ShiftSlumber is a sleep-tracking app designed for shift workers. We are committed to protecting your privacy with the strongest architecture we know: one where we simply do not have access to your personal sleep data in the first place.
This Privacy Policy explains what data is collected, where it lives, and your rights under Australian law and international privacy frameworks. ShiftSlumber is published by ShiftSlumber , Queensland, Australia.
Your personal sleep data stays encrypted on your device. Here is how it works:
This is a technical reality enforced by design — not a marketing promise.
This data is never transmitted to ShiftSlumber servers. We have no access to it.
| Data | When | Why | Stored? |
|---|---|---|---|
| Anonymous AI Coach request (no PII — e.g. "shift worker, Day 3 streak") | When you use AI Coach | To generate a response | No — discarded after response |
| Anonymous analytics event (e.g. "sleep_logged") | During app use | To understand feature usage | Yes — no PII attached |
| Push notification device token | When you enable push notifications | To send reminders | Yes — token only |
| Account email address | At account creation (optional) | For account recovery | Yes — encrypted at rest |
| Website waitlist: email, first name, last name, country, and city or region | When you submit the join-waitlist form on shiftslumber.com | To send launch and beta updates and for light-touch regional planning | Yes — in our secure database (encrypted at rest). Not used for AI Coach prompts and not sold to third parties |
| Subscription status (active/inactive) | Via RevenueCat/Apple/Google | To unlock premium features | No — RevenueCat is source of truth |
Analytics events contain: a random session identifier (not linked to your identity), event type, timestamp, device type and app version. They do not contain your name, email, sleep data, health data, location, or any personally identifiable information.
Your sleep data is stored in an encrypted SQLite database using AES-256 encryption. The encryption key is held in your device's secure enclave (iOS) or Android Keystore (Android) and is never transmitted anywhere. If you delete the app, all on-device data is permanently deleted. We hold no copy.
ShiftSlumber offers an optional backup feature storing an encrypted copy of your data in your personal iCloud (iOS) or Google Drive (Android) account.
The AI Sleep Coach feature is powered by the Anthropic API (Claude). When you interact with the AI Coach:
Anthropic's privacy policy: anthropic.com/privacy
If you enable push notifications, we store your device push token to send reminders you have requested. Push tokens are not linked to your personal identity. You can disable push notifications at any time in your device Settings or within the app — disabling notifications triggers deletion of your push token from our servers.
Consumer subscriptions are processed entirely through Apple App Store or Google Play, managed by RevenueCat. ShiftSlumber never sees or stores your payment card details.
Business billing for organisational accounts is processed via Stripe. Stripe's Privacy Policy: stripe.com/au/privacy
| Service | Purpose | Data Shared |
|---|---|---|
| Anthropic (Claude API) | AI Coach responses | Anonymised, non-identifying request text |
| Apple APNs | Push notifications (iOS) | Device push token |
| Google FCM | Push notifications (Android) | Device push token |
| RevenueCat | Subscription management | Anonymous user ID, subscription events |
| Apple App Store / Google Play | In-app purchases | Governed by Apple/Google policies |
| Stripe | B2B billing | Organisation billing contact and payment method |
| Resend | Transactional email (e.g. waitlist confirmation) | Your email address; standard template content only |
| Sentry | Error reporting | Anonymous error logs, stack traces (no PII) |
Because your personal sleep data is stored exclusively on your device, you already have complete control. You can view, export, and delete all your sleep data directly within the app at any time.
For the minimal data we do hold on our servers, you have the following rights:
ShiftSlumber acknowledges the Privacy Act 2024 statutory tort for serious invasions of privacy. We are committed to handling all personal information in accordance with the Australian Privacy Principles (APPs).
If you are located in the EU, UK, or EEA, you have additional rights under GDPR and UK GDPR including: access (Art. 15), rectification (Art. 16), erasure (Art. 17), data portability (Art. 20), restriction (Art. 18), and objection (Art. 21). Contact sleepportfolio@gmail.com — we respond within 30 days.
To request deletion of your account and all server-side data:
We will process deletion requests within 30 days. On-device data is deleted immediately when you delete the app. Server-side data (account email, push token, waitlist entries where applicable, analytics) is permanently deleted from our systems. B2B financial records are retained for 7 years as required by Australian tax law.
| Data Type | Retention Period |
|---|---|
| On-device sleep data | Indefinite — you control this; deleted when you delete the app |
| Account email | Until account deletion request |
| Website waitlist (email, name, country, city) | Until you request removal or unsubscribe from waitlist email; contact sleepportfolio@gmail.com |
| Push notification token | Until you disable notifications or delete your account |
| Anonymous analytics events | 24 months (rolling), then automatically deleted |
| AI Coach message hashes | 12 months, then automatically deleted |
| B2B organisation data | Until organisation closure + 7 years (Australian tax law) |
ShiftSlumber is designed for adult shift workers (18+). We do not knowingly collect personal information from individuals under 18. If you believe a person under 18 has created an account, please contact sleepportfolio@gmail.com and we will delete the account promptly.
We will notify you of material changes via in-app notification at least 30 days before the change takes effect. The "Last updated" date at the top of this document reflects the most recent revision.
Privacy enquiries and rights requests:
sleepportfolio@gmail.com
Postal address:
ShiftSlumber Privacy Officer
Queensland, Australia
OAIC (Australian privacy regulator):
oaic.gov.au · 1300 363 992