Privacy Policy — ShiftRest
1. Introduction
OQapps (“we”, “us”, or “our”) operates ShiftRest, Sleep optimisation for shift workers (the “App”). This Privacy Policy explains what personal data we collect, why we collect it, how it is used, and the rights you have regarding your information.
By using ShiftRest, you agree to the practices described in this policy. If you do not agree, please do not use the App.
Contact: privacy@oqapps.pro | oqapps.pro
2. Information We Collect
We collect the following categories of data when you use ShiftRest:
- Account information — email address, display name, and password (stored as a secure hash).
- Device information — device model, operating system version, language, and region.
- Usage data — features accessed, session timestamps, and in-app actions.
- Photos and images — images you choose to upload for analysis. These are transmitted to our AI provider and are not stored permanently after processing.
- Push notification token — to send you relevant in-app notifications. You may disable notifications at any time in your device settings.
You may register using: Email/Password, Apple Sign-In. When you use a third-party sign-in (Apple or Google), we receive only your name and email — we never see your Apple or Google password.
We do not collect your precise location, contacts, microphone audio, or any data beyond what is described above.
3. How We Use Information
We use your data for the following purposes (with the corresponding legal basis under GDPR in parentheses):
- To provide and operate the App — without your account and usage data, the service cannot function. (Performance of contract)
- To improve the product — aggregate usage data helps us identify bugs, popular features, and areas to improve. (Legitimate interest)
- To provide customer support — we use your contact details to respond to your requests. (Performance of contract)
- To send notifications — only where you have enabled them and where relevant to App functionality. (Consent)
- To comply with the law — we process data where required by legal obligation. (Legal obligation)
We do not use your data for automated profiling, sell your data to advertisers, or share it for third-party marketing.
4. Third-Party Service Providers
We share data with the following service providers solely to operate the App. Each provider is bound by its own privacy policy:
- Supabase (authentication, database, file storage) — supabase.com/privacy
- Anthropic (AI processing of your content) — anthropic.com/privacy
- Adapty (subscription management and analytics) — adapty.io/privacy
- Apple App Store / In-App Purchases — apple.com/privacy
- Google Play Billing — policies.google.com/privacy
- Expo Push Notifications (push delivery infrastructure) — expo.dev/privacy
We do not sell, rent, or trade your personal data with any other third party.
5. Data Sharing & Disclosure
Beyond the service providers listed above, we may disclose your personal data in these limited circumstances:
- Legal requirements — if required by court order, subpoena, or applicable law.
- Business transfer — if OQapps is acquired or merges with another entity, your data may be transferred as part of that transaction. We will notify you in advance.
- With your consent — for any other purpose, only with your explicit consent.
6. Data Retention
We retain your personal data for as long as your account is active or as needed to provide the App. Specifically:
- Account data — retained until you delete your account, after which it is deleted within 30 days.
- Anonymised analytics — may be retained indefinitely as they cannot identify you.
- Financial and transaction records — retained for 7 years as required for tax and legal purposes.
- AI-submitted content (photos, messages) — not stored beyond the immediate processing session.
7. Your Rights
EEA and UK Residents (GDPR / UK GDPR)
You have the right to: access your data, rectify inaccurate data, request erasure (“right to be forgotten”), restrict or object to processing, receive your data in a portable format, and withdraw consent at any time without affecting prior lawful processing.
California Residents (CCPA / CPRA)
You have the right to: know what personal data we collect and how we use it, request deletion, correct inaccurate data, opt out of the “sale” or “sharing” of personal information (we do not sell or share personal data), and not be discriminated against for exercising these rights.
All Users
Regardless of location, you may request access to or deletion of your personal data by emailing privacy@oqapps.pro. We will respond within 30 days.
8. International Data Transfers
OQapps is an international publisher. Your data may be processed in the United States or other countries outside your country of residence. When we transfer data from the EEA or UK, we rely on Standard Contractual Clauses (SCCs) approved by the European Commission or equivalent safeguards to ensure your data is protected.
9. Security
We implement industry-standard security measures including:
- TLS encryption for all data in transit.
- Encryption at rest for stored personal data.
- Access controls limiting who can view your data.
No system is completely secure. In the event of a data breach affecting your rights, we will notify you as required by applicable law.
10. Children's Privacy
ShiftRest is not directed to children under 13 (or under 16 in the EU). We do not knowingly collect personal data from children under these ages. If we discover that we have collected data from a child, we will delete it promptly. If you believe we have inadvertently collected such data, please email privacy@oqapps.pro.
11. Changes to This Policy
We may update this Privacy Policy from time to time. When we make material changes, we will notify you via in-app notification or email at least 30 days before the changes take effect. Continued use of the App after the effective date constitutes acceptance of the revised policy.
12. Contact Us
For privacy-related questions or to exercise your rights:
- Email: privacy@oqapps.pro
- General support: support@oqapps.pro
- Website: https://oqapps.pro
13. AI Processing
ShiftRest uses Anthropic to power its AI features. When you submit content for AI analysis (text, images, or messages), that content is transmitted to Anthropic's servers. Refer to Anthropic's privacy policy for details on how they handle data.
We send the minimum data necessary for the AI to produce a useful response. We do not share your account identity with the AI provider — requests are pseudonymised.