Privacy Policy — Shiftrest

Effective date: 2026-04-01 Last updated: 2026-04-01

Introduction

• This Privacy Policy describes how Shiftrest ("we", "us", or "Shiftrest") collects, uses, discloses, and protects information when you use the Shiftrest mobile application ("App") on iOS.

• The App helps shift workers improve sleep with science-backed, personalized recommendations. This Policy applies to the App and any related services we provide.

• We are committed to protecting the privacy of our users and complying with applicable global privacy laws (e.g., GDPR, CCPA, COPPA, PIPEDA). If you have questions about this Policy or our practices, please contact us at shiftrest@forvibe.app.

Information We Collect We aim to collect only what is necessary to provide App features. The App is privacy-first: by default, the App stores sleep and health-related data locally on your device. The categories below describe data that may be collected when you provide it or when certain optional features are used.

Personal Data

• Name (only if you provide it for support or optional account features)

• Email address (for account support, subscription receipts, notifications if you opt in)

Sensitive Data

• Health & fitness data related to sleep logging and metrics (e.g., sleep duration, sleep quality ratings, sleep debt, recovery score, chronotype). This is treated as sensitive data and is subject to heightened protections.

Usage Data & Technical Data

• Device information: device model, operating system version (iOS), app version

• Technical identifiers: App instance ID, crash logs, basic telemetry needed to maintain and improve the App

• IP address and generalized location data only when needed for diagnostic or support purposes

How We Use Your Information We use collected information for the following purposes:

• To provide and improve the App’s core functionality (sleep planning, nap recommendations, shift management, sleep scoring)

• To calculate personalized recommendations based on your chronotype and logged sleep data

• To deliver transactional communications for in‑app purchases, subscriptions, and trial periods

• To provide customer support and respond to your inquiries

• For analytics and product improvement (aggregated and/or de-identified where possible)

• To comply with legal obligations and protect the safety of users and the App

Third-Party Access and Service Providers We do not display advertisements and do not engage in third‑party advertising or tracking. The App uses third‑party services only for payments and subscription management. Those services may collect and process limited information as described in their own privacy policies:

• Apple In-App Purchases — Apple processes payments and handles billing for in-app purchases and subscriptions. Apple’s privacy practices are described here: https://www.apple.com/legal/privacy/

• RevenueCat — used for subscription management and receipt validation. RevenueCat’s privacy policy: https://www.revenuecat.com/privacy/

What these third parties may receive:

• For payment/subscription processing: purchase receipt information, non-sensitive identifiers, and any information required by the provider to manage subscriptions (e.g., anonymized device identifier, transaction metadata). No payment card details are shared with Shiftrest; Apple handles payment card processing.

Data Retention

• On-device health & sleep data: Retained on your device indefinitely until you delete it or uninstall the App. Uninstalling the App removes App-stored data from the local device, unless you exported or backed up that data yourself.

• Personal data you provide (name, email): Retained while you maintain an account or otherwise interact with us. After account deletion or upon your request, we will delete or anonymize this data within a reasonable period, typically within 60 days, unless we must retain it to comply with legal obligations or to resolve disputes. We may retain backup copies for up to 2 years for legal compliance and fraud prevention.

• Diagnostic and aggregated analytics: retained in aggregated or de-identified form as needed to improve the App.

Security

• We implement administrative, technical, and physical safeguards designed to protect the confidentiality, integrity, and availability of personal and sensitive information, including:

- Transport encryption (TLS) for any data transmitted off-device - Secure development practices and periodic security assessments - Access controls limiting access to any server-side data to authorized personnel only

• Because the App stores sleep and health data locally on your device by default, that data benefits from the device’s security (e.g., device encryption, passcode/biometric protections). However, no method of transmission or storage is 100% secure; we cannot guarantee absolute security.

Children’s Privacy

• The App is not directed to children under 13. We do not knowingly collect personal information from children under 13. If you are under the minimum age in your jurisdiction (for many jurisdictions this is 13–16), do not use the App without parental or guardian consent.

• If we become aware that we have collected personal information from a child under the applicable age without valid parental consent, we will take steps to delete that information.

Your Rights (GDPR / CCPA / Global Rights) We respect your privacy rights. The available rights may vary depending on your location and applicable law.

