SchichtfuchsPrivacy Policy
In short: Schichtfuchs stores your rosters only on your device. There is no account, no Schichtfuchs server, no advertising and no analytics or crash-reporting services. Data only leaves your device when you use a feature for that yourself (e.g. calendar sync with your own server) or when Google services are involved, as described below.
1. Controller
The controller within the meaning of the General Data Protection Regulation (GDPR) is:
Nino BeckEmail: schichtfuchs@n-beck.de
No data protection officer has been appointed, as none is required by law.
2. Data on your device
Everything you enter in Schichtfuchs – shifts, shift types, locations, actual times, profiles, pay and holiday settings, and preferences – is stored exclusively in a database on your device. The developer has no access to it. You do not need an account and you do not provide any contact details.
The app contains no advertising and no analytics, tracking or crash-reporting libraries.
You can delete all data at any time by clearing the app's data in the Android settings or by uninstalling the app.
3. Permissions
- Read and write calendar – only for the optional device calendar sync, and only after you agree.
- Internet – for the optional CalDAV sync and for Google Play features (purchases, reviews, updates).
- Notifications – for optional reminders before your shift starts.
- Run at startup – so that scheduled reminders survive a restart.
- Set alarm – to set an alarm in your clock app when you ask for it.
- Biometrics – for the optional app lock.
- Google Play Billing – for in-app purchases.
4. Optional features
Device calendar sync
When you turn it on, Schichtfuchs writes your shifts into a calendar on your device. This happens on the device only. If the selected calendar belongs to an online account (e.g. Google), Android syncs it with that provider on its own – this is outside Schichtfuchs and subject to that provider's terms.
CalDAV sync (Pro)
With CalDAV sync, Schichtfuchs sends your shifts (date, time, name, location, notes) directly to a calendar server you choose yourself (e.g. Nextcloud, iCloud or Google). The connection is encrypted via HTTPS; credentials are only sent to the server address you entered. Your password is stored on the device encrypted with a key from the Android Keystore and is never included in backups. The operator of the server is responsible for processing on that server. The legal basis is providing the feature you requested (Art. 6(1)(b) GDPR).
Reminders and alarms (Pro)
Reminders are scheduled on the device and shown as notifications. Alarms are set via your device's clock app. No data is transmitted.
App lock
The app lock uses Android's built-in unlock (fingerprint, face or device PIN). Schichtfuchs never receives biometric data, only whether unlocking succeeded.
Roster photo import (Pro, beta) and QR codes
Text recognition for the photo import and QR code scanning run on your device. Photos and recognised content do not leave the device. For the Google components used, see section 5.
Sharing, export and encrypted backup
Month images, QR codes, exports (PDF, CSV, calendar file) and the encrypted backup (AES-256-GCM, key derived from your password) are only created when you trigger them. Where the file goes – storage location, messenger, email – is up to you via Android's share menu or file picker.
Wear OS
If a watch is connected to your phone, Schichtfuchs sends your upcoming shifts directly to the watch via Android's Wearable Data Layer. Data is only exchanged between your own devices.
5. Google services
Schichtfuchs is distributed through Google Play and uses some components of Google Play services. The provider is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. Google's privacy policy and the Google Play terms also apply.
Purchases (Google Play Billing)
Schichtfuchs Pro and optional tips are processed by Google Play. The developer does not receive any payment details. The app only asks Google Play whether a purchase exists in order to unlock Pro. Through the Play Console, Google provides the developer with order information (e.g. order number, product, price, country), which must be kept to meet statutory retention obligations. Legal bases: Art. 6(1)(b) and (c) GDPR.
Reviews and updates
Schichtfuchs may ask you for a rating via Google Play's in-app review feature and point out new versions via in-app updates. The communication takes place between the Play Store app and Google; any review you submit is linked to your Google account. The developer only sees what Google shows in the Play Console.
Text recognition and QR scanner (ML Kit)
For text recognition in the photo import and for the QR scanner (Google Code Scanner), Schichtfuchs uses ML Kit from Google Play services. Recognition runs on the device; images and recognised content are not transmitted. According to Google, however, ML Kit sends diagnostic and usage data to Google, such as device model, Android version, app package name and version, performance metrics, and device and installation identifiers. The transfer is encrypted via HTTPS, and Google states that it does not share this data with third parties. This only happens when you use one of these features. The legal basis is our legitimate interest in working on-device text recognition (Art. 6(1)(f) GDPR). Data may be transferred to the USA; Google LLC is certified under the EU-US Data Privacy Framework. Details: ML Kit data disclosure.
6. Backup and device transfer
Schichtfuchs supports Android backup. If you have turned it on in the Android settings, Android backs up the app data (shifts and settings) encrypted to your Google account and restores it on a new device. The CalDAV password is excluded. You control whether and where backups are made in the Android settings; the developer has no access to these backups.
7. Contact by email
“Send feedback” opens your email app with a prepared message to schichtfuchs@n-beck.de. The app version, Android version and device model are pre-filled so I can track down bugs – you can see, change or remove everything before sending. Nothing is sent until you tap “Send” in your email app.
I only use your email address and message to answer your request, and delete the message once it has been dealt with and no retention obligations apply. The legal basis is Art. 6(1)(f) GDPR (answering your request), or Art. 6(1)(b) GDPR for questions about a purchase. Emails are stored with my email provider.
8. This website
These pages are served via GitHub Pages (GitHub, Inc., 88 Colin P. Kelly Jr. Street, San Francisco, CA 94107, USA). When you visit, GitHub processes technically necessary data such as your IP address, date and time, the requested page and browser information in order to deliver the site and protect it against attacks. The legal basis is Art. 6(1)(f) GDPR. GitHub is certified under the EU-US Data Privacy Framework. See GitHub's privacy statement. This website sets no cookies, loads no external fonts or scripts and uses no analytics tools.
9. Your rights
You have the right of access (Art. 15 GDPR), rectification (Art. 16), erasure (Art. 17), restriction of processing (Art. 18), data portability (Art. 20) and to object to processing based on legitimate interests (Art. 21). To exercise them, contact schichtfuchs@n-beck.de. As Schichtfuchs does not store your rosters on any server of its own, I usually only hold emails and order information from Google Play.
You also have the right to lodge a complaint with a data protection supervisory authority, in particular in the member state of your habitual residence, place of work or the place of the alleged infringement (Art. 77 GDPR).
10. Age and changes
Schichtfuchs is intended for people aged 16 and over.
If the app or the law changes, I will update this privacy policy. The version published here applies.