Privacy Policy

Last Updated: March 4, 2026

1. Introduction

Welcome to FlowShift ("we," "our," or "us"). This Privacy Policy explains how Pymesoft LLC collects, uses, shares, and protects your personal information when you use the FlowShift Manager and FlowShift Staff mobile applications (collectively, the "Apps") and our website at flowshift.work (the "Site").

By using our Apps or Site you agree to the collection and use of information as described in this policy. If you do not agree, please do not use our services.

2. Information We Collect

Account Information

  • Name, email address, and phone number
  • Authentication credentials (Google, Apple, or email/password)
  • Profile photo (optional)

Work-Related Information

  • Team memberships, roles, and availability
  • Shift assignments, clock-in/out records, and approved hours
  • Earnings and pay rate data
  • Manager-staff chat messages

Device & Usage Information

  • Device type, operating system, and app version
  • Push notification tokens
  • Crash reports and performance data

Location Data

We collect precise location data only when you clock in or clock out of a shift. Location is used to verify you are at or near the event venue (within approximately 500 meters). Location data is not collected in the background or at any other time. You can disable location permissions in your device settings, though this may prevent clock-in verification.

3. How We Use Your Information

  • Provide core app functionality: shift management, scheduling, clock-in/out, earnings tracking, and team communication
  • Verify your location at event venues during clock-in
  • Send push notifications about shifts, messages, and updates
  • Process and manage subscriptions (Starter and Pro tiers)
  • Provide AI-powered assistant features for schedule management
  • Improve app performance and fix bugs via crash reports
  • Respond to support requests

4. How We Share Your Information

With Your Employer / Manager

Work-related data (shift responses, clock-in/out times, approved hours, availability) is shared with managers and team administrators through the FlowShift Manager companion app. This is essential for the staffing workflow.

Third-Party Service Providers

  • Google & Apple — authentication services
  • OneSignal — push notification delivery
  • Firebase (Google) — crash reporting and analytics
  • Qonversion — subscription and in-app purchase management
  • Groq — AI assistant processing (messages are not stored by the provider)

We do not sell your personal information to third parties. We do not share your data for advertising purposes.

5. Data Retention

  • Account data: retained until you request deletion
  • Work records: retained per employer requirements and applicable labor laws (typically 3–7 years)
  • Chat messages: retained while your account is active
  • Crash reports: retained up to 90 days
  • Location data: processed in real-time for clock-in verification and stored only as part of the attendance record

6. Data Security

All data transmitted between the Apps and our servers uses HTTPS/TLS encryption. Sensitive authentication tokens are stored using platform-specific secure storage (iOS Keychain, Android Keystore). Access to production databases is restricted and protected by SSH key-based authentication.

7. Your Rights & Choices

  • Access: request a copy of your personal data
  • Correction: update inaccurate information via the app or by contacting us
  • Deletion: request account and data deletion by emailing us
  • Location: disable location permissions in device settings
  • Notifications: disable push notifications in device settings
  • Subscription: manage or cancel via App Store or Google Play

California Residents (CCPA)

You have the right to know what personal information we collect, request deletion, and opt out of any sale of personal information. We do not sell personal information.

European Residents (GDPR)

You have rights to access, rectification, erasure, data portability, and restriction of processing. To exercise these rights, contact us at the email below.

8. Children's Privacy

FlowShift is not intended for use by anyone under the age of 16. We do not knowingly collect personal information from children. If we learn we have collected data from a child under 16, we will delete it promptly.

9. Changes to This Policy

We may update this Privacy Policy from time to time. Changes will be posted on this page with an updated "Last Updated" date. Continued use of the Apps after changes constitutes acceptance of the revised policy.

10. Contact Us

If you have questions about this Privacy Policy or your data: