Privacy policy
Effective date: September 10, 2026.
ShiftReady LLC operates ShiftReady, a restaurant training service. Drew Shirback is the contact for questions about this policy. Contact: drew@shiftready.works.
Information we process
When you create an account, we process your name, email address, account identifier, and authentication information. If you sign in with Google, we receive your basic profile and email information. We do not request access to your Gmail messages, contacts, or Google Drive files.
Restaurant organizations provide location details, staff memberships and roles, menus, recipes, policies, and other uploaded training materials. ShiftReady stores assigned training, lesson progress, quiz and exam attempts and scores, practical sign-off records, and related timestamps and access activity. We also process technical information needed to operate and secure the service, including service logs, browser requests, and email delivery events.
How information is used
We use information to authenticate users, manage organization and location access, deliver training, calculate readiness, preserve progress, record trainer sign-offs, support content review and publication, send account and relevant training emails, provide support, and maintain the service.
The current training drafting tools extract and organize supplied materials. They do not send restaurant materials to a third-party generative AI service.
Who can access information
Employees can access their assigned workspace and training information. Authorized trainers, managers, organization owners, and ShiftReady platform administrators can access information appropriate to their roles. Your restaurant organization determines staff access and how it uses employee training records. Employees should contact their organization about its workplace training practices.
We use Google Firebase/Google Cloud for hosting, Supabase for authentication, database and file storage, and Resend for transactional email. These providers process information needed to deliver those services. Service processing may occur in the United States and other locations used by those providers. Information may also be disclosed when necessary to respond to lawful requests, protect the service, or carry out a business transfer, subject to applicable obligations.
ShiftReady does not use the current application to sell personal information or serve targeted advertising.
Cookies and browser storage
ShiftReady uses authentication cookies and browser storage needed to keep you signed in and remember interface preferences such as light or dark mode. The current application does not include advertising trackers.
Retention and requests
Account, membership, course-version, and training records are retained to operate the service and preserve training history. Removing access does not automatically erase historical training evidence. Contact drew@shiftready.works to request access, correction, or deletion of information, or to ask about retention. We will verify the request and coordinate with the restaurant organization where appropriate. Legal requirements, security needs, and backup recovery processes may affect what can be removed and when.
Security
ShiftReady uses authenticated access, organization and location permissions, database row-level security, private training-file storage, and encrypted connections. No internet service can guarantee absolute security.
Intended users
ShiftReady is intended for restaurant organizations and their authorized staff. It is not directed to children under 13. Contact us if you believe a child under 13 has supplied personal information.
Changes and contact
We may update this policy as the service changes. The published policy will show its effective date. Privacy questions and requests may be sent to Drew Shirback at drew@shiftready.works, ShiftReady LLC.