Privacy Policy
Updated March 10, 2026
RestUp, LLC d.b.a. MyShyft (“MyShyft”) is committed to protecting your privacy. We have prepared this Privacy Policy (the “Policy”) to describe to you our practices regarding the Personal Information (as defined below) we collect from (i) the users of our website (“visitors”) located at www.myshyft.org and/or the MyShyft mobile application and service (“Site”) and (ii) the Caregivers, and other third parties using our services (collectively, “Users”). Capitalized terms not defined in this Policy have the meanings given in our Terms of Use.
This Policy describes:
- The types of information we collect from you or that you may provide when you use the Site.
- Our practices for collecting, using, maintaining, protecting, and disclosing that information.
This Policy applies to information we collect on Service or in emails and other electronic messages between you and the Site.
This Policy does not apply to information collected by us offline or through any other means, including on any other website operated by MyShyft or any third party, or information collected by any third party through any application or content (including advertising) that may link to or be accessible from the Site (for further information, see below, “Third-party Platforms”).
Please read this Policy carefully to understand our practices regarding your information and how we will treat it.
1. User Consent
If you do not agree with our policies and practices, then please do not use the Site. By using the Site, you agree to the terms of this Policy, including the collection, use and disclosure of your personal information in accordance with this Policy. This Policy may change from time to time (see below, “Changes to this Policy”). Your continued use of the Site after we make changes is deemed to be acceptance of those changes, so please check the Policy periodically for updates.
2. Visitors Under the Age of 18
We do not intentionally gather Personal Information from visitors who are under the age of 18. If a user under the age of 18 submits Personal Information to MyShyft and we learn that the Personal Information is the information of a user under the age of 18, we will attempt to delete the information as soon as possible. If a parent or guardian becomes aware that his or her child has provided us with information without their consent, he or she should contact us. We will delete such information from our files as soon as reasonably possible.
3. Types of Data We Collect
“Personal Information” means data that allows someone to identify or contact you, including, for example, your name, address, telephone number, e-mail address, as well as any other non-public information about you that is associated with or linked to any of the foregoing data.
“Anonymous Data” means data that is not associated with or linked to your Personal Information; Anonymous Data does not, by itself, permit the identification of individual persons. We collect Personal Information and Anonymous Data, as described below.
(A) Information You Provide to Us. If you are a Caregiver, when you create an account to log in to our Site, we may collect Personal Information from you, such as your first and last name, birthdate, social security number, driver’s license number, criminal history, ethnicity, gender, religion, email and mailing address, phone number, work experience, salary/income, professional license numbers, education, professional and personal references, profile picture, professional skills and abilities, schedule availability, and bank information to facilitate direct deposit of earnings. If you are a user other than a Caregiver, such as a health care facility, when you create an account to log in to our Site, we may collect Personal Information from you, such as your first and last name, birthdate, social security or tax identification number, email and mailing address, phone number, and professional license number. We retain information on your behalf, such as files and messages that you store using your account. If you provide us feedback or contact us via e-mail, we will collect your name and e-mail address, as well as any other content included in the e-mail, in order to send you a reply. When you post messages or upload content within our Site, the information contained in your posting will be stored on our servers and other users to whom you provide access, will be able to see such messages and content. We also collect other types of Personal Information that you provide to us voluntarily, such as your operating system and version, and other requested information if you contact us via e-mail regarding support for the Sites. We may also collect Personal Information, at such other points in our Site that state that Personal Information is being collected. Please note that you can choose not to provide us with certain information, but this may limit the features of the Site or services you are able to use.
(B) Information Collected via Technology. To make our Site and services more useful to you, our servers (which may be hosted by a third party service provider) collect information from you, including your browser type, operating system, Internet Protocol (IP) address (a number that is automatically assigned to your computer when you use the Internet, which may vary from session to session), domain name, and/or a date/time stamp for your visit. We also use cookies and URL information to gather information regarding the date and time of your visit and the information for which you searched and which you viewed. “Cookies” are small pieces of information that a website sends to your computer’s hard drive while you are viewing a web site. We may use both session Cookies (which expire once you close your web browser) and persistent Cookies (which stay on your computer until you delete them) to provide you with a more personal and interactive experience on our Site. Persistent Cookies can be removed by following Internet browser help file directions. We may also use (i) third party tracking services to track and analyze Anonymous Data from users of our Site and services and (ii) location-enabled services for Caregivers as a means to facilitate time card data. If you use the location-enabled services, MyShyft may receive information about your actual location (such as GPS signals sent by a mobile device or via your web browser when on the Site).
