Shift Planner · Himalayan Code Works
Last updated 16 September 2026
Shift Planner has no accounts and no ads. Your shifts, rates and earnings stay on your device unless you export or back them up yourself, and we never receive them. The one thing the app does send is an automatic crash report when it crashes, so we can fix it.
Shift Planner is a shift, roster and pay tracker published by Himalayan Code Works. This policy explains exactly what the app does, and does not do, with your information.
None of your roster. There is no sign-in, no user profile, and no server that receives your schedule or your pay.
Everything you enter — shift templates, roster patterns, logged shifts, notes, hourly rates, overtime and tax settings, and the earnings calculated from them — is saved in a database in the app’s private storage on your device. We cannot see it.
Crash reports are the exception, and they are covered in full below.
Shift Planner uses Firebase Crashlytics, a Google service, to report crashes automatically. When the app crashes, it sends a report so we can find and fix the fault.
A crash report contains:
A crash report does not contain your shifts, your rates, your earnings, your notes, your name, your email address, or anything else you typed into the app. We do not attach any of that to a report.
Google processes these reports for us as our data processor, on servers that may be outside your country, under Google’s privacy policy and the Firebase data processing terms. Google holds individual crash reports for a limited retention period (90 days at the time of writing) and we use them for one purpose only: finding and fixing crashes. (On Google Play's data safety form this purpose is called “Analytics”, which Google defines to include diagnosing and fixing crashes.) We do not use them to track how you use the app, to build a profile of you, or for advertising, and we do not sell or share them with anyone else.
Crash reporting is off in development builds and on in the released app. There is currently no in-app switch to turn it off; if you would rather send nothing at all, the app cannot be used that way today, and you can email us to say so — it is the kind of thing we will add if people ask.
Apart from crash reports, Shift Planner does not connect to the internet. There is no usage-tracking SDK (nothing records which screens you open or what you tap) and no advertising SDK in the app. None of your roster, pay or settings is ever transmitted.
Because crash reporting needs a connection, the app requests the standard internet and network-state permissions on Android. These are granted automatically at install time and are not something you are prompted about.
The only other time anything opens a network connection is when you tap a link on the About screen — our website, the developer’s website, or our email address. That hands off to your browser or mail app.
When you export a timesheet as a PDF, a spreadsheet, or a calendar file (.ics), the app creates the file on your device and opens your system share sheet. Where the file goes next — email, messaging, cloud storage, a calendar app — is your choice and is governed by that app’s privacy policy. We never receive a copy.
Backups work the same way. Back up everything creates one file holding your entire roster: every shift, template, pattern, note, hourly rate and setting, and so every figure you earned. It is not encrypted, so treat it like a payslip and keep it somewhere only you can open, such as your own Drive or email. Restore from a backup reads a file you choose and replaces what is on the device with it. The app only reads that file when you pick it, and nothing is sent to us either way.
The roster widget shows your current or next shift, this month’s earnings and the week ahead. To draw it, the app writes the next two weeks of shifts into storage shared only with its own widget on the same device. Nothing leaves the device.
The app asks for a permission only when a feature needs it.
| Permission | What it is for | Leaves device? |
|---|---|---|
| Notifications | Reminding you before a shift starts, if you turn reminders on | No |
| Alarms & reminders | Firing that reminder at the minute you set rather than roughly | No |
| Run at startup | Re-scheduling reminders and widget updates after your phone restarts | No |
| Vibration | The reminder alert | No |
| Internet & network state | Sending crash reports | Crash reports only — never your roster |
Reminders are off until you switch them on in Settings, and you can withdraw any permission at any time in your device settings. The rest of the app keeps working without them.
Your roster: locally, in the app’s private storage, which other apps cannot read.
Your device’s own backup — iCloud device backup on iPhone, Google’s Android backup on Android — may include this storage if you have backup turned on, so a new phone can restore your roster. That backup is run by Apple or Google under your account and their privacy policies; we have no access to it.
If backup is off, uninstalling Shift Planner deletes your roster permanently. We hold no copy and cannot restore it. Use Export → Back up everything first and keep the file off the phone; Restore from a backup brings it all back on a reinstall or a new phone.
Crash reports: on Google’s servers, as described above.
There is no account to close, because there is no account.
Shift Planner is a work-scheduling tool. It is not directed at children under 13, and it asks no one for personal information.
Your roster never leaves the device, which removes most of the risk. Pay figures and schedules sit in the app’s private storage; a device without a screen lock, or one that has been rooted, weakens that protection — use a device passcode. Crash reports are sent to Google over an encrypted connection.
If the app’s behaviour changes in a way that affects this policy — for example, if ads or in-app purchases are added — we will update this page and change the date at the top before that version ships. Material changes will also appear in the release notes.
Questions, or anything else: