Terms of Service

Effective Date: 1 June 2025 | Version 1.0 | Egypt

1. About Shiftat

Shiftat is a mobile marketplace application operated under the name Shiftat ("we", "our", "us", "the Platform"). Shiftat connects healthcare professionals in Egypt who need shift coverage with healthcare professionals who are available to work additional shifts.

Shiftat operates as a technology platform only. We are not a healthcare provider, a staffing agency, a medical employment agency, or a healthcare recruitment service. We do not employ, contract, engage, or place any healthcare professional in any capacity. All arrangements made through the Platform are exclusively between the parties who agree to them.

2. Eligibility

You may only use Shiftat if you meet ALL of the following conditions:

• You are at least 18 years of age.
• You are a healthcare professional, healthcare facility representative, or HR manager working within the healthcare sector.
• You are located in or operating within the Arab Republic of Egypt or any other jurisdiction in which Shiftat is available.
• You have the full legal capacity to enter into a binding agreement under the laws of the Arab Republic of Egypt.
• You have not been previously suspended or permanently banned from Shiftat.
• By creating an account, you represent and warrant that all of the above conditions are met. If you do not meet these conditions, you must not create an account or use the Platform.

3. Nature of the Platform — Marketplace Only

Shiftat is a neutral technology intermediary that provides a marketplace for users to post and discover shift opportunities. By using the Platform, you expressly acknowledge and agree that:

• Shiftat is not a staffing agency, employment agency, recruitment company, or healthcare service provider of any kind.
• Shiftat does not screen, vet, verify, endorse, recommend, or approve any user or any shift posting.
• Shiftat does not verify professional credentials, medical licences, specialty certifications, work history, or any other professional claim made by any user.
• Shiftat has no role in, and bears no responsibility for, any aspect of the employment, contractual, financial, or working relationship between users.
• Any shift arrangement agreed between users is a private arrangement solely between those users. Shiftat is not a party to that arrangement.
• Shiftat bears absolutely no responsibility for any clinical outcomes, patient safety issues, errors, omissions, or adverse events arising from or connected to any shift arrangement made through the Platform.

4. User Accounts

4.1 Account Registration

You must create an account to use Shiftat. You agree to provide accurate, current, and complete information during registration and to keep your account information updated at all times.

4.2 Account Security

You are solely responsible for maintaining the confidentiality of your account credentials. You must not share your account with any other person. You are fully responsible for all activity that occurs under your account, whether or not authorised by you. You must notify us immediately at support@shiftat.online if you suspect any unauthorised use of your account.

4.3 One Account Per User

Each individual or entity may maintain only one active account. Creating duplicate or multiple accounts is prohibited and may result in suspension of all associated accounts.

4.4 Unified Account Model

Every Shiftat account has equal access to both shift-posting and shift-application functionality. There are no separate account types. Any user may post shifts and apply for shifts using the same account.

5. Shift Postings

5.1 Posting Requirements

Users who post shifts ("Posters") represent and warrant that:

• They have the authority to post the shift on behalf of the relevant facility or practice.
• All information in the shift posting is accurate, complete, and not misleading.
• The shift posting complies with all applicable Egyptian laws and regulations, including those governing employment, healthcare staffing, and professional licensing.
• The pay rate stated in the posting is the actual pay rate that will be honoured.

5.2 Prohibited Postings

You must not post any shift that:

• Contains false, misleading, or inaccurate information.
• Is intended to defraud, deceive, or mislead other users.
• Violates any applicable law, regulation, or professional licensing requirement.

6. Shift Applications and Acceptance

When a user applies for a shift, they represent that they meet the stated requirements for that shift, including any required specialty, experience level, or certification. Shiftat does not verify this representation.

When a Poster accepts an Applicant, a direct arrangement is formed exclusively between those two parties. Shiftat is not a party to, and bears no responsibility for, any aspect of that arrangement, including but not limited to pay, working conditions, professional standards, patient safety, or liability.

7. Withdrawal and No-Show Policy

7.1 Withdrawal by Accepted Worker

If you have been accepted for a shift and need to withdraw, you must use the in-app withdrawal function and provide a reason. A notification will be sent to the Poster immediately. Repeated or last-minute withdrawals may result in account suspension.