(C) Information Collected from Others About You. Other Users may provide us Personal and/or Anonymous Data about you, such as a performance rating, through our Site.
(D) Information Collected from Third Party Companies. We may receive Personal and/or Anonymous Data about you from companies that assist MyShyft in providing the Sites. These third party companies may supply us with your Personal Information. We may add this information to the information we have already collected from you via our Site in order to provide and improve the Sites.
4. Use of Your Personal Information
(A) General Use. In general, Personal Information you submit to us is used either to respond to requests that you make, or to aid us in serving you better. We use your Personal Information in to: facilitate the creation of and secure your account on our network; identify you as a user in our system; run background checks and verify your credentials (if you are a Caregiver); provide improved administration of our Site and services; improve the quality of experience when you interact with our Site and services; tailor the features, performance and support of the Site or services to you; send you a welcome e-mail to verify ownership of the e-mail address provided when your account was created; send you administrative e-mail notifications, such as security or support and maintenance advisories; respond to your inquiries; make telephone calls to you, from time to time, as a part of secondary fraud protection or to solicit your feedback; send newsletters, surveys, offers, and other promotional materials related to our services and for other marketing purposes of MyShyft; respond to your requests, resolve disputes and/or troubleshoot problems; customize the advertising you may see on the Site or through the Site; collect and/or distribute money; verify your compliance with your obligations in our Terms of Use or other MyShyft policies.
(B) Creation of Anonymous Data. We may create Anonymous Data records from Personal Information by excluding information (such as your name) that make the data personally identifiable to you. We use this Anonymous Data to analyze request and usage patterns so that we may enhance the content of our services and improve Site navigation. MyShyft reserves the right to use Anonymous Data for any purpose and disclose Anonymous Data to third parties in its sole discretion.
5. Disclosure of Your Personal Information
We disclose your Personal Information as described below and as described elsewhere in this Policy.
(A) Other MyShyft Users. We may share your Personal Information with third parties to whom you ask us to send Personal Information, including other Users. Unless you direct us to provide access to your Personal Information via your “Privacy Settings” or otherwise, we do not disclose the Personal Information of any Caregiver to any another user. We do, however, provide other users with the opportunity to communicate with you through an anonymous in-browser message box. If you respond to any in-browser message, you will be providing the recipient your email address.
(B) Third Party Service Providers. We may share your Personal Information with third party service providers to: provide you with the services that we offer you through our Site; to conduct quality assurance testing; to facilitate creation of accounts; to provide technical support; and/or to provide other services to MyShyft. These third party service providers are required not to use your Personal Information other than to provide the services requested by MyShyft. Examples of such third party service providers include companies that administer background checks of Caregivers and companies that process payments. These third party service providers are required not to use your Personal Information other than to provide the services requested by MyShyft.
(C) Other Third Parties. We may disclose your Personal Information to third parties so that such third parties may contact you for marketing purposes.
(D) Affiliates and Acquisitions. We may share some or all of your Personal Information with our parent company, subsidiaries, joint ventures, or other companies under a common control (“Affiliates”), in which case we will require our Affiliates to honor this Policy. If another company acquires our company, business, or our assets, that company will possess the Personal Information collected by us and will assume the rights and obligations regarding your Personal Information as described in this Policy.
(E) Other Disclosures. Regardless of any choices you make regarding your Personal Information (as described below), Company may disclose Personal Information if it believes in good faith that such disclosure is necessary (1) in connection with any legal investigation; (2) to comply with relevant laws or to respond to subpoenas or investigative demands served on MyShyft; (3) to protect or defend the rights or property of MyShyft or users of the Site; and/or (4) to investigate or assist in preventing any violation or potential violation of the law, this Policy, or MyShfyt’s Terms of Use.
6. Third Party Data Collection
(A) Third Party Websites. The Site may contain links to other websites that are not owned or controlled by us. We have no control over, do not review and are not responsible for the privacy policies of or content displayed on such other websites. When you click on a link to any other website or location, you will leave our Site and go to another site and another entity may collect Personal Information or Anonymous Data from you. We have no control over, do not review, and cannot be responsible for, these outside websites or their content. Please be aware that the terms of this Policy do not apply to these outside websites or content, or to any collection of data after you click on links to such outside websites.
