Effective July 15, 2026
Who we are and what Smalti is
Smalti is a workforce scheduling platform — shift schedules, shift trading, and team messaging — provided to you through your employer. Your employer chooses to use Smalti, creates your account by invitation, and controls the organization your data belongs to. This policy explains what information the Smalti apps and service handle, and how.
Information we collect
- Account details: your name, work email address, cell number (collected when you accept your invitation), role, and the work location(s) and position qualifications your employer assigns you.
- Scheduling activity: the shifts you're assigned, marketplace posts, claims and swap offers you make, and their outcomes.
- Messages: messages you send in your team's position groups. Deleting a message removes its content; a "message deleted" placeholder remains.
- Notifications: the schedule and trade notifications delivered to your in-app inbox, and whether you've read them.
- Sign-in and device data: a securely hashed password (we never store the password itself), session tokens tied to your device, and — if you enable push notifications — a push token for your device.
What we don't collect
- No GPS or location tracking. "Locations" in Smalti are the work sites your employer defines — the app never accesses your device's location.
- No biometric data. Face ID / fingerprint unlock happens entirely on your device through the operating system; biometric information never reaches our servers.
- No advertising or tracking. Smalti contains no ads, no third-party analytics, and no data brokers. We do not sell your information — to anyone, ever.
How your information is used
Solely to operate the service: showing you your schedule, running the shift marketplace with its eligibility checks, delivering messages and notifications, sending invitation and account emails, and keeping your account secure. Audit records of administrative actions (for example, who changed a shift) are kept so your employer can account for schedule changes.
Who can see your information
Smalti is a workplace tool, and visibility follows your workplace: coworkers see your name on shared shifts, shift cards, and marketplace posts; members of a position group see the messages you send there; and your employer's managers and admins can see schedule data and the delivery status of work notifications for the people they oversee. Nobody outside your organization sees your data, and we disclose information beyond this only if the law requires it.
Where your data lives
Your data is stored on your employer's Smalti server. The mobile app also keeps a small offline copy of your recent shifts, notifications, and messages on your device so they remain visible without a connection; that cache is protected by your device's security and is cleared when you sign out.
Security
All traffic between the apps and the server is encrypted with TLS. Passwords are stored only as salted hashes. Sessions use short-lived tokens with rotating refresh tokens bound to your device, and signing out — or your employer deactivating an account — immediately revokes that device's access, including biometric unlock and push notifications.
Retention and deletion
Your information is retained while your account is active. When your account is permanently deleted, your personal data — assignments, marketplace activity, qualifications, sessions, and notifications — is deleted with it; shifts you created for others are kept for the schedule's integrity with your name removed. To exercise deletion or correction, contact your employer's Smalti administrator (who controls the organization's data), or reach us directly below.
Children
Smalti is an employment tool and is not directed to children under 16. We don't knowingly collect information from anyone under 16.
Changes to this policy
If this policy changes materially, we'll update this page and note the new effective date above.
Contact
Questions about privacy or your data: smalti_support@logikmancer.com, or visit our support page.