Privacy Policy

We use your data to: • Verify your identity and prevent fraud • Verify your mobile number by one-time SMS code, so that businesses can reach you about shifts you are hired for and so we can contact you about payouts and account security • Match workers with suitable shifts and providers with suitable workers • Process payments through our secure escrow system and disburse earnings to workers • Send you shift alerts, application updates, and important account notifications • Calculate your ratings, strikes, and trust score • Improve app features and fix bugs • Comply with Egyptian law and respond to lawful requests

We do not sell your personal data. We share data only with: Google / Firebase: Our backend infrastructure provider (Firestore database, file storage, push notifications, and mobile number verification by SMS). Data is processed under Google's Data Processing Agreement. Paymob: Our payment processor. When a provider pays for a shift or a worker receives a payout, Paymob processes the transaction. Payment card details are handled exclusively by Paymob and are never stored on GoodShift servers. Worker payout details (e.g. Vodafone Cash number) are shared with Paymob solely to execute the disbursement. Amplitude: Our analytics provider receives anonymised usage events (e.g. job posted, shift applied) to help us understand how the app is used. No personal identifiers are sent. Other users: Your public profile (name, photo, rating, reviews) is visible to other GoodShift users. Your mobile number, email address, NID, selfie, full payout details, and financial data are never shared publicly and are not visible to other users — including businesses that have hired you. Contact between you and a business happens through in-app chat. Legal authorities: If required by Egyptian law or a court order, we may disclose data to competent authorities.

Submitting your national ID and selfie is optional. When provided, this data is used solely to verify that you are a real person and to award a verification trust badge on your profile. It is stored securely in Firebase Storage, never displayed publicly in full, and is not used for advertising. Your KYC documents are reviewed by GoodShift administrators only. If you delete your account, this data is permanently erased within 30 days. Mobile number verification. Unlike identity verification, verifying your mobile number is required to use GoodShift — a business that hires you must be able to reach you about the shift, and we must be able to reach you about payouts and account security. When you enter your number we ask Google's Firebase Authentication service to send a one-time code by SMS to that number; entering the code proves the number is yours. To do this, your number is shared with Firebase Authentication and, through it, with the mobile operator that delivers the message. Standard message rates from your operator may apply. We keep your number, and a record that it was verified, for as long as your account exists. We use it to contact you about shifts, payouts, and account security. We do not use it for marketing, and we do not sell or rent it. Your number is never displayed on your public profile. If you cannot receive SMS, contact support@goodshift.work and we will verify your account another way.

GoodShift does not store full payment card numbers. All card processing is handled by Paymob (PCI-DSS compliant). Worker payout account numbers are stored in masked form (last 4 digits visible) within GoodShift's database. The full number is accessed only by our Cloud Functions when initiating a disbursement through Paymob's API — it is never accessible from the apps directly.

We keep your data for as long as your account is active. If you delete your account: • Profile and personal data: deleted within 30 days • KYC documents: deleted within 30 days • Transaction and payment records: retained for 7 years as required by Egyptian financial regulations • Reviews: anonymised and may remain visible without linking to your identity

You have the right to: • Access the data we hold about you • Correct inaccurate data at any time (via Edit Profile) • Delete your account and data (via Profile → Delete Account) • Object to how we use your data for purposes beyond service delivery To exercise any of these rights, contact us at support@goodshift.work

We use industry-standard security measures to protect your data, including encrypted transmission (HTTPS/TLS), Firebase security rules, restricted server-side access controls, and server-only payment operations (no payment logic runs in the apps). However, no system is 100% secure — please use a strong, unique password for your account.

If you post jobs as a company, we collect your company profile (company name, logo, industry, and contact details) and a record of the Business Client Agreement you sign in the app. This signed record includes the name and title you type as the authorized representative, the date and time of signing, the contract version, and the platform used. We use this data to verify business clients, to keep a legal record that you agreed to our platform terms, and — where needed — to contact you for further information before approving your account. The signed agreement is retained as a legal record for as long as your account exists and for any period required by applicable law after account deletion. Individual (non-company) job posters are not asked to sign this agreement.

While a piece of work is actually running, either party can share a link to a page showing the other party's first name, photo, verification status, the type of work, the work address, and the scheduled time. If you have provided an optional identity number, only its LAST FOUR characters appear. The link is a bearer link: anyone who holds it can open that page, with no GoodShift account and no sign-in, until it stops working. It stops working as soon as the work is completed or cancelled, and in any case within 24 hours of the work starting. We ask search engines not to index it and it is never listed anywhere; but you should treat sending it the same way you would treat sending any private detail, because whoever you send it to can forward it. Sharing your live location is OPTIONAL and OFF by default, every single time. It is never remembered between sessions, and turning it on is never implied by sharing the details. While it is on, your device sends its position to us about once a minute, and that position is visible only on the page behind a link YOU sent — not to the other party to the work, and not to anyone browsing GoodShift. Your operating system shows its own indicator the entire time it is on. It stops when you switch it off, when the work ends, when the link expires, or when you sign out; and our servers refuse to store a position at all once the work has ended. We keep only your most recent position, overwritten in place — there is no location history and no trail. The SOS control dials 122, the police, from your own phone. It is a dialler hand-off and nothing more: GoodShift is not called, is not notified at the time, and does not respond. We do record that the control was pressed, together with the work record, both parties, the time, and — when your device has one available — the position your device reported. That record is visible only to our own reviewers looking at patterns after the fact, and it is never used to decide payment, refunds, disputes or account standing. Emergency contacts you save are stored on your own account, visible only to you, and are never shown to anyone else, never included on the shared page, and never sent anywhere by us. They exist only so that sharing takes fewer taps.

GoodShift does not knowingly collect data from children under 13. If you believe a child's data has been submitted without parental consent, please contact us immediately and we will delete it promptly.

We may update this policy from time to time. We will notify you in-app when significant changes are made. The effective date at the top of this page will always reflect the latest version.

Privacy questions or requests: Email: support@goodshift.work Website: www.GoodShift.work Company: GoodShift, Egypt