(B) Information Collected by Ad Networks. While we do not currently use third-party advertising companies to serve ads when you visit our Site, we may choose to do so in the future. These companies may collect and use information (not including your name, address, email address, or telephone number) about your visits to this and other websites in order to provide advertisements about goods and services to you.
(C) Information Collected by Other Third Parties. This Policy addresses only our use and disclosure of information we collect from and/or about you. If you disclose information to others, including to other Users, the use and disclosure restrictions contained in this Policy will not apply to any third party. We do not control the privacy policies of third parties, and you are subject to the privacy policies of those third parties where applicable. In addition, information made available through the Site by Users may be protected by applicable privacy laws, including the Health Insurance Portability and Accountability Act.
7. Your Choices Regarding Your Personal Information
(A) Choices. We offer you choices regarding the collection, use, and sharing of your Personal Information. (i) We will periodically send you free newsletters and e-mails that directly promote the use of our Site or services. When you receive newsletters or promotional communications from us, you may indicate a preference to stop receiving further communications from us and you will have the opportunity to “opt-out” by following the unsubscribe instructions provided in the e-mail you receive or by contacting us directly (please see contact information below). (ii) Despite your indicated e-mail preferences, we may send you service related communication, including notices of any updates to our Terms of Use or Privacy Policy.
(B) Changes to Personal Information. You may change any of your Personal Information in your Account by editing your profile within your account or by sending an e-mail to us at the e-mail address set forth below. You may request deletion of your Personal Information by us, but please note that we may be required to keep this information and not delete it (or to keep this information for a certain time, in which case we will comply with your deletion request only after we have fulfilled such requirements). When we delete any information, it will be deleted from the active database, but may remain in our archives. We may retain your information for fraud or similar purposes. However, if we have already disclosed some of your Personal Information to third parties, we cannot access that Personal Information any longer and cannot force the deletion or modification of any such information by the parties to whom we have made those disclosures.
8. Security of Your Personal Information
MyShyft is committed to protecting the security of your Personal Information. We use a variety of industry-standard security technologies and procedures to help protect your Personal Information from unauthorized access, use, or disclosure. We also require you to enter a password to access your account information. Please do not disclose your account password to unauthorized people. No method of transmission over the Internet, or method of electronic storage, is 100% secure, however. Therefore, while MyShyft uses reasonable efforts to protect your Personal Information, MyShyft cannot guarantee its absolute security.
9. Contact Information
MyShyft welcomes your comments or questions regarding this Policy. Please e-mail us at [email protected].
10. Changes to this Policy
This Policy is subject to occasional revision, and if we make any material changes in the way we use your Personal Information, we will notify you by sending you an e-mail to the last e-mail address you provided to us, and/or by sending a push notification via the MyShyft app platform, and/or by prominently posting notice of the changes on our Site. Any changes to this Policy will be effective upon the earlier of thirty (30) calendar days following our dispatch of an e-mail notice to you or thirty (30) calendar days following our posting of notice of the changes on our Site. These changes will be effective immediately for new Users. Please note that at all times you are responsible for updating your Personal Information to provide us with your most current e-mail address. In the event that the last e-mail address that you have provided us is not valid, or for any reason is not capable of delivering to you the notice described above, our dispatch of the e-mail containing such notice will nonetheless constitute effective notice of the changes described in the notice. In any event, changes to this Policy may affect our use of Personal Information that you provided us prior to our notification to you of the changes. If you do not wish to permit changes in our use of your Personal Information, you must notify us prior to the effective date of the changes that you wish to deactivate your account with us. Continued use of our Site or Service, following notice of such changes shall indicate your acknowledgement of such changes and agreement to be bound by the terms and conditions of such changes.
12. Privacy Information for California Residents
If you are a California resident, California law requires us to provide you with some additional information regarding how we collect, use, and share your “personal information” (as defined in the California Consumer Privacy Act (“CCPA”)).
Categories of personal information we collect.
Throughout this Policy, we discuss in detail the specific pieces of personal information we collect from and about our users. Under the CCPA, we are also required to provide you with the “categories” of personal information we collect as defined by California law. The categories we collect depending on the types of services you use are:
- identifiers (such as name, address, email address);
- commercial information (such as transaction data);
- financial data (such as payment method details and billing address);
- internet or other network or device activity (such as browsing history or usage information);
- geolocation information (e.g., your approximate location based on IP address, or precise location with your consent);
- inference data about you (e.g., the additional services or advertising we think would be of most interest to you based on your interactions with us);
- professional or employment-related data (e.g., if you are a Caregiver, your references and employment history);
- education information (e.g., if you are a Caregiver, your level of education);
- legally protected classifications (such as gender or information obtained from a background check, where applicable);
- physical characteristics or description (e.g., photos you choose to upload to your job postings or profile);
- sensory or visual information (e.g. if you provide us this information in connection with senior care planning)
- medical information (e.g. if you provide us this information in connection with senior care planning); and
- other information that identifies or can be reasonably associated with you (e.g., registration and log-in information).
