Privacy Policy for Shift Planner & Calendar
Updated 4 November 2026
The developer of Shift Planner & Calendar is Reece Charlton. Contact us using the form at https://forms.gle/rZFyfV3LgR9EpLpS9.
1. Your planner
Your shift patterns, profiles, work times, overtime, leave, custom titles, notes and preferences are stored on your device. You can use the core planner without creating an account. If you turn on iCloud Sync, your planner data and selected settings are also stored in your private iCloud database using Apple CloudKit. If you enable Calendar Sync and grant permission, the app writes events, including their dates, times, titles and any notes, to the calendar you choose. Your calendar provider may sync those events under its own terms.
2. Optional account and Friends in version 2.0
Friends requires Pro and an account created using Sign in with Apple. InsForge provides the online account and backend services. We process an account identifier and the email address supplied by Apple, including a private relay address if you choose Hide My Email. You choose a display name and username. We store your username-search preference, friend requests and connections, blocks, sharing permissions and invite information so that you can find and manage friends and control access. We also process limited request counters to prevent abuse.
If you use Friends, a derived schedule is published to InsForge for the friends you authorise. Your friends need Pro to view it. The shared window covers four weeks in the past and the future range you choose: one, three, six or twelve months. Work-times-only access shares work status and intervals. If you explicitly grant full detail, the shared schedule can also include configured shift or leave labels and calendar presentation such as colours and icons. Your original planner, notes and custom entry titles are not uploaded to InsForge by Friends. Sharing work patterns can reveal routines; a friend can retain information they have seen.
You can manage each friend's access, pause sharing, unfriend or block people in the app. Pausing removes published schedule data from the service; blocking removes the relationship and revokes access. Replacing a publication removes the previous published version. Friends can report spam, harassment or misleading identity; we store the report, the accounts involved and the reason for safety review.
3. Purchases and service providers
Apple processes purchases. For online Pro features, we process entitlement status, product and transaction or app evidence identifiers, environment and verification or revocation dates to verify access and prevent misuse. InsForge processes account, Friends and entitlement data to provide the service. Apple processes Sign in with Apple, purchases and any Apple services you choose to use under its own privacy terms. Your chosen calendar provider may also process calendar events.
The app does not include third-party advertising, analytics or tracking SDKs, and we do not sell your personal data. This does not change how Apple or your calendar provider handles data under its own terms.
4. Retention and deletion
Your local planner remains on your device until you remove it or delete the app. iCloud and calendar data may remain in those services separately; use the app's iCloud data controls or your calendar provider's controls to remove it.
Online account data is retained while your account exists. Friendship records are removed when a request is declined, a friendship is removed or a block is cleared, as applicable. Reports are retained until a linked account is deleted or an administrator removes them. You can delete your online account in Settings; this deletes your InsForge identity and associated profile, friendships, permissions, reports linked to the account and published schedules. It does not delete your local or iCloud planner. Deleting your account does not itself cancel an Apple subscription.
If Apple notifies us that you have stopped using Sign in with Apple for Shift Planner, or that your Apple Account has been deleted, we delete the associated online account and Friends data. Your local and private iCloud planner data remain separate.
We retain limited notification records to process these changes reliably: the notification identifier, event type and time, a hash of the Apple identifier, and the online account identifier until that account is deleted. Completed records are removed after 180 days; pending records are retained until processing completes. We do not retain the signed notification or Apple tokens in these records.
Limited server-only purchase transaction state, including an original transaction identifier, environment and verification or revocation timestamps, is retained after account deletion to process purchase status and prevent replay. No signed transaction is retained in that record.
5. Your choices and rights
You can edit or delete planner entries, manage iCloud and calendar sync, and control Friends sharing in the app. Depending on where you live, you may have rights to request access to, correction or deletion of your personal data, or to object to or restrict certain processing. To request access, a copy, correction or deletion of online data, or ask about our privacy practices, contact us through https://forms.gle/rZFyfV3LgR9EpLpS9. We may need to verify your identity before fulfilling a request. You may also complain to your data protection authority.
6. Children and changes
The app's optional online features process the information described above when used. Parents and guardians can contact us with privacy questions. We may update this policy and will post the revised date here.