Privacy policy

QED Shift is a general wellness app. It gives general suggestions about sleep timing, naps, light and caffeine around your roster. It does not diagnose, treat or monitor any medical condition and is not a substitute for advice from a health professional. If you’re worried about your health, sleep or fatigue, please talk to a doctor.

1. Who this policy is for

QED Shift is for adults (18 and over). We don’t knowingly collect information from anyone under 18. If you believe a child has an account, contact us and we’ll delete it.

2. What we collect

Account information: your name, email address and sign-in details. You can sign in with email (we send a one-time code), Sign in with Apple or Google. We also collect any workplace access code you enter.

Onboarding and profile: role, work pattern, time zone, usual sleep times, and answers you choose to give (age band, chronotype, caffeine and alcohol habits, exercise timing, goals).

Your roster: shifts you enter, or import from your phone’s calendar (read-only; we only read events to find your shifts) or from a roster link. Roster links are stored encrypted.

Sleep, recovery and logs:

• sleep and naps you log or correct;
• recovery ratings and check-ins;
• quick logs (caffeine, naps, exercise, alcohol, stress, illness, medication name only, meals);
• free-text notes you type;
• whether you marked each suggestion done, skipped or can’t do, and any reason.

Apple Health (optional, read-only). If you connect Apple Health, we read the types you allow and send them to our servers:

• sleep and sleep stages;
• heart rate, resting heart rate, heart rate variability, blood oxygen (SpO2), respiratory rate and body temperature;
• steps, distance, flights climbed, exercise time and active energy;
• height, weight and BMI.

We never write to Apple Health. We don’t use Apple Health data for advertising or sell it. You choose which types to share, and you can change this at any time in the Health app.

G Band wearable (optional). If you pair a G Band, the app reads its data over Bluetooth and syncs it to our servers.

Voice and speech. Any speech-to-text in QED Shift runs on your device. Voice onboarding that uses an online service is not available in this version.

Check-in notes you type. Your typed check-in notes stay on your device. QED Shift may pick out short themes from a note on your phone (for example "poor sleep" or "late caffeine"). Those themes, never your words, are sent to our servers only if you turn on "AI help with check-ins" (see section 3).

How you heard about QED Shift (optional): your answer, if you give one.

Technical information:

• device type, app version, sign-in events, notification settings and a notification token;
• crash and error reports;
• app settings we load remotely;
• the address of your device (IP address) when the app loads fonts or contacts our servers.

We treat your roster, sleep and recovery information, logs, responses, Apple Health data and wearable data as health information. This is sensitive information under the Privacy Act. We collect it only with your consent, which you give when you set up QED Shift, and only because it’s needed to give you your plan.

3. Why we use it

To provide QED Shift. We use your information to:

• build your daily plan;
• schedule reminders (we hold reminders during your planned sleep);
• show patterns and experiments;
• run your account.

AI-assisted planning. We send a limited summary to the Microsoft Azure OpenAI service to help word and time your plan. The summary covers your upcoming shifts, recent sleep and recovery, recent logs and your responses to past suggestions. Your typed notes are never sent. If you turn on the optional "AI help with check-ins" setting, only the short themes your phone picks out of a note are sent to the same Australian AI service to help shape your plan. You can turn this off at any time in Settings → Privacy. Safety rules check every AI output, and if the AI is unavailable, a rules-based plan is used instead. The AI service runs in Australia (section 7).

To run, secure and fix QED Shift. We use account, setup and technical information to:

• keep the app secure;
• fix errors and respond to support;
• count, as combined numbers only, how many people sign up and complete setup.

These counts come from account and setup records, not your health information. They contain no names, and we don’t report groups of fewer than five people.

How people find QED Shift. If you answer this optional question, we combine it only with those setup counts, never with your health information.

We do not:

• sell your information;
• use health information for advertising or marketing;
• share your information with your employer;
• use it for decisions about your employment;
• use your information for research, including research papers or studies, unless you give separate, specific consent for that research first.

4. Product analytics (optional, off unless you turn it on)

With your separate consent, we use information from your use of QED Shift to check whether features are working and to improve them. This covers:

• the suggestions shown to you and when;
• your responses (done, skipped, can’t do, and any reason);
• your check-ins and sleep and recovery ratings;
• Apple Health sleep totals and stages, if connected.

• It’s separate from your other choices, off unless you turn it on, and you can skip it during setup.
• Saying no doesn’t change how QED Shift works for you.

Product analytics is for checking and improving QED Shift. It isn’t research, and we don’t publish it in research papers. If we ever want to use QED Shift information for research, we’ll ask you separately first, and saying no won’t change how the app works for you.

• Turn it on or off at any time in Settings → Privacy. Our analysis only includes people whose setting is on at the time.
• When you turn it off, we stop using your information for product analytics from that point.
• Combined figures we’ve already reported in de-identified form can’t be traced back to you and won’t change.
• We only report combined numbers, never for groups of fewer than five people. In our live service, our internal tools show combined figures only; QED staff can’t view an individual’s records through them. (Our separate test system holds only test and staff data.)

