Privacy Policy · Shift Planner Pro

CloudEx Inc. ("we", "us", or "our") operates the "Shift Planner Pro" app (the "Service"). This Privacy Policy explains what information we collect, how we use it, and the choices available to you. By using the Service, you are deemed to have agreed to the practices described in this Policy.

1. Our Core Principle

Shift Planner Pro is an Android app for making your shift schedule and working out your hours and estimated pay from the times you clock in and out. With Premium you can also write daily work reports. The shift calendar, clocking in and out, pay calculation, and daily reports all run entirely on your device. Your work records and reports are yours: they are stored on your device, and we never view, collect, upload, or transmit them to our servers. There is no account and no sign-up, and no server that holds your records. Specifically, we do not have access to any of the following:

The names of your workplaces and your pay terms, such as hourly, daily, or monthly pay, premium rates, allowances, commuting costs, and deductions
Your shift schedule, your clock-in, clock-out, and break records, and the notes you write on shifts or workplaces
Your calculated pay, monthly and yearly totals, your yearly income limit, and your monthly target
The text, numbers, checkboxes, and self-ratings in your daily reports, and the photos you attach to them

Your records leave your device only through actions you take yourself: sharing or exporting your schedule, timesheet, reports, CSV files, or calendar files, and saving backup files (Section 2).

2. Your Shifts, Pay, and Daily Reports

Where your data is kept: Your workplaces, shift types, shifts, clock-in records, and daily reports are stored in a database in the app's own storage on your device. Photos in daily reports are kept in the same app storage and cannot be seen from your gallery or by other apps.
Pay calculation: Working hours, late-night and overtime pay, premium rates, closing and pay days, the yearly income estimate, and every other calculation are done on your device. Japanese public holidays are also calculated on your device rather than downloaded.
About the amounts shown: The amounts the app shows are gross estimates before tax and social insurance. The app does not calculate tax or social insurance, and it does not determine whether any tax, social insurance, or other scheme applies to you. The deduction field only shows an estimate after subtracting a fixed amount you enter. Please check your actual pay against your employer's pay slip.
Photos in daily reports (Premium): When you take a photo, it is taken with your phone's camera app and handed back into the app's own storage; the app does not operate the camera itself. When you choose photos, the app reads only the photos you pick in Android's photo picker. Photos are scaled down to 2048 pixels on the long side and saved again as JPEG, so location (GPS) and other photo metadata (EXIF) are not kept.
Backup: "Back up to a file" puts your shifts, reports, photos, and settings into a single ZIP file and saves it where you choose. If you set a "Backup folder", the app automatically saves the same ZIP file to the folder you choose (which can be a cloud folder such as Google Drive) every day or every week, and keeps the newest 5 that it saved there. "Daily automatic backup" (on by default) keeps copies of the last 3 days inside the app's own storage. ZIP files are not encrypted, so please take care where you save them and whom you give them to. Your Premium purchase is not included in backups; it is restored from Google Play.
Export and sharing: Shift CSV files, calendar files (.ics), your schedule as text or an image, the timesheet PDF (Premium), and daily reports as text or PDF (Premium) are created only when you ask for them. CSV files are saved where you choose; everything else is passed to the app you pick in Android's share sheet. Files created for sharing are kept in temporary app storage and overwritten each time you share.
Notifications, widgets, and the tile: Notifications, home-screen widgets, and the Quick Settings tile may show your workplace names, shift times, whether you are on shift and for how long, and your payday or this month's estimated pay. Other people may see these on your lock screen or home screen. App lock (Premium) protects the app's screens; it does not cover notifications or widgets. If you do not want them seen, adjust your device's notification settings or where you place widgets.
When anything leaves your device: Only when you share, export, or save a backup yourself (see Section 3.3 for Android's own backup). We never receive any of it.
Information about other people: If you write information about coworkers, customers, or other people in your reports or notes, you are responsible for following your workplace's rules and the laws that apply to you when you share it.

3. Information We Collect

3.1 Information Collected Automatically

Crash reports: Via Firebase Crashlytics. When the app crashes or stops responding, we collect diagnostic information such as the stack trace, device model, OS version, and app version, together with a random identifier assigned to this installation. To measure the share of use that is free of crashes, information about the start of each session of use is also sent. This does not include personally identifiable information such as your name, or the contents of your shifts, pay, reports, or photos.
Purchase information: Whether you own the one-time "Premium" purchase is checked by your device asking Google Play about the purchase token Google Play issued. Purchase tokens are not sent to our servers for verification. Payment is completed on Google Play, and we never receive any payment information such as credit card numbers.
List of our other apps: To show our other apps (the card on the settings screen and the "Our other apps" list), the app downloads their names, descriptions, and images from our content server (static files hosted on Cloudflare Pages). The request contains no personal data from the app. As with any request to a web server, the server receives your device's IP address as part of the connection. Which apps to show is decided on your device, based on whether our apps are already installed and on your device's country or region (from the SIM and language settings); the result is never sent. Tapping an app in the list opens its page on Google Play, and that link carries information about which screen of this app it came from (it contains nothing that identifies you).

3.2 Information You Give Us When You Contact Us

Support emails: When you email us from the app (for example, from "Contact us"), a draft opens in your mail app with the app version, Android version, and device model filled into the body. You decide whether to send it and what to write. We use your email address and message only to reply to you and to handle matters relating to your purchase.

