Privacy policy

Your mailbox stays
under your control.

Last updated: 30 October 2026

This policy describes the personal-use Shift Checker installation and this informational website. The app is privately operated by its account owner.

Purpose and Google permission

Shift Checker reads work-offer emails to extract shift details, compare calendar commitments and prepare availability reports. It requests only https://www.googleapis.com/auth/gmail.readonly. This permission permits reading Gmail data; the application's configured queries select the work-offer messages it processes. It does not request Gmail send, draft, modify or delete permissions.

Information accessed and stored

Processing can access message content and headers, including sender, subject and message/thread identifiers. The app also reads the owner's connected calendar events. Its private records include offer identifiers, sender and subject, extracted shifts, relevant calendar event titles and times, availability reasons and notification-delivery status. Unclear details are retained as review warnings.

The Google client configuration and refresh credential are stored separately in private, access-restricted files on the owner's server. Access tokens are used in process memory. During the owner's assisted setup, private temporary files on the owner's Mac are removed when the setup command exits.

Use and sharing

Data is used to provide the owner's shift checks and requested notifications. The app does not sell Google user data, use it for advertising or use it to train general-purpose AI models. The app's automatic parsing and classification run locally on the owner's server.

Calendar queries and detailed reports are handled through the owner's Home Assistant installation. Phone push messages contain summary counts; the detailed report inside Home Assistant can contain email metadata and calendar event titles. Notification delivery uses the owner's existing notification infrastructure and mobile platform. The owner controls access to those systems and any diagnostic excerpts they choose to share for support.

Shift Checker's use and transfer of information received from Google APIs will adhere to the Google API Services User Data Policy, including its Limited Use requirements.

Retention and deletion

The installation has a configured 30-day retention target for offer and delivery records. Cleanup runs when the worker's retention task runs; records can remain until cleanup is performed, including while automatic processing is disabled. Private backups can retain older reports for longer. OAuth credentials are excluded from ordinary source and report backups.

The owner can delete stored offer records, reports and credentials on the private server and remove retained backup copies. Deleting a phone or Home Assistant notification alone does not delete the underlying private report.

Revoke Google access

Google access can be revoked in Google Account connections by selecting Shift Checker and removing its access. Revocation stops subsequent authenticated Gmail requests; it does not automatically erase previously stored reports. Server-side records and retained backups must be deleted separately if desired.

This website

These informational pages contain no Gmail sign-in form, mailbox integration, advertising or app-added analytics. They contain no private shift reports or credentials. The hosting provider may process ordinary request and security information needed to deliver the pages.

Contact

For questions, access removal or deletion requests, use the support email shown on the Shift Checker Google consent screen. The private installation is managed by its account owner.