Privacy Policy

PLAYRIOT LLC ("we," "us," or "our") operates the CoverShift mobile application ("App"). This Privacy Policy explains what information we collect, how we use it, and your rights.

1. About CoverShift

CoverShift is a shift coverage management app for small teams. Employees post shifts they need covered, coworkers claim them, and managers approve. The app supports both Manager and Employee roles with team management, scheduling, clock-in, weekly timesheets, and push notifications.

2. Information We Collect

Account Information. When you sign in with Apple, we receive your name (first time only) and a relay email address. Apple does not give us your real Apple ID password or your real email address unless you choose to share it. We use the relay email to send you transactional notifications about your business.

Business Data. Business name, location (user-entered text, not GPS), default roles, and team configuration are stored in our cloud database so multi-user collaboration works.

Shift Data. Shift schedules, coverage requests, swap requests, time entries (clock-in / clock-out timestamps), time-off requests, and approval decisions are stored in our cloud database so team members can see and interact with shift information in real time.

Device Token. If you enable push notifications, your APNs device token is stored on our server to deliver shift coverage alerts, approval notifications, missed clock-in alerts, and team updates.

Hourly Rate (Pro, optional). Managers on Pro can record per-employee hourly rates to power labor cost tracking. Rates are visible to managers only; employees see total hours, not dollar amounts owed to other employees.

3. How We Use Your Information

• To authenticate your account and manage your team membership
• To sync shift schedules, coverage requests, time entries, and approvals across team members
• To send push notifications about coverage requests, approvals, missed clock-ins, and team updates
• To manage your Pro subscription status
• We do not sell your data to third parties
• We do not use your data for advertising

4. Third-Party Services

Apple Sign in with Apple. Authentication is handled exclusively by Apple. We receive the Apple-issued user identifier, an Apple-managed relay email, and (on first sign-in only) the name you authorize Apple to share. We never see your Apple ID password.

Cloud Backend. CoverShift's backend runs on our own infrastructure (managed VPS) with PostgreSQL for relational data and MinIO for image storage. Your account data, shift information, and team data are stored on infrastructure we operate. Server-side authorization checks ensure your data is isolated to your business — no employee can see data from another organization.

Apple Push Notification Service (APNs). Push notifications are delivered via Apple's APNs. Your device token is stored on our server for this purpose.

Apple StoreKit. Subscription purchases are processed by Apple. We receive only the App Store transaction identifier and subscription status confirmation. We never see your payment card or full billing details.

5. Device Permissions

• Push Notifications. Used to alert you about coverage requests, approvals, missed clock-ins, and team updates. Optional and revocable in iOS Settings.
• Location (Pro, optional). If your manager has enabled Pro's geofence enforcement, CoverShift requests "While Using" location permission so it can verify you're on-site at clock-in time. Location is read at the moment you tap Clock In — it is not tracked continuously, not stored, and not shared. If you decline, you can still clock in unless your manager has geofence enforcement turned on for the business.
• Photos (optional). If you choose to upload a profile photo, the iOS picker selects the image. We store only the image you explicitly choose to upload.

CoverShift does not request camera, microphone, contacts, or health data permissions. The location field on a business is user-entered text, not GPS data.

6. Data Storage & Retention

Account and team data are stored in our cloud database while your account is active. The app also stores data locally on your device using SwiftData for offline access. Local changes sync to the cloud when connectivity is restored.

You may request account and data deletion at any time. Account deletion is available in-app under Settings → Account → Delete Account, or by emailing [email protected].

7. Data Isolation

All data access is enforced by server-side authorization checks tied to your business membership. Users can only access data belonging to their own business. No employee can see data from another organization.

8. Account Deletion

Per Apple's App Store guidelines, CoverShift offers in-app account deletion. Open Settings → Account → Delete Account. After typing the destructive confirmation, your authentication record and personal profile row are hard-deleted immediately. Cascade rules remove your time entries, time-off requests, availability, role-grant requests, push tokens, notifications, and personal app data. Historical shift, coverage, and swap records are retained with your row marked deleted so the manager's audit trail remains intact for payroll-record-keeping purposes.

9. Children's Privacy

CoverShift is not directed at children under 13. We do not knowingly collect personal information from children under 13. If you believe a child under 13 has provided us personal information, please contact us and we will delete it.

10. Changes to This Policy

We may update this Privacy Policy. Changes will be posted at this URL with an updated effective date. Material changes are communicated in the app.

11. Contact

PLAYRIOT LLC
Email: [email protected]