Please note that specific pieces of your personal information may belong to more than one of the above referenced categories.
How we source, use, and share these categories of personal information.
We source, use, and share with third parties the categories of personal information we collect from and about you consistent with the various business and operational purposes we discuss throughout this Policy and for the business and operational purposes of our service providers in accordance with the CCPA.
Please note that the CCPA sets forth certain obligations for businesses that “sell” personal information to third parties. We do not engage in such activity and have not engaged in such activity in the past twelve (12) months from the effective date of this Policy.
CCPA Rights Disclosure.
If you are a California resident, the CCPA allows you (or an authorized agent acting on your behalf) to make certain requests related to your personal information. Specifically, the CCPA allows you to request us to:
- Inform you about the categories of personal information we collect or disclose about you; the categories of sources of such information; the business or commercial purpose for collecting your personal information; and the categories of third parties with whom we share/disclose personal information. Such information is also set forth in this Policy.
- Provide access to and/or copy of certain personal information we hold about you.
- Delete certain personal information we have about you.
- Provide you with information about the financial incentives that we offer to you, if any.
The CCPA further provides you with the right to not be discriminated against (as provided for in applicable law) for exercising your rights. Please note that certain information may be exempt from such requests under California law. For example, we need certain information in order to provide the Sites to you. We also will take reasonable steps to verify your identity before responding to a request. In doing so, we may use one or more of the following methods: (i) using your login credentials to verify you (it being understood that we may also ask you to reauthenticate yourself), or (ii) matching two or more data points provided by you with data points maintained by us. If we are unable to verify you through the foregoing methods, we shall have the right, but not the obligation, to request additional information from you. If you would like further information regarding your legal rights under California law or would like to exercise any of them, or if you are an authorized agent making a request on a user’s behalf, please contact us at [email protected].
Shine the Light Disclosure.
The California “Shine the Light” law gives residents of California the right under certain circumstances to request information from us regarding the manner in which we share certain categories of personal information (as defined in the Shine the Light law) with third parties for their direct marketing purposes. We do not share your personal information with third parties for their own direct marketing purposes.
13. Privacy Information for Nevada Residents
Under Nevada law, certain Nevada consumers may opt out of the sale of “personally identifiable information” for monetary consideration (as such terms are defined under Nevada law) to a person for that person to license or sell such information to additional persons. If you are a Nevada resident and you have purchased services or products from us, you may submit a request to opt out of any potential future sales under Nevada law by contacting us via e-mail at [email protected]. Please note we may take reasonable steps to verify your identity and the authenticity of the request.
14. Users Outside of the United States
We do not warrant or represent that this Policy or the Platform’s use of your Personal Information complies with the laws of any particular jurisdiction outside of the United States. Furthermore, to provide you with our services, we may store, process, and transmit information in the United States and other locations around the world, including countries that may not have the same privacy and security laws as yours. Regardless of the country in which such information is stored, we will process your Personal Information in accordance with this Policy.
Under the General Data Protection Regulation (Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016, or “GDPR”), individuals in the EU are afforded specific rights with respect to their Personal Information, or “personal data” as defined under the GDPR. For the purposes of this Policy, MyShyft operates as a data controller. Any personal data we collect from you is processed in the United States and under the terms of this Policy.
Any personal data we collect from you is processed in the legitimate interest of our business and providing our services to you as the lawful means of such processing. You may always withdraw your consent to our use of your personal data as described below. We will only retain your personal data for the time necessary to provide you the information and services to which you have consented, to comply with the law and in accordance with your rights below.
The Data Controller is:
NAME: RestUp, LLC d.b.a MyShyft
ADDRESS: 429 E. Vermont St., Ste. 110, Indianapolis, IN 46202
EMAIL ADDRESS: [email protected]
You can exercise any of the following rights, subject to verification of your identity, by notifying us as described below:
- Access. You may email us at [email protected] to request a copy of the personal data our System databases currently contain.