7.2 No-Show

A no-show occurs when an accepted worker fails to attend a shift without providing adequate notice through the withdrawal function. Shiftat reserves the right to suspend or permanently terminate the account of any user confirmed as having failed to appear for a confirmed shift.

7.3 No Liability for Shift Coverage Failures

Shiftat bears absolutely no liability, financial or otherwise, for any consequences arising from a no-show, late withdrawal, unfilled shift, or any failure by any user to fulfil a shift commitment. This includes but is not limited to any clinical, operational, reputational, or financial consequences for the relevant facility.

8. Ratings and Reviews

Shiftat provides a mutual post-shift rating and review system. By submitting a rating or review, you agree that:

• Your review is based on your genuine, first-hand experience of the completed shift.
• Your review is honest, accurate, and not intended to harm, defame, or harass any other user.
• You will not submit false, malicious, retaliatory, or fabricated reviews.
• Shiftat reserves the right, but has no obligation, to review, moderate, remove, or refuse to publish any rating or review at its sole discretion. Shiftat is not responsible for the content of user-generated reviews.
• Shiftat expressly disclaims all liability for any reputational, financial, professional, or other harm arising from ratings or reviews submitted by other users. If you believe a review is false or defamatory, contact us at support@shiftat.online.

9. In-App Chat

Shiftat provides an in-app messaging function between the two parties to a confirmed shift. This chat is created automatically upon acceptance and becomes read-only 48 hours after the shift end date.

By using the in-app chat, you agree:

• Not to use the chat for harassment, threats, fraud, unsolicited solicitation, or any unlawful purpose.
• That Shiftat may retain chat logs for safety, dispute resolution, and platform moderation purposes.
• That Shiftat reserves the right to review chat content for safety and policy compliance.
• Shiftat is not responsible for the content of messages exchanged between users. Text-only communication is supported.

10. Payments

Shiftat does not process, collect, hold, transfer, guarantee, or arbitrate any payments between users. All financial arrangements are exclusively between the Poster and the Applicant. Shiftat bears no responsibility for any payment dispute, non-payment, underpayment, or any financial matter arising from a shift arrangement.

The pay rate displayed on a shift posting is provided by the Poster. Shiftat does not verify or guarantee that this rate will be honoured.

11. Prohibited Conduct

You must not use Shiftat to:

• Misrepresent your identity, credentials, qualifications, professional licences, or any other material information.
• Impersonate any other person or entity.
• Post false, misleading, or fraudulent shift listings.
• Harass, threaten, intimidate, or abuse any other user.
• Use the Platform for any purpose other than legitimate shift-related activity in the healthcare sector.
• Collect or harvest any personal data of other users without their express consent.
• Introduce any virus, malicious code, or harmful material to the Platform.
• Violate any applicable law, regulation, or professional code of conduct.

12. Account Suspension and Termination

Shiftat reserves the right, at its sole discretion, to suspend, restrict, or permanently terminate any account at any time, with or without notice, for any reason, including but not limited to:

• Breach of these Terms of Service.
• Providing false or misleading information.
• Reports of fraud, misrepresentation, or professional misconduct.
• Confirmed no-shows or repeated last-minute withdrawals.
• Any conduct Shiftat deems harmful to the Platform, its users, or any third party.
• You may terminate your account at any time through the account deletion function in the app. Upon termination, your public profile data will be removed from view, subject to our data retention obligations under applicable law.

13. Intellectual Property

The Shiftat name, logo, design, application, code, content, and all other elements of the Platform are the exclusive intellectual property of Shiftat or its licensors. Nothing in these Terms grants you any right, title, or licence to any Shiftat intellectual property.

By submitting content to the Platform (including profile information, shift postings, and reviews), you grant Shiftat a non-exclusive, worldwide, royalty-free licence to use, store, display, and process that content for the purposes of operating the Platform.

