of working age and does not knowingly collect data from children.
Because ShiftScan holds no account and no personal data on any server, there is no personal data for us to export, correct, or delete. Deleting the app removes your schedule and your alarm rules from your device. Shifts already written to your calendar stay there. They are your calendar's events, and you can delete them yourself at any time.
There is currently no switch inside the app to turn off the anonymous usage counts described above. They contain no schedule content, and the device identifier they carry cannot be traced back to you. We would rather state that limitation plainly than imply a control that does not exist. Deleting the app stops them.
If this policy changes, the date at the top changes with it. Material changes are noted in the app's release notes.
Questions about this policy: contact@newlifefhs.com