Your data mainly stays on your phone
With Hangdate, your shifts, calendars, and settings mainly stay on your device. We only send what is needed to our servers when you use features such as groups, sign-in, backups, and AI import.
We do not use advertising tracking. The iOS privacy manifest (PrivacyInfo.xcprivacy) sets NSPrivacyTracking to false and lists no tracking domains.
Categories of data we may process
According to the privacy manifest and product needs, and only for app functionality (not tracking), we may process:
- Email address and display name (sign-in and account)
- User ID (Firebase UID) and device identifiers (for example for push delivery)
- Photos/videos and other user content (files you choose to upload for AI roster import; calendar content written after you confirm)
- Product interaction, crash data, and other diagnostic data (to keep the service working and to debug)
In the privacy manifest these types are marked as linked to your identity, used for App Functionality, and not used for tracking.
AI import (photos and PDFs)
A photo or PDF is uploaded for processing only when you choose AI import. Without AI, reading stays on your device. We ask for explicit consent before any upload.
AI runs on the paid Google Gemini tier; your data won’t be used to train AI. After processing we delete immediately and do not keep the photo or PDF.
Each import keeps a short job record (so you can preview or reopen a draft) for about 7 days. That record stores the file type (extension only), not the full filename or the photo/PDF content.
Deleting your account
You can delete your account in the app under Settings › Privacy › Delete account. After deletion we remove your personal data and content — including shifts, calendars, group data, AI import records, and settings.
To discourage abusive re-registration and to handle earlier abuse reports, we keep only a random account ID (Firebase UID) with a “deleted” marker. No name, no email, no calendar content — and it is not used to track you. System backups and logs expire within 30 days at the latest.
You leave every group; other members still see their own data, but not your free time. Hangdate data synced in your iCloud is deleted as well.
Processors that help us
- Google Firebase — sign-in, account verification, push, and crash reporting
- Neon — backend database
- Google Cloud Run — API servers
- Google Gemini (paid) — roster photo/PDF processing only when you choose AI import
- Apple CloudKit — iPhone-to-iPhone sharing and personal backups (subject to your device iCloud settings)
Permissions
Camera, calendar, and notification access are requested only when you use the related feature. Photo picks use the system picker; we do not require full photo-library access for AI import. See also the in-app permission copy.
Contact
For privacy questions, email us from the support page.
© 2026 Hangdate