- Automated Processing and Decision-Making. You may email us at [email protected] to request that we stop using your personal data for automated processing, such as profiling. In your email, please explain how you wish us to restrict automated processing of your personal data. When such restrictions are not possible, we will advise you accordingly. You can then choose to exercise any other rights under this Policy, to include withdrawing your consent to the processing of your personal data.
- Correction or Rectification. You can correct what personal data our Platform database currently contains by accessing your account directly, or by emailing us at [email protected] to request that we correct or rectify any personal data that you have provided to us. We may not accommodate a request to change information if we believe the change would violate any law or legal requirement or cause information to be incorrect. Where applicable, we will ensure such changes are shared with trusted third parties.
- Restrict Processing. When applicable, you may restrict the processing of your personal data by submitting a request via email to [email protected]. In your email, please explain how you wish us to restrict processing of your personal data. When such restrictions are not possible, we will advise you accordingly. You can then choose to exercise any other rights under this Policy, to include withdrawing your consent to the processing of your personal data. Where applicable, we will ensure such changes are shared with trusted third parties.
- Object to Processing. When applicable, you have the right to object to the processing of your personal data by submitting a request via email to [email protected]. When such objections are not possible, we will advise you accordingly. You can then choose to exercise any other rights under this Policy, to include withdrawing your consent to the processing of your personal data. Where applicable, we will ensure such changes are shared with trusted third parties.
- Portability. Upon request and when possible, we can provide you with copies of your personal data. You may submit a request via email to [email protected]. When such a request cannot be honored, we will advise you accordingly. You can then choose to exercise any other rights under this Policy, to include withdrawing your consent. Where applicable, we will ensure such changes are shared with any trusted third parties.
- Withdraw Consent. At any time, you may withdraw your consent to our processing of your personal data through this Platform by notifying us via email at [email protected]. Using the same email address associated with your Platform account, simply type the words “WITHDRAW CONSENT” in the subject line of your email. Upon receipt of such a withdrawal of consent, we will confirm receipt and proceed to stop processing your personal data. Where applicable, we will ensure such changes are shared with trusted third parties.
- Erasure. If you should wish to cease use of our Platform and have your personal data deleted from our Platform, then you may submit a request by emailing us at [email protected]. Upon receipt of such a request for erasure, we will confirm receipt and will confirm once your personal data has been deleted. Where applicable, we will ensure such changes are shared with trusted third parties.
- Submit Complaints or Questions. If you wish to raise a complaint on how we have handled your personal data, you can contact us as described below. If you reside in a European Union member state, you may also lodge a complaint with the supervisory authority in your country.
15. For Illinois Residents: Acknowledgment and Authorization for Background Check
Users hereby authorize the Illinois Department of Public Health (the Department), the Department’s designee, educational entities that train and/or test health care workers, staffing agencies, user’s current or potential employer, or a health care facility where user want to volunteer to initiate/request a CHRI check on me. User further authorizes the Illinois State Police (ISP) and/or the Federal Bureau of Investigation (FBI) to release information and photographs relative to the existence or nonexistence of any criminal record, which it might have concerning user, to any initiator/requestor solely to determine user’s suitability for training or testing in a health care training program, employment, continued employment, or to work as a volunteer. User further authorize any entity that maintains criminal records and photographs relating to user, including but not limited to a local unit of government in any State, to release those records and photographs to the ISP, FBI, or the Department. User authorizes the Department to provide any health care facility, training program or staffing agency, to which users have provided this authorization and disclosure form, a copy of my ISP CHRI and a determination of eligibility of the FBI CHRI. User certifies that the ISP, FBI, any entity that maintains criminal records and photographs, the Department, and any of their employees or officers who furnish this information shall be held harmless from all liability, which may be incurred as a result of releasing such information. Users further acknowledge that a educational entity or a health care employer shall not be liable for the failure to hire or retain user as an applicant, student, employee, or volunteer if user has been convicted of committing or attempting to commit one or more of the offenses stated in the Health Care Worker Background Check Act (225 ILCS 46/25).
Users understand that any false statements or deliberate omissions on this document may be grounds for disqualification from employment, training, or volunteering, if discovered after employment, training, or volunteering begins, and can result in discipline up to and including my termination of employment, being a volunteer, or a student.
Users understand that the information requested below regarding gender, race, height, eye color, hair color, weight, place of birth and date of birth is for the sole purpose of identification and the accurate gathering of the criminal history record information, and that it will not be used to discriminate against user in violation of the law. User understand that the provision of user’s Social Security number is required by law.