Your Privacy
Matters to Us

Shift Management is a mobile application designed for railway crew members to manage duty schedules, shift assignments, and operational alerts. It is an internal workforce management tool.

This Privacy Policy explains how we collect, use, and protect your information when you use our app.

We collect only the minimum information needed to provide the app's core functionality:

Your data is used exclusively to provide the Shift Management service:

• Authenticate and manage your account securely
• Display your assigned duty schedules and shift information
• Send local notifications for upcoming duties and alerts
• Allow administrators to manage and assign crew duties
• Provide password reset functionality via email OTP
• Maintain your login session securely for up to 7 days

We implement industry-standard security practices to protect your information:

• Auth tokens are stored in your device's secure local storage (SharedPreferences)
• All app–server communication is protected by HTTPS / TLS encryption
• Passwords are never stored in plain text — server-side hashing is used
• JWT tokens have automatic expiry to limit exposure if compromised
• Our backend is hosted on Render, a trusted cloud infrastructure provider

Sessions automatically expire after 7 days of inactivity, requiring re-authentication for your security.

• Local Notifications: Generated entirely on-device to remind you of upcoming duties. No external push notification servers are involved.
• Background Polling: Android WorkManager polls our server every 15 minutes (when connected to the internet) to fetch new alerts. This uses WAKE_LOCK and RECEIVE_BOOT_COMPLETED permissions.
• Notification Permission: On Android 13+, we request POST_NOTIFICATIONS permission before sending any notifications.

You can disable all notifications at any time via your device's Settings app.

Your data is only shared in these limited circumstances:

• Within your organisation: Authorised administrators can view crew duty assignments as part of operations.
• Legal requirements: We may disclose data if required by law or valid legal process.
• Infrastructure provider: Render (our cloud host) processes data on our behalf under strict confidentiality obligations.

• Access: View your profile and account data within the app at any time.
• Correction: Update your profile details through the app's profile screen.
• Deletion: Request full account and data deletion by contacting us via email.
• Logout: Logging out immediately clears all local authentication tokens from your device.

Shift Management is intended exclusively for adult railway crew members and operational staff (18+). The app is not directed at children.

We do not knowingly collect data from anyone under 18. If you believe a minor has created an account, please contact us immediately so we can delete it.

We may update this Privacy Policy periodically to reflect changes in our practices, technology, or legal requirements.

Significant changes will be reflected by updating the "Last updated" date at the top of this page. Continued use of the app after changes constitutes acceptance of the updated policy.