Privacy Policy
Last updated: 17 June 2026
This policy explains how Energycount Limited (“we”, “us”), the provider of the FlashShift app and website (the “Service”), collects and uses personal data, and your rights under UK data protection law (UK GDPR and the Data Protection Act 2018). We are the data controller for the personal data described here.
Who the Service is for
FlashShift is a business tool. Managers create a team and broadcast open shifts; workers join a team with a code and claim shifts. We process data about both managers and workers.
Information we collect
- Account details — your mobile phone number (used to sign in via one-time code) and the display name you provide.
- Role & team data — whether you are a manager or worker, your industry, and the team you belong to.
- Shift data — shifts created, claimed, withdrawn, swapped or cancelled, and the times involved.
- Push notification token — a device token (if you enable notifications) so we can alert you when a shift is posted.
- Billing data — for managers who subscribe, payment is handled by Stripe; we store your subscription status and identifiers, not your card details.
- Technical data — basic logs needed to operate and secure the Service.
How and why we use it
We use your data to provide the Service: to authenticate you, show your team’s shifts, send shift notifications, run subscriptions and trials, and keep the Service secure. Our legal bases are performance of a contract (operating your account and team), legitimate interests (security, improving and supporting the Service), and consent (push notifications, which you can turn off any time in Settings or your device settings).
Who we share it with
We do not sell your data. We use trusted processors to run the Service:
- Supabase — database, authentication and hosting.
- Stripe — subscription payments (managers only).
- Expo — delivery of push notifications.
- An SMS provider — to send your sign-in one-time codes.
Some providers may process data outside the UK; where they do, appropriate safeguards (such as UK/EU standard contractual clauses) are in place.
How long we keep it
We keep your data for as long as your account is active. If you delete your account (see below), we delete your profile and associated personal data, except where we must retain limited records to meet legal or accounting obligations.
Deleting your account
You can delete your account at any time from Settings → Delete account in the app. This removes your profile and personal data. If you are the only manager of a team that still has members, you will be asked to remove members or add another manager first, so the team is not left stranded. You can also email us to request deletion.
Your rights
Under UK GDPR you have the right to access, correct, delete, or restrict processing of your personal data, to object to processing, and to data portability. To exercise any of these, contact us below. You also have the right to complain to the UK Information Commissioner’s Office (ICO) at ico.org.uk.
Children
FlashShift is not intended for children. It is a workplace tool for people aged 16 or over, and we do not knowingly collect data from anyone under 16.
Changes to this policy
We may update this policy from time to time. We will change the “last updated” date above and, where appropriate, notify you in the app.
Contact
Energycount Limited — mail@energycount.co.uk. This policy is governed by the laws of England & Wales.