5. Who we share information with

We share information only with:

• the service providers in section 7, who may use it only to provide services to us;
• anyone you ask us to share with;
• others where the law requires or allows it (for example, to lessen a serious threat to someone’s life, health or safety).

If you used a workplace access code, we don’t share your plan, health information or responses with your workplace.

6. Storage and security

QED Shift’s servers run on Microsoft Azure in Australia (Australia East). We protect your information with:

• encryption in transit and for sensitive fields;
• access controls and read-only, aggregate-only access for analysis;
• redaction of personal information from server logs;
• secrets held in a key vault.

No system is perfectly secure. If a data breach is likely to cause serious harm, we’ll notify you and the OAIC under the Notifiable Data Breaches scheme.

7. Service providers and overseas disclosure

• Microsoft Azure (app servers, database, file storage, messaging, key vault, monitoring, web delivery). What it does: hosting QED Shift. Information: all app data. Location: Australia. Web delivery (Front Door) uses Microsoft’s global network.
• Microsoft Azure OpenAI. What it does: AI-assisted plan wording; check-in themes (only with "AI help with check-ins" on). Information: plan summary; extracted themes (never your typed text). Location: Australia.
• Google Firebase Cloud Messaging, with Apple Push Notification service. What it does: delivering reminders. Information: notification token, reminder title and text, which can include shift and plan times when "Show details in notifications" is on. Location: USA and other countries.
• Google Firebase Remote Config. What it does: app settings. Information: device and app identifiers. Location: USA and other countries.
• Sentry. What it does: crash and error reports. Information: device, app version, error details (we don’t send your name or email by default).
• Resend. What it does: sign-in codes, invites and account emails. Information: email address, email content.
• Apple and Google. What it does: Sign in with Apple and Google; App Store and Google Play purchases. Information: sign-in and purchase details, under their own policies. Location: their locations.
• Google Fonts. What it does: displaying text. Information: your IP address. Location: USA and other countries.

Where a provider handles information outside Australia, we take reasonable steps to make sure it handles that information consistently with the Australian Privacy Principles. Your health information is stored on Microsoft Azure in Australia; some service providers may process limited data overseas. Only non-health information goes to the overseas providers above (notification tokens, email addresses, crash metadata, and your IP address for fonts). One exception: if "Show details in notifications" is on, reminder text can include your shift times and plan times (for example "Your night shift is now 7:00 pm–7:30 am" or "Wind down soon: your sleep starts at 9:00 am"). That text passes through Apple’s and Google’s notification servers, which may be outside Australia. Reminders never include your check-in notes, sleep or recovery figures, or AI-written text. Turn the setting off and reminders use general wording, such as "A cue for your next sleep is ready." Reminder notifications are written so they don’t contain health information.

8. How long we keep information

• Account and app information: while your account is open.
• Product analytics records: 24 months, then deleted or de-identified. If you turn product analytics off or delete your account, we stop using your records for analytics.
• Server logs: short-term, with personal information redacted. Our AI logs hold only technical counts, not your text.
• Some providers keep copies for their own limited periods:
  • Microsoft’s AI service may keep prompts for abuse monitoring;
  • Sentry keeps error reports;
  • Resend keeps email logs;
  • our database backups are kept.

9. Access, correction, withdrawal and deletion

• Access and correction: you can view and edit most information in the app. To request a copy or a correction, email contact@qedhealth.com.au. We’ll respond within 30 days.
• Notification details: reminders can show your shift and plan times on your lock screen, where anyone holding your phone can see them. Turn off Settings → Notifications → Show details in notifications to get general reminders instead, or turn notifications off completely.
• Withdrawing consent: turn off product analytics, Apple Health access, G Band pairing, calendar access or notifications at any time. QED Shift can’t work without handling your roster and sleep information, so withdrawing that consent means deleting your account.
• Deleting your account: delete it in Settings, or email us. We then delete your account, profile, roster, sleep, recovery, logs, responses, wearable and Apple Health data, and analytics records from our systems, and reminders on your device are cancelled. Some copies aren’t removed straight away:
  • copies held by service providers under their own retention periods (section 8), such as crash reports, email logs and AI abuse-monitoring records;
  • database backups, until they expire.

  We don’t use these copies to identify you, and they are deleted on those providers’ and our backup schedules.

• What QED Shift has worked out about you: in Settings → Privacy → Memory, you can clear the profile answers you gave and tell QED Shift to stop using things it believed about you. This doesn’t yet cover everything: your experiments, patterns, Playbook, the sleep times we work out, and other profile inferences aren’t cleared there. To have those removed, email us or delete your account.
• Anonymity: you can’t use QED Shift anonymously, because your plan depends on your account and roster. You may use a pseudonym.

10. Complaints

Contact contact@qedhealth.com.au. We’ll acknowledge your complaint within 7 days and aim to resolve it within 30 days. If you’re not satisfied, contact the Office of the Australian Information Commissioner (www.oaic.gov.au, 1300 363 992).

11. Changes

We’ll update this policy and the "Effective" date at the top when we change it. If a change means we’d use your health information for a new purpose, we’ll ask for your consent first.

Contact

RSHL Systems Pty Ltd trading as QED Health Systems, ABN 88 671 998 128, contact@qedhealth.com.au.