Delishift Privacy Policy

Version 0.1 - last updated 5 November 2026.

1. Controller and processor

• For account data (your e-mail, name, login) and for billing data of a Customer, Khan Anwaruzzaman Md, trading as Parliva International (enskild firma), Kvintettvägen 68, 142 43 Skogås, Sweden, is the data controller. Contact: support@delishift.com.
• For data about employees inside a company (shifts, punches, wages, tips, chat, certificates) the Customer (your employer) is the data controller and Delishift is the data processor acting on the Customer's instructions. Section 9 summarises the Data Processing Agreement; the full text is at delishift.com/dpa.
• Questions about how your employer uses Delishift go to your employer; questions about the service itself go to us.

2. What we process

Account: e-mail address, display name, password (hashed by Firebase Authentication), e-mail verification status, push-notification device tokens, device language.

Company membership: role (owner / manager / employee), department, branch assignment, permission settings, wage rate and rate history (visible only to you and to managers your employer has allowed).

Employee details entered by your employer: contact details (street address, postal code, city, phone, e-mail), employment terms (employee number, start and end date, employment type, tax percentage, holiday pay percentage and how it is paid) and date of birth. Managers see the date of birth masked to the year unless they choose to reveal it, and each reveal is logged. No personal identity number (personnummer) or bank account number is stored.

Work records: scheduled shifts, clock-in/clock-out and break events with server time, corrections made by managers with an edit trail, approved timesheets, daily summaries (hours, cost), leave requests, shift proposals and swaps.

Location at clock in/out: when your employer has set a workplace location, the app reads your position once at the moment you clock in or out and the service stores only the distance to the workplace and the accuracy of the reading - never the position itself. Location is never tracked between punches, and clocking in works without it. Your coordinates are sent to our server only to compute that distance and are not saved.

Money: tips declarations and distributions, payslip documents generated by the service (stored as files readable only by you).

Communication: team chat messages and in-app notifications.

Documents: certificates registered by your employer (name, issuer, expiry date - no files are uploaded in the current version).

On your device only: a local queue of clock events made while offline and app preferences. No photos, contacts or analytics are collected by the app.

3. Why and on what legal basis

• Providing the service you or your employer signed up for (GDPR art. 6.1 b - contract).
• The Customer's obligations as employer: working-time records, payroll basis, tips (art. 6.1 c - legal obligation, on the Customer's side).
• Keeping the service secure, preventing abuse, verifying e-mail addresses (art. 6.1 f - legitimate interest).
• Sending push notifications about your shifts and decisions (art. 6.1 b); you can turn them off in your device settings.
• For data your employer enters (work records, distance at clock in/out, employee details), your employer decides the legal basis. At work, consent is usually not a valid basis, so employers normally rely on contract, legal obligation or legitimate interest, and must inform staff before using features such as the distance check. We do not sell personal data and do not use it for advertising.

4. Who can see what inside a company

Access follows the role and permissions your employer sets. Your own wage, payslips and tips are always visible to you. Managers see the data of the branches they manage. Owners see the whole company.

5. Sub-processors and location

Delishift runs on Google Cloud / Firebase with data stored in the EU:

• Firebase Authentication (accounts, e-mail verification mail)
• Cloud Firestore, region eur3 (EU) - application data
• Cloud Functions, region europe-west1 (Belgium) - server logic
• Cloud Storage, EU - payslip files, exports
• Firebase Cloud Messaging - push notifications (device tokens; the notification content may transit Google's global delivery service)
• Firebase Hosting - the delishift.com website

Google LLC is our processor under the Google Cloud Data Processing Terms and the EU Standard Contractual Clauses.

6. Retention

• Account data: until you delete your account yourself in the app ("Delete account"), or it is removed by your last employer using Delishift.
• Shifts, punches, timesheets, summaries and payslips: kept by the Customer for as long as employment and bookkeeping law require (Sweden: bookkeeping records 7 years). When you leave a company your name is replaced by "Deleted user" in these records and your wage details, certificates, notifications and proposals are deleted; the working-time and pay records themselves stay as anonymised records of the Customer.
• Chat messages: kept with the company; author name is anonymised when you are removed.
• Verification and support e-mails: as long as needed for the purpose.
• A company whose subscription is cancelled keeps running until the end of its current paid period or trial. Its data is deleted 90 days after it closes, except what the Customer must keep by law.

7. Your rights

Under GDPR you can ask for access, correction, deletion, restriction, portability and to object. In the app: "Download my data" gives you an export of your own data, and "Delete account" lets you delete your account yourself. Your login and personal details are deleted, and your name is replaced by "Deleted user" in the working-time and pay records your employer must keep (see section 6). If you are the only owner of a company, you first transfer ownership or cancel the company's subscription. For account data held by Delishift as controller, contact support@delishift.com. You can complain to the Swedish authority, Integritetsskyddsmyndigheten (IMY), imy.se.

8. Security

Transport encryption (TLS), encryption at rest by Google Cloud, role-based access enforced both in database rules and server code, audit records of consequential changes, verified e-mail required to create or join a company, password minimum 8 characters. No Delishift staff reads company data except to give support you asked for. If a personal-data breach affects data we control, we notify IMY within 72 hours where the law requires it, and the people affected when the risk to them is high. For employee data we notify the Customer (section 9).

9. Data Processing Addendum (Customer - Delishift)

1. Subject: hosting and processing of employee data listed in section 2 for the purpose of workforce management. Duration: the term of the service. Data subjects: the Customer's staff. Categories: identity, contact, employment, working time, remuneration, communication.
2. Delishift processes only on the Customer's documented instructions given through the app and these terms.
3. Persons authorised by Delishift are bound by confidentiality.
4. Delishift applies the measures in section 8.
5. Sub-processors are listed in section 5; the Customer is notified of changes at least 30 days in advance and may object.
6. Delishift assists the Customer with data-subject requests through the export and erase functions and on request.
7. Delishift notifies the Customer of a personal-data breach without undue delay after becoming aware of it.
8. On termination Delishift deletes or returns the data per section 6.
9. Delishift makes available the information needed to show compliance and allows audits on reasonable notice.
10. Data is processed within the EU/EEA; transfers outside rely on the Standard Contractual Clauses via Google.

10. Children

Delishift is a workplace tool for businesses and is not directed at children. A Customer that employs people under 18 is responsible for following the rules for young workers and for informing them and, where required, their guardians.

11. Website

The website delishift.com sets no cookies and uses no analytics or third-party trackers. Our hosting provider (Firebase Hosting, Google) processes technical data such as IP addresses in its logs to deliver and protect the site.

12. Changes

Updates are published in the app; material changes are notified with at least 30 days' notice. Version history is kept in the repository.