Skip to content
Back to ShiftRing

ShiftRing privacy policy

Last updated October 18, 2026. This policy covers the Android app ShiftRing: Shift Work Calendar (com.suryanto.shiftring) published by Tinyfair on Google Play.

The short version

ShiftRing works without an account. In the free version your schedule stays on your phone. Our server is used only for public holiday lists (no personal data) and for Pro features: checking your purchase, encrypted cloud backup, and sharing your schedule with someone you invite. Ads and purchases go through Google. There are no analytics and no crash reporting service in the app.

Data that stays on your phone

Your schedule
Shift types, rotations, the calendar, day changes, notes, alarms, pay rates and settings are stored in the app on your phone. In the free version they never leave it.
Google Calendar sync (Pro)
Runs on your phone through Android's calendar provider: ShiftRing writes your shifts into a calendar you pick and reads back changes you make there. This calendar data is not sent to us.
Backup to a file
Saved where you choose. The app does not upload it.

Data our server processes

The server runs at apips.hitam.my.id and is operated by Tinyfair. It is used only for the features below.

Install ID

The app creates a random identifier (install ID) on your phone. It contains no personal information and is sent only when you use a Pro feature or check a purchase.

Public holidays

Holiday lists for the US and German states are downloaded by country, year and region. No install ID or other personal data is sent with these requests.

Purchases (Pro)

To check a ShiftRing Pro purchase, the app sends the Google Play purchase token, the product and your install ID to our server, which asks Google Play for its status. We store only a SHA-256 hash of the token, the product, the status, the expiry date, the install ID and the time of the last check.

Cloud backup (Pro)

Your backup is encrypted on your phone (AES-256-GCM) with a key derived from your recovery code before it is uploaded. The server stores only the encrypted file, its size, format version and upload time, under a SHA-256 hash of the recovery code. We cannot read your backup, and we never receive the recovery code itself.

Sharing your schedule (Pro)

When you share your schedule, your phone uploads the next 90 days (dates, start and end times, shift codes, and your day notes only if you choose to include them, up to 140 characters each) and the name you choose to show. Only the one phone that joined with your invite code can read it. The invite code works once and expires after 48 hours. When you stop sharing, the schedule is deleted from the server at once.

Security and abuse protection

To limit repeated attempts (for example guessing invite or recovery codes), the server keeps a hash of your IP address with an hourly request counter; entries older than two hours are deleted automatically, at the latest within a day. Our hosting provider keeps standard web server logs (IP address, time, requested address) for security for a limited period.

Where the data is stored

The server is run by a hosting provider in Indonesia, so the data above is processed outside the European Union. Backups are encrypted before they leave your phone.

How long we keep it

  • Purchase records: deleted automatically 90 days after the purchase stops granting Pro (expired, cancelled or refunded).
  • Cloud backups: until you replace them or ask us to delete them.
  • Shared schedules: deleted as soon as you stop sharing; the remaining link record, and invites nobody used, are deleted after 30 days.
  • Abuse-protection counters: two hours, deleted at the latest within a day.

Legal bases (GDPR)

Providing Pro features you bought (purchase check, backup, sharing): performance of a contract, Art. 6(1)(b) GDPR. Personalised ads: your consent, Art. 6(1)(a) GDPR. Security and abuse protection: legitimate interest in a secure service, Art. 6(1)(f) GDPR.

Ads (Google AdMob)

The free version shows a small number of ads from Google AdMob: no banner ads, never on the calendar or while you edit your schedule. To show and measure ads, Google may collect your device's advertising ID, IP address, and information about ad interactions and your device. In the European Economic Area, the United Kingdom and Switzerland the app asks for your consent first, and you can change it later in the app under More, Privacy choices. You can reset or delete your advertising ID in your Android settings. See how Google uses information from apps that use its services. ShiftRing Pro shows no ads.

Purchases (Google Play)

Pro is sold through Google Play Billing as a yearly subscription (with a 7-day free trial for new subscribers), a monthly subscription, or a one-time lifetime purchase that will never turn into a subscription. You can cancel a subscription anytime in Google Play. We never see your payment details. To confirm Pro, the app sends the purchase token to our server, which checks it with Google Play, as described above.

Permissions

Notifications and exact alarms (for the alarm before each shift), starting after reboot (to set those alarms again), and reading and writing your calendar, asked only when you turn on Google Calendar sync. Internet is used for public holidays, Pro features, purchases and ads. No location, contacts, camera, microphone or storage permission is requested.

Children

ShiftRing is not directed at children under 16 and we do not knowingly collect information from them.

Your choices and deleting data

  • Data on your phone: clear the app's storage in Android settings, or uninstall ShiftRing.
  • Shared schedule: in ShiftRing open Share and stop sharing. The schedule is deleted from our server at once.
  • Cloud backup: turning it off in the app stops new uploads but does not delete the last copy. To delete it, write to support@tinyfair.my.id with the subject "Delete my ShiftRing backup" and your recovery code. We use the code only to find and delete your backup, then discard it, within 30 days.
  • Purchase records: deleted automatically as described above; you can ask for earlier deletion by email.
  • Ad data: use your Android advertising ID settings or Privacy choices in the app.

Your rights

You can also ask for access to, correction or deletion of your data, restriction of processing and data portability, object to processing, or withdraw consent at any time. Because ShiftRing has no accounts, we may ask for information shown in the app (for example your install ID) to find your data. You have the right to complain to a data protection authority.

Changes and contact

If this policy changes, the new version will be posted on this page with a new date. Questions: support@tinyfair.my.id.