14. Disclaimer of Warranties

15. Limitation of Liability

TO THE MAXIMUM EXTENT PERMITTED BY APPLICABLE LAW, SHIFTAT SHALL NOT BE LIABLE FOR ANY INDIRECT, INCIDENTAL, SPECIAL, CONSEQUENTIAL, OR PUNITIVE DAMAGES ARISING FROM YOUR USE OF THE PLATFORM, INCLUDING BUT NOT LIMITED TO: ANY CLINICAL OUTCOMES OR PATIENT HARM; ANY FAILURE TO FILL A SHIFT; ANY PAYMENT DISPUTE; OR ANY PROFESSIONAL OR REPUTATIONAL HARM ARISING FROM REVIEWS.

To the extent that any liability of Shiftat is not excluded, the total aggregate liability of Shiftat to any user shall not exceed the amount paid by that user to Shiftat in the three months immediately preceding the event giving rise to the claim. Where Shiftat has been provided at no cost, total liability shall not exceed EGP 100.

16. Indemnification

You agree to indemnify and hold harmless Shiftat and its operators, officers, employees, and agents from and against any claims, damages, losses, liabilities, costs, and expenses arising out of or related to:

• Your use of the Platform.
• Any shift arrangement you enter into through the Platform.
• Any breach of these Terms of Service by you.
• Any misrepresentation of your identity, credentials, or qualifications.
• Any clinical, operational, or professional consequences arising from your conduct in connection with any shift.

17. Medical Disclaimer

18. Governing Law and Dispute Resolution

These Terms of Service are governed by and construed in accordance with the laws of the Arab Republic of Egypt.

Any dispute arising out of or in connection with these Terms shall first be submitted to good-faith negotiation. If unresolved within 30 days, it shall be referred to arbitration in Cairo, Egypt, in accordance with the rules of the Egyptian Centre for Arbitration and Settlement of Disputes (ECASD).

19. Amendments to These Terms

Shiftat reserves the right to amend these Terms at any time. If we make material changes, we will notify you via in-app notification. Continued use of the Platform after the effective date of any amendment constitutes acceptance of the revised Terms.

The most current version will always be available at https://shiftat.online/?tab=terms.

20. Severability

If any provision of these Terms is found to be invalid or unenforceable, that provision shall be modified to the minimum extent necessary to make it enforceable, and the remaining provisions shall continue in full force and effect.

21. Entire Agreement

These Terms of Service, together with our Privacy Policy, constitute the entire agreement between you and Shiftat with respect to your use of the Platform and supersede all prior agreements or representations.

22. Contact

For questions, concerns, or complaints regarding these Terms of Service:

• Shiftat
• Email: support@shiftat.online
• Website: https://shiftat.online/?tab=terms
• Shiftat Terms of Service | Effective 1 June 2025 | Version 1.0 | Egypt

Privacy Policy

Effective Date: 1 June 2025 | Version 1.0 | Egypt

This Privacy Policy explains how Shiftat collects, uses, stores, shares, and protects your personal data. By using the Shiftat mobile application, you acknowledge that you have read and understood this policy. If you do not agree, you must not use the Platform.

1. Who We Are

Shiftat ("we", "our", "us") operates the Shiftat mobile application, a healthcare shift marketplace serving the Egyptian market. We are the data controller in respect of personal data collected through the Platform.

Contact for privacy matters: support@shiftat.online

Website: https://shiftat.online/?tab=privacy

2. What Data We Collect

We collect the following categories of personal data:

2.1 Account and Identity Data

Full name

Email address

Password (stored in encrypted form only; we never store plaintext passwords)

Primary intent selection (Medical Professional or HR/Facility)

Date of account creation

2.2 Professional Profile Data

Medical specialty and sub-specialty

Years of professional experience

Professional certifications and qualifications as stated by you

Facility name, type, and location (for HR/Facility users)

Phone number (optional, provided by you)

Profile photograph (if uploaded by you)

Hospital photographs (if uploaded by you)

2.3 Shift and Activity Data

Shift postings you create (specialty, date, time, location, pay rate, description)

Shift applications you submit

Shift history (completed, cancelled, withdrawn shifts)

Application statuses (pending, accepted, rejected, withdrawn)

