Last updated: April 2026
Digital Nafta Portal FZCO ("we", "us", or "our") operates the ShiftWallet mobile application (the "App"). This Privacy Policy explains how we collect, use, and protect your information when you use our App.
Company: Digital Nafta Portal FZCO
Address: Building A1, Dubai Digital Park, Dubai Silicon Oasis, Dubai, UAE
License: IFZA/DIEZ License 78656
Contact: jan@digitalnafta.com
When you create an account, we collect your email address or the identifier associated with your Apple ID or Google account. Authentication is handled securely through Firebase Authentication. We do not store your passwords directly.
The App allows you to log shifts, hours, earnings, and paycheck details. This data is stored locally on your device using SwiftData and synced to Firebase Firestore when you are signed in, enabling access across your devices.
ShiftWallet offers an optional geofencing feature that can automatically clock you in or out when you arrive at or leave your workplace. Location data is processed on-device using iOS Core Location and is only collected when you explicitly grant permission. You can revoke location access at any time in your device Settings. We do not share location data with third parties.
If you choose to sync your shifts with your iOS Calendar, the App accesses your calendar through EventKit. This access is only granted with your explicit permission and is used solely to create, update, or remove shift events. We do not read or store unrelated calendar entries.
We use Firebase Analytics to understand how the App is used (e.g., which features are most popular, session duration). This data is aggregated and does not include personally identifiable information (PII). You can opt out of analytics collection in your device Settings under the App's privacy controls.
We use Firebase Crashlytics to collect crash logs and diagnostic data. This helps us identify and fix bugs. Crash reports may include device model, OS version, and stack traces but do not contain personal data.
ShiftWallet can access your camera and photo library for two specific, optional purposes: (1) to take or pick a photo to use as a custom job icon, and (2) to capture or import a photo of a paycheck for the optional AI paycheck scanner described in Section 5. Camera and photo access is only granted with your explicit permission and only the image you select is used. We do not browse, copy, or upload other images from your library.
ShiftWallet does not collect or access:
We use the information we collect to:
Core ShiftWallet functionality — clock in/out, hour tracking, pay calculation with differentials (night, overtime, holiday), tax estimation, paycheck verification math, and reports — is performed entirely on your device. These deterministic calculations never leave your device.
ShiftWallet offers two optional AI-assisted features that are off by default and only activate after you explicitly enable them and provide your own API key for the AI provider you configure:
How your API key is handled: The API key you enter is stored securely in the iOS Keychain on your device. The key is never sent to Digital Nafta Portal FZCO servers. Network requests go directly from your device to the AI provider's API endpoint using your key, billed to your account with that provider.
What is sent to the AI provider when you use these features: the specific paycheck image you choose to scan, and the chat messages you type plus the structured paycheck context (job name, hours, amounts) needed to answer your question. We do not send your authentication credentials, location, or unrelated data.
The AI provider's role: When you use these optional features, the AI provider you configure acts as an independent data processor under your account. The AI provider's data handling is governed by their own privacy policy and API data usage policy, which you should review before enabling these features. Most major AI providers state that data submitted via the API is not used to train their models by default, but you should confirm this with your chosen provider.
You can disable AI features and remove your stored API key at any time in Settings > AI Features. Disabling them stops all communication with the AI provider from the App.
ShiftWallet uses the following third-party services:
We do not sell, rent, or share your personal data with any other third parties.
Your data is retained for as long as your account is active. If you delete your account (Settings > Delete Account), all associated data is permanently removed from our servers within 30 days. Local data on your device is deleted immediately upon account deletion.
You can delete your account at any time by going to Settings > Delete Account within the App. This action will:
This action is irreversible.
We implement industry-standard security measures to protect your data, including:
ShiftWallet is not designed for or directed at children under the age of 13. We do not knowingly collect personal information from children under 13. If we become aware that a child under 13 has provided us with personal data, we will take steps to delete that information promptly.
Depending on your jurisdiction, you may have the following rights regarding your personal data:
To exercise any of these rights, contact us at jan@digitalnafta.com. We will respond within 30 days.
Your data may be processed in countries outside your country of residence through our use of Firebase (Google Cloud infrastructure). Google maintains appropriate safeguards for international data transfers, including Standard Contractual Clauses where applicable.
We may update this Privacy Policy from time to time. We will notify you of any material changes by posting the new Privacy Policy within the App and updating the "Last updated" date. Your continued use of the App after changes constitutes acceptance of the revised policy.
If you have questions or concerns about this Privacy Policy, please contact us:
Email: jan@digitalnafta.com
Company: Digital Nafta Portal FZCO
Address: Building A1, Dubai Digital Park, Dubai Silicon Oasis, Dubai, UAE