Shiftpup for iPhone · October 14, 2026

Your schedule stays on your iPhone.

The short version

Your photos (schedules, calendars, lists and posters) are read on your iPhone by Apple Vision and are never sent anywhere. Shiftpup for iPhone needs no account and has no advertising. Its network requests go to RevenueCat, which checks Shiftpup Pro purchases (see Purchases), and to PostHog, which receives usage analytics you can turn off (see Usage analytics). Only if you sign in for a family space, it also talks to Shiftpup’s own server (see Optional account and family spaces).

What stays on your iPhone

While you check a schedule, Shiftpup keeps its photos (up to eight pages) and the text read from them, including coworkers’ names and their shifts, so you can compare your week with the photo. Scanning a new schedule replaces them, and Start over removes them.

When you add a week to Calendar or share it, Shiftpup keeps that week as your own shifts only, without the photo or the rest of the schedule, so you can see it again and compare the next schedule with it. It keeps up to 26 weeks for each job and removes older ones.

It also keeps your jobs (each job’s name, your name on its schedules, its time zone, colour, location, opening and closing times and alert choice) and a record of which shifts it has added to Calendar, so nothing is added twice. All of this stays in the app’s own storage on this iPhone, which is excluded from device backups.

Settings › Delete all data removes everything Shiftpup stores and turns off the weekly reminder. Deleting data in Shiftpup doesn’t remove events already in Calendar or files you shared.

Calendar

Shiftpup asks only for permission to add events. It can’t read, change or delete anything in your calendar. Shifts are added to your default calendar; if that calendar syncs with iCloud, Google, Exchange or a work account, the added events sync with it as your calendar settings decide. A work shift’s event holds the job’s name, the shift’s times, the job’s location if you entered one, the alert you chose and a short note; coworkers’ names never go into your calendar. An event read from a calendar, list or poster keeps its own title, place and details, and on a shared calendar the name of the person it’s for, so you can tell them apart.

If you share a calendar file instead, it contains only the shifts and events you reviewed and goes only where you send it.

Weekly reminder

If you turn on the weekly reminder, Shiftpup asks for permission to send notifications and schedules one on this iPhone for the day and time you pick. It is created on your device; nothing is sent to a server. Turning it off removes it.

Siri and Shortcuts

“When is my next shift” reads from the weeks saved on your iPhone and needs your iPhone to be unlocked. The Read Schedule Photo action reads a photo you pass it from Shortcuts on your iPhone, the same way as the camera.

Usage analytics

To learn what helps and where people get stuck, Shiftpup sends usage events to PostHog, an analytics service. It starts only after you accept this policy on the welcome screen.

Each event says which screen you opened or what happened. For example:

• that a photo was read, and how many people, days or events it found and how long that took;
• whether you checked, edited, shared or added events to Calendar;
• whether you saw, chose or bought Shiftpup Pro.

Events carry a random ID made for this install and basic device details (iPhone model, iOS and app version, language). PostHog also works out an approximate location (country and city) from your IP address.

Events never include your photos, the text read from them, names, or the dates, times, titles or places on your schedule. They never include anything from your calendar.

The same random ID is given to RevenueCat, so your subscription and your usage can be seen together. You can turn analytics off at any time in Settings › Share usage analytics.

Purchases

Shiftpup Pro is an optional monthly or yearly subscription. Apple handles payment through the App Store, and Shiftpup never sees your payment details.

Purchases are checked through RevenueCat, a subscription service. When the app starts and when you buy or restore, it sends RevenueCat a random app user ID it creates for this install, the usage-analytics ID above, your App Store purchase history for Shiftpup and basic device details (such as the iOS and app version and the App Store country). RevenueCat never receives your photos, schedules, events, calendar or name. Pro unlocks only from purchase information that passes verification. Restore and subscription management are always available.

Optional account and family spaces

You never need an account to snap a photo, check what Pip found or add it to Calendar. An account is only for a family space, where you share the weeks you choose with people you invite and see theirs. Nothing in this section is collected unless you sign in.

What we keep if you sign in

• Your sign-in. You sign in with Apple, or with Google where offered. Apple or Google handle the sign-in itself. We keep the account identifier they give Shiftpup. We never see your password, and we don’t store your email address, even when Apple or Google include it.
• The name you share. The name you share when you sign in (Apple shares it only if you choose to). People in your family spaces see it beside what you share.
• Family spaces you start or join. Each space’s name, who is in it and when they joined. Invite codes are stored only as a one-way hash, and each works once, for up to 7 days.
• Only the weeks you choose to share. For each event: its title, start and end, whether it lasts all day, whose it is and the job name. Everyone in that family space can see them. Sharing again replaces what you shared before.
• Sign-in details. Your sign-in sessions, stored only as a one-way hash. If you sign in with Apple, an encrypted token from Apple, used only to revoke Shiftpup’s Sign in with Apple access when you delete your account. To stop abuse, the server also counts requests using a one-way keyed hash of your IP address, never the address itself, and clears those counts daily.

What we never collect

Your photos, the text read from them, anything from your calendar, places and notes from your events, your contacts, and your email address or phone number. Photos are still read on your iPhone, signed in or not.

Where it’s stored

On Cloudflare, our hosting provider, in a database in North America. Requests travel over encrypted connections (HTTPS). Shared weeks aren’t end-to-end encrypted: our server reads them so it can show them to your family space, and for nothing else.

How long we keep it

• Your account and name: until you delete your account.
• Your place in a family space: until you leave it or are removed from it, the space is deleted, or you delete your account.
• A week you shared: until you share again, you leave that family space or are removed from it, the space is deleted, or you delete your account.
• Sign-in sessions: until you sign out, or after 60 days without using Shiftpup signed in.

Deleting your account

Settings › Account › Delete account removes your account, your sessions, your place in every family space and every week you shared from our server, straight away. A family space you started passes to the member who has been in it longest, or is deleted if no one else is in it. If you signed in with Apple, deleting also revokes Shiftpup’s Sign in with Apple access. You can also stop using Sign in with Apple with Shiftpup in your iPhone’s Settings: tap your name, then Sign-In & Security, then Sign in with Apple. Deleting your account doesn’t remove the weeks on your iPhone or events in Calendar, and people may already have seen what you shared.

What we don’t do

We don’t sell your data, show ads, or track you across other companies’ apps and websites.

Questions

Service operator: Bryton Zoz / Shiftpup. Email help.shiftpup@brytonzoz.com. The Shiftpup website is a separate service with its own privacy details.