ShyftSync privacy policy

This policy covers the ShyftSync iPhone app and its partner relay. Athena Data Labs, a division of Athena Analytics L.L.C. in the United States, operates them. Contact info@athenadatalabs.com about privacy or support.

Your phone does the planning

Your schedule, settings, sleep predictions, and personal garden history are processed on your phone. ShyftSync stores its local profile in protected app storage excluded from device backups. It does not upload your calendar entries to our servers. You choose which work calendars it reads. Other calendars are checked locally for time overlapping your predicted rest; their titles are not sent to us.

Apple Health sleep stays on your phone

With your permission, ShyftSync reads sleep samples from Apple Health to show your own measured sleep, compare it with predictions, and inform your personal experience. Access is optional and starts off. The app reads these samples when needed rather than keeping its own stored copy. Raw sleep samples, measured sleep intervals, sleep stages, and comparisons are not included in partner messages. Your shared availability and predicted rest can reflect the model informed by your past sleep; those predictions are encrypted for your partner as described below. Health-derived predictions are not exported to calendar accounts or written to our operational logs. Distributed beta builds do not offer a sleep-data export.

You can turn this feature off in ShyftSync and revoke access in Apple Health or iPhone Settings. Doing so does not delete the original records in Apple Health. We do not use Health data for advertising, marketing, or data brokerage.

What your partner receives

Linking is optional. Linked phones exchange predicted free times and alertness values used to find shared windows, shared plans, and the completed-plan credits used for the shared garden. With Apple Health enabled, the free-time and alertness predictions can reflect your past measured sleep. Your partner sees available times and plans, not your shifts, measured sleep, or the personal reasons behind predictions. If you enable Show when I’m resting, your partner also receives predicted rest intervals; you can turn it off.

Messages are encrypted on your phone for the linked phone. The relay cannot decrypt them. The linking code is a secret: anyone you give it to can join that link. Do not post it or include it in a support request.

Calendar exports follow your calendar account

Plans you choose to save and the optional My Protected rest calendar are written through Apple Calendar. Exporting Partner free time requires the sender’s permission and the recipient’s own export choice. These exports use schedule-based predictions, not Apple Health sleep. Events in a calendar may sync through iCloud or another calendar provider and be visible to people who share that calendar, according to its settings.

The partner relay and security records

Our relay runs on Amazon Web Services in the United States. Each mailbox stores a random-looking mailbox identifier, its latest encrypted message, and an expiry time. Collecting a message removes it. Sending a new one replaces the previous one. Uncollected messages expire after seven days; the database’s physical removal can happen later, but expired messages are not delivered.

App Attest checks that a request comes from an authentic copy of the app. Apple performs attestation. Our relay stores an installation-specific public key and identifier, a replay counter, and an expiry time. It does not store a name, Apple Account, phone number, private key, or history connecting that identifier to mailboxes. Inactive attestation records expire after thirty days. One-use security challenges expire after five minutes. Expired records are refused even if database cleanup is still pending.

We keep Lambda operational logs for seven days. They contain request identifiers, timestamps, execution timing, and resource-use information. The relay does not intentionally log request bodies, mailbox names, authentication proofs, or IP addresses. Network providers necessarily process connection information, including IP addresses, to deliver requests. This is different from retaining those addresses in our application logs.

Beta feedback and diagnostics

There are no advertising, tracking, or third-party analytics SDKs in ShyftSync. Apple’s TestFlight provides beta usage information, crash reports, and feedback under Apple’s TestFlight privacy notice. If you contact us, we receive your email address and the contents you choose to send. We use that information to respond and troubleshoot; please avoid sending health records or other people’s information. We retain correspondence only as needed to resolve the request and meet applicable recordkeeping obligations.

Your choices and deletion

You can change permissions, disable optional sharing, unlink, or use Start over in Settings. A sharing change reaches the other phone when it next receives an update; it cannot instantly erase an offline phone. Unlinking removes this phone’s partner state and sends a notice for the other phone to do the same. Uncollected relay messages remain subject to expiry. Already saved plans and information a person has copied may remain with them.

Start over clears the local ShyftSync profile and attempts to remove its optional generated calendars. Calendar permission or an unavailable calendar may prevent immediate cleanup. You can remove remaining generated events in Apple Calendar. Deleting the app removes its app-container data; it does not delete your Apple Health records or calendars. Security records on the relay expire after inactivity as described above.

Depending on where you live, you may have rights to access, correct, delete, or restrict personal information. Contact us to exercise them. We cannot retrieve or decrypt your on-device records or sealed partner messages. We can address support correspondence and other information we actually hold.

No research enrollment in this beta

The beta does not enroll you in research or upload Health data for a study. Any future research would require a separate consent process and applicable ethics approval before activation.

Adults, service providers, and policy updates

ShyftSync is for adults aged 18 and over. We do not knowingly collect children’s information. We do not sell personal information or use it for cross-app advertising. We use service providers to host the relay and handle support; information may also be disclosed when legally required. We are based in the United States, where relay and support information is processed.

We update this page when our practices change and revise the date above. Visiting these public pages is also covered by the Athena website privacy policy, including its website analytics and hosting practices. For practical help, visit ShyftSync support.