Privacy Policy

1 Overview

PA Scheduler ("the App") is a scheduling tool for healthcare provider teams. It helps administrators create work schedules and allows providers to submit time-off requests. This policy explains what data the App collects, how it is used, and how it is protected.

2 Information We Collect

The App collects only the information necessary to manage scheduling:

• Provider information — Names, initials, and work preferences (hours, weekend availability, location preferences) as entered by the administrator
• Schedule data — Shift assignments, dates, times, and clinic locations
• PTO requests — Requested dates, type of leave, and reason as entered by the provider
• Device identifier — A randomly generated ID stored securely in the device Keychain, used to identify admin and provider devices within the clinic

The App does not collect email addresses, phone numbers, physical addresses, location data, photos, health records, or biometric information.

3 How We Use Your Data

• Schedule generation — Provider information and preferences are used locally on the admin device to generate fair work schedules
• PTO management — Time-off requests are synced between provider and admin devices via Google Firebase so administrators can review and approve them
• Schedule export — When the administrator chooses to export, schedule data is sent to Google Sheets via Google's API using the administrator's own Google account
• Device identification — The device identifier determines whether a device is an admin or provider device within the clinic

4 Data Storage & Security

On your device: Schedule data, provider information, and preferences are stored locally using iOS secure storage. Authentication tokens are stored in the iOS Keychain, which is encrypted by the operating system.

In the cloud: PTO requests, provider links, and invitation codes are stored in Google Firebase Firestore. Access is restricted to authenticated devices within the clinic using Firebase Security Rules. Data is encrypted in transit (TLS) and at rest by Google.

Google Sheets: Schedule exports are created in the administrator's own Google Drive account. The App does not retain copies of exported data.

5 Data Sharing

Your data is shared only within your clinic's team:

• Administrators can see all provider schedules and PTO requests
• Providers can see the team PTO calendar and their own requests
• No data is shared with advertisers, data brokers, or any third parties
• No data is used for marketing or profiling purposes

6 Third-Party Services

The App uses the following third-party services solely for core functionality:

• Google Firebase (Authentication & Firestore) — For secure data synchronization between admin and provider devices. Firebase Privacy Policy
• Google Sheets API — For schedule export, initiated only by the administrator. Google Privacy Policy

No analytics, crash reporting, or advertising SDKs are used.

7 Data Retention & Deletion

Schedule data stored on the device can be cleared at any time by the administrator through the App's settings. PTO requests and provider links stored in Firebase persist until the administrator deletes them. Uninstalling the App removes all locally stored data except the device identifier in the Keychain.

8 Children's Privacy

PA Scheduler is a workplace scheduling tool and is not intended for use by children under 13. We do not knowingly collect information from children.

9 Changes to This Policy

We may update this privacy policy from time to time. Any changes will be reflected on this page with an updated date. Continued use of the App after changes constitutes acceptance of the updated policy.

10 Contact Us