3.3 Information Stored Only on Your Device

Workplaces and work records: Workplace names and pay terms, wage changes, shift types, your shift schedule, clock-in and break records, allowances, commuting costs, and notes are stored in the app's own storage on your device, and are used only for the shift calendar, pay calculation, and alerts.
Daily reports and photos: Stored on your device as described in Section 2. They never leave it unless you share, export, or back them up.
App settings: Alert times, the first day of the week, your yearly income limit, display settings, whether app lock is on, and similar settings are stored on your device.
Copies kept inside the app: The daily automatic backups (the last 3 days) and the copies made just before "Delete all records" or restoring from a file (the newest 2 of each) are stored in the app's own storage.
Android backup: If backup is turned on in your device settings, Android may include your workplaces, shifts, and reports and the app's settings in the backup it saves to your own Google account. Photos in reports and the copies kept inside the app are not included. When you transfer your data directly to a new phone, the photos and those copies may be copied as well. This is handled by Android; we have no access to it.
When you uninstall: Uninstalling the app or clearing its data deletes the shifts, reports, photos, settings, and copies stored in the app's own storage. Backup ZIP files and CSV files you saved to a location you chose, and files you shared, remain until you delete them.

3.4 Information We Explicitly Do Not Collect

The contents of your workplaces, shifts, clock-in records, pay, reports, or photos
Your name, email address, phone number, or contacts (the app has no account or sign-up; for support emails, see Section 3.2)
Your location
The list of photos on your device (the app reads only the photos you pick or take)
Information about the apps on your device (whether our apps are installed is checked on your device only)
A history of the websites you visit or the contents of your communications
The contents of your screen or of other apps

3.5 Permissions the App Requests and Their Purposes

Shift Planner Pro uses a few OS permissions for alerts, app lock, and purchases. It uses them only for the stated purposes:

Notifications (POST_NOTIFICATIONS, Android 13+) — Shows alerts before a shift, alerts when you forget to clock in or out, the on-shift notification (with the elapsed time and Break and Clock out buttons), a summary when you clock out from a notification or widget, payday alerts, and alerts for a missing daily report and for nearing your yearly income limit (both Premium).
Alarms & reminders (SCHEDULE_EXACT_ALARM) — Delivers the alerts above at the times you set. Only the next upcoming alert is scheduled. The app works without this permission; alerts may simply arrive late.
Run at startup (RECEIVE_BOOT_COMPLETED) — Schedules the next alert again after your phone restarts.
Biometrics (USE_BIOMETRIC / USE_FINGERPRINT) — Used only if you turn on app lock (Premium), to confirm it is you with your device's fingerprint, face, or screen lock (PIN, pattern, and so on) when the app opens. Authentication is performed by Android; neither the app nor we receive any fingerprint or face data. The app has no passcode of its own.
Google Play Billing (com.android.vending.BILLING) — Used to buy the one-time Premium purchase and to verify and restore it.
Internet (INTERNET) — Used only for crash reports, Google Play purchase verification, in-app reviews and in-app updates, downloading the list of our other apps, and showing this privacy policy in the app. The shift calendar, clocking in and out, pay calculation, daily reports, and holidays do not require an internet connection.
Network state (ACCESS_NETWORK_STATE) — Used by the Google libraries built into the app (Firebase and Google Play) to check whether a connection is available.

4. How We Use Information

The limited information we collect is used only for the following purposes:

Operating and maintaining the Service
Verifying your Premium purchase
Diagnosing and fixing crashes
Showing you our other apps
Responding to support inquiries
Complying with applicable laws

5. Third-Party Services

Shift Planner Pro uses the following third-party services. Each service has its own privacy policy.

Firebase Crashlytics (Google LLC) — crash diagnostic data
Google Play Billing (Google LLC) — the one-time Premium purchase; payment is completed on Google Play
Google Play In-App Review and In-App Updates (Google LLC) — let you rate the app and install updates without leaving it; handled by Google Play
Cloudflare Pages (Cloudflare, Inc.) — hosts the static list of our other apps

Information you pass to apps or services you choose for sharing, exporting, or saving backups (such as email, messaging, or cloud storage) is handled under that service's own terms and privacy policy.

6. Data Retention

Crash reports: retained for 90 days, then deleted.
Support emails: retained for 12 months after the last reply, then deleted (except where legally required).
Your shifts, reports, photos, and settings on your device: kept until you delete them, uninstall the app, or clear the app's data. Daily automatic backups older than the last 3 days, and backup ZIP files in your backup folder beyond the newest 5 that the app saved there, are deleted automatically.

7. International Data Transfers

We are based in Japan. The infrastructure used for crash diagnostics and for hosting the list of our other apps may be located in various countries. When you use the Service, the minimal information described above may be processed outside your country of residence under standard contractual safeguards.

8. Your Rights

Depending on where you reside (e.g., the EEA, UK, California, Japan), you may have the right to request access to, correction of, or deletion of the limited information we hold. You can:

Delete shifts, reports, and photos in the app at any time, or delete your workplaces, shifts, and reports all at once with "Delete all records" in the settings (a copy made just before is kept inside the app). To erase everything on your device including those copies, uninstall the app or clear its data
Turn off "Daily automatic backup", or remove the "Backup folder"
Withdraw the notifications or alarms & reminders permission in your device settings at any time
Contact us at the address below to make a request regarding the information we hold

9. Children's Privacy

Shift Planner Pro is not directed to children under the age of 13 (or the minimum age applicable in your region). If we inadvertently collect information from such a child, we will delete it promptly upon being contacted.

10. Changes to This Policy

This Privacy Policy may be updated from time to time. The latest version is always published at this URL together with its effective date. We will also notify you within the app of significant changes as appropriate.

11. Contact

For questions about privacy, data requests, or to report concerns, please email us at .

CloudEx Inc. (Japan)

Effective Date: November 4, 2026