Privacy & Your Data

Data We Collect

To provide our shift trading service, we only request the minimum necessary data and permissions required for the app’s functionality. we collect and store the following information for the duration of your account existence:

• Your name - Used to identify you to other users when trading shifts.
• Your email address - Used for account authentication and notifications.
• Shift information you submit - Details about shifts you want to trade.

To provide the optional functionality of displaying your personal events, we retrieve, but do not save or retain:

• Google calendars lists and events - Used to display your personal calendar events on top of the app calendar (for Google Calendar users).
• Apple calendars lists and events - Used to display your personal calendar events on top of the app calendar (for Apple Calendar users).

How We Use Your Data

Your data is used solely to provide the HPS Shift Changes service. This includes:

• Displaying your name to colleagues when you post shift trade requests.
• Sending you notifications about shift trades.
• Facilitating communication between users about shift exchanges.
• Personal calendar events are displayed only to you when you browse the shifts calendar.

Data Sharing

Your information is only visible to other authenticated HPS Shift Changes users within the app as required for the app functionality and is never sold, shared, or provided to third parties.

Data Protection

We implement industry-standard security measures to protect your information. This includes:

• Encryption of data in transit using HTTPS/TLS.
• Industry-standard authentication protocols: OAuth 2.0 and OpenID (Google), Apple OAuth 2.0 and OpenID (Apple).
• We do not store user passwords. Authentication is handled entirely by trusted identity providers (Google and Apple).
• Secure handling and storage of authentication tokens.
• Access controls limiting data access to authorized application components only.

Google User Data

When you connect your Google account, we use OAuth 2.0 to request access to your Google Calendar data.

• We request the minimum necessary permissions to display your calendar events within the app.
• Google Calendar data is accessed in real time and is not stored or retained on our servers.

Delete Your Data/Account

You can delete your account and all associated data (name, Google/Apple account etc) from the settings section of the app at any moment.

Account deletion is immediate and we do not retain any data for any length of time after you delete your account.

Questions?

If you have any questions about your data or this privacy policy, please contact us at admin@hpshiftchanges.ca.