2.4 Ratings and Reviews

Ratings and written reviews you submit about other users

Ratings and reviews submitted by other users about you

The hospital name and department associated with each reviewed shift

2.5 Communications Data

In-app chat messages between you and another user for a confirmed shift

Support enquiries and correspondence submitted through Contact Us

2.6 Technical and Device Data

Device type and operating system

App version

Unique device identifiers

Push notification tokens (used to deliver app notifications to your device)

IP address and approximate geographic location at login (collected automatically)

In-app usage logs (screens visited, actions taken, timestamps)

3. How We Collect Your Data

We collect your data in the following ways:

• Directly from you: when you create an account, complete your profile, post or apply for a shift, submit a review, use in-app chat, or contact support.
• Automatically: when you use the app, we collect technical and usage data through our backend infrastructure (Supabase) and push notification service (Expo Notifications).
• From other users: when another user rates or reviews you after a completed shift.

4. Why We Use Your Data (Legal Bases)

We process your personal data for the following purposes and on the following legal bases:

4.1 Performance of Contract

To provide, operate, and maintain the Shiftat Platform, including:

• Creating and managing your account.
• Displaying your profile to other users in connection with shift applications and postings.
• Facilitating shift applications, acceptances, and notifications.
• Enabling in-app chat between parties to a confirmed shift.
• Processing and displaying ratings and reviews.

4.2 Legitimate Interests

Where we have a legitimate interest that is not overridden by your rights, including:

• Platform security, fraud prevention, and abuse detection.
• Improving the Platform through analysis of usage patterns.
• Retaining records of completed shifts and user activity for dispute resolution.
• Sending you system notifications related to your account and shift activity.

4.3 Legal Obligation

Where we are required to process or retain data by applicable Egyptian law, including Egypt's Personal Data Protection Law (Law No. 151 of 2020) and any other applicable legislation.

4.4 Consent

Where you have given us your explicit consent, such as for optional features. You may withdraw consent at any time by contacting us at support@shiftat.online, though withdrawal will not affect processing already carried out.

5. How We Share Your Data

We do not sell your personal data. We share your data only in the following circumstances:

5.1 With Other Users

Your profile information is visible to other users of the Platform for the purpose of shift matching. Specifically:

• Your name, specialty, experience, certifications, rating (once public), shift history count, and verified badge are visible to users reviewing applicants for their shift.
• Your facility name, type, location, and poster rating are visible to users browsing and applying for shifts you post.
• Reviews you write about other users are visible on the reviewed user's profile.
• Reviews written about you are visible on your profile.
• You acknowledge that professional information you provide, including specialty, certifications, and work history, will be visible to other users of the Platform in connection with shift activity. Do not include information on your profile that you do not wish to be visible to other users.

5.2 With Service Providers

We share data with trusted third-party service providers who process data on our behalf, under data processing agreements:

• Supabase Inc. (United States): Our backend database and infrastructure provider. Stores all account data, shift data, messages, and usage logs on our behalf. Supabase processes data under their standard data processing agreement.
• Expo (United States): Our push notification delivery service. Receives push notification tokens to deliver in-app notifications to your device. No message content is stored by Expo.
• We may add additional service providers in the future. Any new provider that processes personal data will be listed in an updated version of this Privacy Policy.

5.3 Legal Requirements

We may disclose your data where required by law, court order, or regulatory authority, or where we believe disclosure is necessary to protect the rights, property, or safety of Shiftat, our users, or the public.

5.4 Business Transfers

If Shiftat is involved in a merger, acquisition, or sale of assets, your personal data may be transferred to the successor entity. You will be notified of any such transfer via in-app notification or email.

6. Data Retention

We retain your personal data for as long as your account is active. If you delete your account, we will delete or anonymise your personal data within 90 days of the deletion request, except where we are required to retain data by law or for legitimate purposes including:

• Dispute resolution: chat logs and shift records related to unresolved disputes may be retained until the dispute is concluded.
• Legal obligations: data required to be retained under Egyptian law will be retained for the legally required period.
• Safety: data relating to safety incidents, reports of misconduct, or account suspensions may be retained to prevent re-registration or abuse.
• Reviews you have submitted about other users will be retained even if your account is deleted, in anonymised form, as they form part of other users' public profiles.

