1. Data Controller
The Data Controller for ShiftMate is Matteo Ciannavei (matt.cianna@gmail.com). ShiftMate operates in compliance with the General Data Protection Regulation (GDPR) and international privacy laws.
2. Information We Collect
- Account Information: Email address, user display name, and avatar URL provided via Firebase Authentication (Google, Apple, or Email sign-in).
- Schedule Data: Shift badges, work hours, and Do-Not-Disturb flags entered via Tap & Paint, Cycle Rotator, or AI Rota Scanner.
- Group Membership: Groups you create or join, member roles, and hangout RSVPs.
- Uploaded Documents: Roster images or files uploaded to the AI Rota Scanner are processed in real-time in memory and never used for foundation model training.
3. How We Use Your Data
Your schedule data is exclusively used to calculate mutual hangout availability (Golden Slots: Breakfast, Lunch, Aperitivo, Night) with members of your groups. We do not sell your personal data or provide it to third-party ad networks.
4. Third-Party Sub-Processors
- Google Firebase (us-central1): Cloud Firestore, Authentication, Functions, and Cloud Storage.
- Google Cloud Vertex AI: Gemini 2.5 Flash for the in-app AI Assistant and AI Rota Scanner.
- RevenueCat: Subscription billing, receipts validation, and entitlement management.
- Telegram Bot API / Discord API: Opt-in chat notifications and availability summaries for linked groups.
5. Data Retention & Right to Erasure
You have the right to delete your data at any time. When you select "Delete Account" in the ShiftMate app settings, your user document, shift schedules, chat history, and RSVPs are permanently wiped from Cloud Firestore via an atomic Cloud Function callable.
6. Privacy Inquiries
For inquiries regarding your privacy rights or to exercise your GDPR rights, please contact matt.cianna@gmail.com.