Common rights include:

• Right to Access: You may request access to the personal data we hold about you.

• Right to Delete / Right to Erasure: You may request deletion of your personal data (subject to retention for legal obligations).

• Right to Correct: You may request correction of inaccurate personal data.

• Right to Data Portability: Where applicable, you may request a copy of your personal data in a commonly used format (e.g., CSV).

• Right to Restrict or Object: Where applicable, you may request restriction of processing or object to certain processing.

• Right to Opt-Out of Sale: We do not sell personal data. If you believe your data has been sold, contact us (below).

• California residents: You may have additional rights under the CCPA/CPRA. To exercise CCPA rights, please contact us (below).

• How to exercise rights: Email shiftrest@forvibe.app with a clear description of the request. We will verify your identity before acting and respond within 30 days (or longer if allowed by law) with next steps.

AI‑Powered Features

• Shiftrest does not use third-party AI services to process your personal or health data for recommendation generation. The App’s personalized recommendations are generated by our on-device algorithm (CBTmin-based algorithm and circadian calculations).

• If this changes in future releases and we begin using external AI services that process personal data, we will update this Policy and provide clear disclosures and opt-in mechanisms where required.

In-App Purchases & Subscriptions

• Business model: Freemium. The App is free to download with optional in‑app purchases and subscription plans that unlock premium features.

• Subscriptions: Subscriptions auto-renew unless canceled. You authorize Apple to charge the purchase price to your Apple ID account. You can cancel auto-renewal through your Apple ID account settings. Apple manages billing and renewal; see Apple’s subscription management pages and privacy documentation: https://support.apple.com/en-us/HT202039 and https://www.apple.com/legal/privacy/

• Free trial: The App may offer a 3-day free trial for certain subscription offers. If you do not cancel before the trial period ends, you will be charged the applicable subscription fee.

• Refunds: Our refund policy provides a 14-day window. In most cases Apple processes refunds for App Store purchases. If you believe you are entitled to a refund, contact Apple Support and email shiftrest@forvibe.app to indicate the issue. We will assist and may provide refunds in accordance with applicable laws and platform rules.

Health & Sensitive Data — Special Notices

• Because the App processes health and fitness data, we treat such data as sensitive and apply heightened protections. We will not sell your personal health data or otherwise disclose it for trade in return for money or other consideration.

• We will only share health data with third parties if:

- You explicitly opt in and provide clear consent; or - Sharing is necessary to comply with law, protect rights, or respond to lawful requests.

• You are responsible for any data you choose to export or share from the App (for example, CSV export). Exported files are stored where you choose and are not covered by Shiftrest’s on-device storage protections.

No Advertising and No Tracking

• The App does not include third‑party advertising and does not use advertising identifiers for ad targeting or profiling.

• We do not engage in cross‑app tracking or sell your personal data to advertisers.

Transfers & International Processing

• By using the App, you acknowledge that certain service providers (e.g., RevenueCat, Apple) may process data in countries outside your jurisdiction, including the United States. These providers have their own privacy practices (links provided above).

• Shiftrest will take reasonable steps to ensure appropriate safeguards are in place for any international processing required by law.

Data Breach Notification

• In the event of a confirmed data breach affecting personal data that we control, we will follow applicable laws and notify affected users and regulators as required, without undue delay.

Changes to This Policy

• We may update this Privacy Policy to reflect changes in our practices, legal requirements, or features. We will post the updated Policy in the App and indicate the effective date. Continued use of the App after notice constitutes acceptance of the updated Policy.

Contact Us

• For privacy inquiries, rights requests, or other questions: shiftrest@forvibe.app

• Company name: Shiftrest

• Business address: Not provided

Additional Information

• Links to third‑party policies:

- Apple Privacy: https://www.apple.com/legal/privacy/ - RevenueCat Privacy: https://www.revenuecat.com/privacy/

• If you reside in the European Economic Area (EEA), the UK, California, or another jurisdiction with specific privacy laws, you may have additional rights. Contact us at shiftrest@forvibe.app for assistance.

Thank you for trusting Shiftrest with your sleep and wellness needs. We are committed to protecting your privacy and supporting healthy, safe use of our App.