7. Your Rights Under Egyptian Law

Under Egypt's Personal Data Protection Law (Law No. 151 of 2020), you have the following rights in respect of your personal data:

7.1 Right of Access

You have the right to request a copy of the personal data we hold about you. Submit your request to support@shiftat.online. We will respond within 30 days.

7.2 Right of Rectification

You have the right to correct inaccurate or incomplete personal data. You can update most profile information directly in the app. For data you cannot update in-app, contact us at support@shiftat.online.

7.3 Right of Erasure

You have the right to request deletion of your personal data. You may delete your account through the app settings. For specific data deletion requests, contact us at support@shiftat.online. We will fulfil deletion requests subject to our legal retention obligations noted in Section 6.

7.4 Right to Object

You have the right to object to processing of your personal data carried out on the basis of legitimate interests. Contact us at support@shiftat.online to exercise this right.

7.5 Right of Portability

You have the right to receive your personal data in a structured, machine-readable format. Contact us at support@shiftat.online to make a portability request.

To exercise any of the above rights, contact us at support@shiftat.online with the subject line "Data Rights Request". We will respond within 30 days. We may need to verify your identity before processing your request.

8. Data Security

We implement the following technical and organisational measures to protect your personal data:

• All data is transmitted over encrypted HTTPS connections.
• Passwords are stored using industry-standard one-way cryptographic hashing. We never store plaintext passwords.
• Access to the backend database (Supabase) is restricted by Row Level Security (RLS) policies that prevent users from accessing data that does not belong to them.
• Push notification tokens are used only for delivering notifications and are not exposed to other users.
• Database infrastructure is managed by Supabase with automated backups and security patches.
• No system is completely secure. While we take reasonable measures to protect your data, we cannot guarantee absolute security. You are responsible for maintaining the security of your account credentials. Notify us immediately at support@shiftat.online if you suspect a security breach.

9. Children's Privacy

Shiftat is not intended for use by persons under the age of 18. We do not knowingly collect personal data from anyone under 18. If we become aware that a user is under 18, we will immediately suspend their account and delete their data. If you believe a user under 18 has created an account, please notify us at support@shiftat.online.

10. International Data Transfers

Your personal data is stored and processed by Supabase Inc. on servers that may be located outside of Egypt, including in the United States. By using Shiftat, you consent to this transfer. We ensure that any such transfer is protected by appropriate safeguards as required under Egypt's Personal Data Protection Law.

11. Push Notifications

Shiftat sends push notifications to your device for the following purposes:

• New applicants on your shift postings.
• Shift application status updates (accepted, rejected).
• Shift withdrawal notifications.
• Post-shift rating requests.
• Unread messages in in-app chat.
• System announcements and Platform updates.
• You can disable push notifications at any time through your device's notification settings. Disabling notifications does not delete your account or personal data.

12. Cookies and Analytics

The Shiftat mobile application does not use web browser cookies. Technical usage data (screens visited, actions taken, session information) is collected through our backend infrastructure for the purposes of operating the Platform and detecting abuse. We do not currently use any third-party analytics tools that independently collect data from your device.

13. Links and Third-Party Content

Shiftat may display links to third-party content, such as hosted Terms of Service or Privacy Policy documents. We are not responsible for the privacy practices of any third-party website or service. This Privacy Policy applies only to data collected through the Shiftat application.

14. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. If we make material changes, we will notify you through an in-app notification and update the effective date at the top of this document. Continued use of the Platform after the effective date of any update constitutes acceptance of the revised policy.

The most current version will always be available at https://shiftat.online/?tab=privacy.

15. Data Controller Information and Contact

If you have any questions, concerns, or requests relating to this Privacy Policy or your personal data, please contact us:

• Shiftat
• Email: support@shiftat.online
• Website: https://shiftat.online/?tab=privacy
• We aim to respond to all privacy-related enquiries within 30 days.
• Shiftat Privacy Policy | Effective 1 June 2025 | Version 1.0 | Egypt