Privacy Notice
Last updated: 16 October 2026
In short
Your shifts, pay and payslips are kept in your own account on the app's Firebase server (Google), protected by your sign-in: the app only ever shows them to you, and the developer cannot read them. The only things stored about you on the server are the email address you sign in with, your name, and whether your account has been approved.
What the app stores in your account
• Shifts, hours, breaks, overtime, holidays and sick days you log or import • Pay rates, contracted hours, pension, salary and other Setup details • Figures read from payslips you import, and your payslip archive • Your display name and profile picture This is stored per account in Google's Firebase (Firestore). Payslip PDFs you open are kept in this browser only, not uploaded.
Signing in
You sign in with Google, or register with an email address and password. This keeps each account's data separate, and lets an admin approve your account - the app works fully either way. With Google, Google gives the app your name and email address. With an email account, your password is handled by Google's Firebase Authentication and is never stored by the app.
What the app sends and downloads
Signing in sends your email address and name to the app's server, which keeps your account profile (email, name, "waiting for approval") so an admin can approve or refuse it. Your shifts and settings are only ever sent to your own account. Nothing is sent to anyone else: never your pay or payslips. As with any website, Google's servers see your browser's internet address when it connects.
What is never sent anywhere
The website shows a small advert banner served by Google (AdSense), which may use cookies or similar technology to choose and measure adverts, subject to the choice you make in Google's consent message. Your shifts, pay and payslips are never used for adverts. The home page counts visits anonymously (a daily total only: no cookies, no IP addresses). The app has no analytics of its own, and your data is never sold or shared. The Firebase service keeps an anonymous per-install ID, which is how it recognises this browser.
Backups and support
A backup file is only created when you choose Export Full Backup. It is protected by the password you set and saved where you pick. Support emails only contain what you choose to write.
Estimates only
Pay, tax and National Insurance figures are estimates to help you check your payslip. They are not financial or tax advice; your payslip and HMRC are the official record.
How to delete your data
• Log Viewer: Clear this Day / Week / Month / Year • Payslip Archive: Delete on each payslip • Your account on the server (email address, name and approval state): ask the admin, or email shifttracker@mail.uk, to delete it. Exported backup files are yours to keep or delete.
Keeping it safe
Anyone who can sign in as you can see your data, so keep your password private. Treat exported backup files like payslips, because they contain your pay details.
Questions
Email shifttracker@mail.uk or use Contact Support in the app. If this notice changes, the app will show it again so you can read the update.