1Overview

Enso Shift (the "App") is an iOS and iPadOS application designed for shift scheduling. Our principle is simple: your data belongs to you.

This Privacy Policy explains how we handle data when you use the App. By default, we collect no data. You may also opt in to share anonymous diagnostics to help us improve scheduling algorithms.

2Data Collection Overview

The App operates in two modes:

• Default mode: all data stays local on your device, never uploaded
• Optional diagnostics mode: when enabled, anonymous solver performance data is uploaded for algorithm improvement (see Section 6)

In either mode, we do not collect:

• Personal information (name, email, phone, etc.) — no account or sign-in required
• Scheduling content (staff names, shift names, specific dates, availability settings)
• Device identifiers (IDFA, UDID, IMEI, etc.)
• Location or network information

3Local Data Storage

Everything you create in the App — staff profiles, shift configurations, generated schedules — is stored locally on your device through Apple's standard storage mechanisms. By default, none of it is ever sent to us or any third party.

Locally stored data includes:

• Staff information (names, notes, personal configurations)
• Shift type and time-window definitions
• Schedules, constraint rules, and history
• App preferences

How to remove: Deleting the App removes all local data from your device.

4Network & Servers

All core functionality — including the scheduling solver and PDF export — runs locally on your device. With iCloud sync and diagnostics sharing turned off, the App works fully offline.

Network requests the App can initiate include:

• App Store subscription verification: triggered by the system when you purchase, restore, or verify an Enso Pro subscription. Talks only to the Apple App Store.
• iCloud sync (optional, off by default): see Section 5.
• Diagnostics upload (optional, off by default): see Section 6. Only over Wi-Fi, with anonymization and encryption.

5Optional iCloud Sync

You can enable iCloud sync in Settings to share scheduling data across devices signed in to the same Apple ID. When enabled:

• Transport: handled by Apple's iCloud Drive. Data is stored inside your own iCloud account; the developer cannot read, access, or export it.
• What is synced: scheduling settings, the current in-progress draft, and all saved schedules (including the staff, shifts, and assignments inside them).
• No identity information: we do not receive your Apple ID, name, email, or any account information as part of this.
• Same Apple ID only: data syncs only between devices signed in to your own Apple ID. It is never shared with other users.
• Can be turned off at any time: disabling the toggle stops syncing while keeping your local data. To remove data already saved to iCloud, go to Settings → Apple ID → iCloud → Manage Account Storage → Enso → Delete Data.

Apple's handling of iCloud data is governed by the Apple Privacy Policy.

6Optional Diagnostics Data

You can opt in to "Share Diagnostics" to help us improve scheduling algorithms. When enabled, the app anonymously uploads the following after each schedule solve:

Anonymization measures:

• Each upload uses a randomly generated identifier — no cross-upload linking
• All fields that could contain identity information are removed or converted to anonymous category codes on-device
• Holiday region data retains only country/region-level codes, with sub-regions removed
• Infeasible reasons record only constraint type categories, not specific staff or shift information

Data transmission & storage:

• Uploaded only over Wi-Fi — no cellular data consumed
• Data is encrypted and compressed before transmission
• Uses Apple's background transfer mechanism —不影响 app usage
• Stored in secure cloud storage with automatic 90-day expiration
• Protected against abuse via Apple App Attest technology

Data usage:

• Optimizing solve time budget estimation for scheduling algorithms
• Analyzing solve quality across different scales and configurations
• Improving solver strategies and preset configurations
• Identifying and addressing common causes of infeasible schedules

How to control:

• Toggle on/off anytime in Settings → Data & Privacy
• Turning off immediately clears locally cached diagnostics
• Previously uploaded data expires and is automatically deleted after 90 days

7Third-Party Services

The App integrates no third-party analytics, advertising, push, crash-reporting, or tracking SDKs. There is no Firebase, Google Analytics, Facebook SDK, AppsFlyer, Sentry, Crashlytics, or any similar service.

The network services the App relies on include only:

• Apple's system-provided App Store and iCloud services
• Secure cloud storage for diagnostics upload (only when enabled by the user)

8Device Permissions

The App does not request any of the following system permissions:

• Location (precise or approximate)
• Camera or Photo Library
• Microphone
• Contacts or Calendar
• Push Notifications
• Bluetooth or Local Network

9Children's Privacy

The App is intended for workplace scheduling and is not directed at children under 13. Even with diagnostics enabled, collected data does not contain any information that could identify children.

10Policy Changes

We may update this Privacy Policy from time to time. Any changes will be posted on this page and the "Last updated" date at the top will be revised accordingly. Material changes will be noted within the App.

11Contact