Last updated: 24 July 2026
Privacy Policy
Pivot Shift helps clinicians import rosters, view external calendar events, and understand workload patterns. This policy explains what information we collect, how we use it, and how you can control it.
Information we collect
When you create or use a Pivot Shift account, we may collect account details such as your name, email address, authentication identifier, and profile image from our authentication provider.
You may add roster, event, source, shift-code, import-profile, preference, alert, and feedback information to Pivot Shift. This can include event titles, dates, times, locations, notes, source names, and workload settings.
If you connect Google Calendar, Pivot Shift requests read-only access to list calendars and read events from calendars you choose to import. This may include calendar names, event titles, dates, times, locations, descriptions, event identifiers, and last-modified timestamps.
Pivot Shift may generate workload summaries, conflict alerts, and other derived information from the roster and calendar data you add. These derived summaries remain part of your Pivot Shift account data.
If you import spreadsheet or ICS files, or subscribe to an ICS calendar feed, Pivot Shift processes the roster or calendar content you provide so it can show relevant events in your schedule.
How we use information
We use your information to provide the app, save your preferences, import and display events, detect duplicates and conflicts, calculate workload signals, show alerts, support calendar overlays, and respond to feedback or support requests.
Google Calendar data is used only to provide calendar import, refresh, display, conflict detection, and local overlay features. Pivot Shift does not write to, edit, or delete events in your Google Calendar.
Pivot Shift does not sell your personal information, use Google Calendar data for advertising, or transfer Google user data to third parties except as needed to operate the app, provide user-requested features, maintain security, or comply with law.
Google user data
Pivot Shift accesses Google Calendar data only after you authorise access through Google. The app uses read-only calendar-list access to show the calendars available to import, and read-only event access to import or refresh events from the calendars you select.
The raw Google Calendar data used by Pivot Shift may include calendar names, event titles, dates, times, locations, descriptions, event identifiers, and update timestamps. Pivot Shift may also create derived information from that data, such as local shadow events, workload totals, conflict alerts, and fatigue signals.
Raw and derived Google Calendar data is used only to provide and improve user-facing Pivot Shift calendar, import, refresh, overlay, alert, and workload features. Pivot Shift does not use Google user data for advertising, data brokering, credit eligibility, lending, or unrelated analytics.
Pivot Shift does not sell Google user data. Google user data is not shared with third parties except with service providers that help operate Pivot Shift, where required for security or legal compliance, or when you direct Pivot Shift to expose your own Pivot Shift calendar subscription feed.
Pivot Shift does not use raw, aggregated, anonymised, or derived Google Workspace API data to develop, improve, or train generalised artificial intelligence or machine-learning models.
Local notes, hidden-event choices, and overlays remain in Pivot Shift and are not synced back to Google Calendar. Revoking Google access prevents future Google Calendar refreshes but does not automatically delete local Pivot Shift copies of events already imported.
Pivot Shift's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.
Sharing, transfer, and disclosure of Google user data
Pivot Shift does not share, transfer, sell, rent, trade, or disclose Google user data to third parties for their own purposes. Pivot Shift does not disclose Google user data to advertisers, data brokers, insurers, employers, hospitals, recruiters, other Pivot Shift users, or any third party for marketing, advertising, profiling, credit or lending decisions, employment decisions, or insurance decisions.
The only limited circumstances in which Google user data may be shared, transferred, or disclosed are to provide and secure Pivot Shift, when you direct the app to make a private calendar subscription feed available, or when disclosure is required for legal or security reasons.
To provide and secure Pivot Shift, Google user data may be processed by cloud hosting and database providers that store and serve Pivot Shift data, authentication providers that manage sign-in and OAuth tokens, and operational support providers used to handle user-requested support or security issues.
These service providers may process Google user data only as needed to provide services to Pivot Shift, such as hosting the app, storing imported calendar events, protecting accounts, maintaining backups, troubleshooting, and responding to support requests. They are not permitted by Pivot Shift to use Google user data for advertising, data brokerage, credit or lending decisions, or unrelated purposes.
If you enable a Pivot Shift calendar subscription feed, events exposed through that private feed may be disclosed to calendar apps or people who have the feed link. This sharing is controlled by you; you can regenerate the feed link in Pivot Shift if it has been shared with someone who should no longer have access.
Pivot Shift may also disclose Google user data if required to comply with law, enforce our terms, investigate abuse, or protect the security and rights of users, Pivot Shift, or the public.
Storage and service providers
Pivot Shift uses service providers to run the app, authenticate users, store data, send and receive support messages, and host the website. These providers process information only as needed to provide those services.
OAuth tokens for Google sign-in and Google Calendar access are managed through the authentication provider. Pivot Shift uses those tokens to fetch calendar data when you ask it to import or refresh Google Calendar events.
Google Calendar event data imported into Pivot Shift is stored in Pivot Shift's database so the app can display your schedule, preserve local overlays, and detect future changes when you refresh.
Calendar subscription links
If you enable a Pivot Shift calendar subscription feed, anyone with that private feed link may be able to view the events exposed through the feed. You can regenerate the feed link in Pivot Shift if you believe it has been shared with someone who should not have access.
Retention and deletion
We keep account, roster, calendar, preference, and feedback information for as long as needed to provide Pivot Shift, support users, maintain security, and meet legal obligations.
You can delete events and sources inside Pivot Shift. You can revoke Pivot Shift's Google access from your Google Account permissions. You can also contact us to request account or data deletion.
If you delete a Google-imported source or event in Pivot Shift, the local Pivot Shift copy is removed or hidden according to your action. This does not delete or change the original event in Google Calendar.
Security
We use reasonable technical and organisational measures to protect user data, including authenticated access, transport encryption, database access controls, and row-level security for user-owned records.
Changes
We may update this policy as Pivot Shift changes. If a change materially affects how we use your information, we will update this page and, where appropriate, provide additional notice in the app.
Contact
For privacy questions or data requests, contact tech_support@pivotshift.org.
Postal and service address: Level 12, 269 Wickham Street, Fortitude Valley QLD 4006, Australia.