Effective date: 2026-09-08 Last updated: 2026-09-08
Shift is a rota calendar. You describe your shift pattern once — four on, four off, or whatever yours is — and the app works out every day from it, forwards and backwards, with your hours and your pay.
Everything you enter stays on your phone. There is no account, no sign-up, no cloud and no sync. Your rota, your hours and your pay rates are never uploaded, and there is nowhere for them to go.
The only data that leaves your device is what Google AdMob needs to show ads, and none of it comes from anything you entered.
com.dashfusion.listshift)Everything is written to this app’s private storage, which no other app on your phone can read:
That is the whole list. No day of your calendar is stored as a row. The shift you are on for any date is computed from the pattern and the date it was anchored to, which is why the calendar can show you a year ago and a year ahead without ever having generated them.
There is no name, no email, no employer, no workplace, no location and no contact anywhere in it, because the app never asks for any of them. If you name a shift type after your ward, your site or your team, that text is stored exactly as privately as everything else and is never transmitted.
We hold no copy of any of it. There is no analytics SDK in this app, no crash reporter of our own, and no telemetry of any kind. Nobody at Dash Fusion can see your rota, your hours or what you earn.
The app opts out of Android’s cloud backup and device-to-device transfer, so your rota is never copied into Google’s backup service. The honest cost: uninstalling the app, or losing the phone, loses it. The app has an export that writes everything to a readable file you choose the location of — that file is yours, and it is the intended way to keep a copy or move to a new phone.
The calendar and the pay screen each offer Copy and Share, which put a plain-text version of the period on screen onto your clipboard or into Android’s own share sheet. That happens only when you tap it, it contains only what is already on the screen in front of you, and it goes wherever you send it. Once it leaves the app it is outside this policy. Nothing is shared automatically, and nothing is sent to us.
The app can post one optional reminder before a shift, at a lead time you choose. It is off until you switch it on, and switching it on is what triggers Android’s notification permission request.
To schedule it the app needs to run briefly when your phone restarts, which is
why it declares RECEIVE_BOOT_COMPLETED. That is all that permission does
here: without it, the reminder would stop after the first reboot and the switch
in Settings would go on claiming it was on.
The reminder is worked out on the device from your own rota. Nothing about it leaves the phone.
The app is supported by ads served by Google AdMob. Ads are the only reason the app needs an internet connection at all; the calendar, the hours and every pay calculation work fully offline.
The app shows no banner ads, no native ads and no ads on launch. A full-screen ad can appear at one moment only: after you have copied or shared a rota — after the text is on your clipboard or the share sheet has opened, never between the tap and the copy — and not every time even then. Simply looking at your calendar, paging between months, or saving a rota never shows one. There is also an optional rewarded video you can choose to watch, which removes ads for 24 hours; it is never forced and never interrupts anything.
To serve ads, Google receives data from your device, which may include your
device’s advertising identifier (AD_ID), coarse location inferred from your IP
address, device and app information, and ad-interaction data. It does not
receive your rota, your hours, your pay rates or anything else from inside the
app. Google’s processing is done as an independent controller under its own
policies:
Where required by law, the app shows Google’s User Messaging Platform consent form before ads are initialised, and records your choice. In the EEA and the UK you are asked about personalised advertising; in covered US states you are offered the opt-out required there. You can change your decision at any time from Settings → Ad privacy options, and if you decline, every feature of the app continues to work exactly as before.
None. We operate no servers, no accounts and no analytics. We have no database with your name in it and no way to identify you or your device. We do not sell or share personal information, because we do not have any.
POST_NOTIFICATIONS) — only if you switch the shift
reminder on. Optional.RECEIVE_BOOT_COMPLETED) — so a reminder you switched on
survives a reboot. Not a permission Android asks you about.AD_ID) — required by Google Play for apps that serve
ads; used by AdMob as described above.That is all of them. The app requests no calendar access, no camera, no microphone, no photo or media access, no storage permission, no location and no contacts. In particular it does not read or write your device’s calendar: your rota lives inside this app only.
A few more permissions are merged into the final app package by the libraries the app is built on, so the list Google Play shows you is longer than the ones above. They are the Android Ad Services permissions plus wake-lock and foreground-service, all from the Google Mobile Ads SDK. None is a permission Android stops to ask you about, and none is used by any code we wrote.
This app is not directed at children under 13 and is not designed for use under the COPPA framework. We do not knowingly collect personal information from children — as described above, we hold no personal data at all.
If we change this policy we will update the Last updated date above and publish the new version at this URL. Material changes will also be noted in the app’s release notes on Google Play. This policy is versioned publicly in the Dash Fusion privacy repository, so any change is visible in its history.
Questions about this policy or about the app: dash.fusion@outlook.com