Last updated: 17 July 2026
Privacy Policy
Pivot Shift helps clinicians import rosters, view external calendar events, and understand workload patterns. This policy explains what information we collect, how we use it, and how you can control it.
Information we collect
When you create or use a Pivot Shift account, we may collect account details such as your name, email address, authentication identifier, and profile image from our authentication provider.
You may add roster, event, source, shift-code, import-profile, preference, alert, and feedback information to Pivot Shift. This can include event titles, dates, times, locations, notes, source names, and workload settings.
If you connect Google Calendar, Pivot Shift requests read-only access to list calendars and read events from calendars you choose to import. This may include calendar names, event titles, dates, times, locations, descriptions, event identifiers, and last-modified timestamps.
If you import spreadsheet or ICS files, or subscribe to an ICS calendar feed, Pivot Shift processes the roster or calendar content you provide so it can show relevant events in your schedule.
How we use information
We use your information to provide the app, save your preferences, import and display events, detect duplicates and conflicts, calculate workload signals, show alerts, support calendar overlays, and respond to feedback or support requests.
Google Calendar data is used only to provide calendar import, refresh, display, conflict detection, and local overlay features. Pivot Shift does not write to, edit, or delete events in your Google Calendar.
Pivot Shift does not sell your personal information, use Google Calendar data for advertising, or transfer Google user data to third parties except as needed to operate the app and comply with law.
Google user data
Pivot Shift uses Google Calendar read-only data to create local shadow copies of selected events inside Pivot Shift. Local notes, hidden-event choices, and overlays remain in Pivot Shift and are not synced back to Google Calendar.
Pivot Shift's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.
Storage and service providers
Pivot Shift uses service providers to run the app, authenticate users, store data, send and receive support messages, and host the website. These providers process information only as needed to provide those services.
OAuth tokens for Google sign-in and Google Calendar access are managed through the authentication provider. Pivot Shift uses those tokens to fetch calendar data when you ask it to import or refresh Google Calendar events.
Calendar subscription links
If you enable a Pivot Shift calendar subscription feed, anyone with that private feed link may be able to view the events exposed through the feed. You can regenerate the feed link in Pivot Shift if you believe it has been shared with someone who should not have access.
Retention and deletion
We keep account, roster, calendar, preference, and feedback information for as long as needed to provide Pivot Shift, support users, maintain security, and meet legal obligations.
You can delete events and sources inside Pivot Shift. You can revoke Pivot Shift's Google access from your Google Account permissions. You can also contact us to request account or data deletion.
Security
We use reasonable technical and organisational measures to protect user data, including authenticated access, transport encryption, database access controls, and row-level security for user-owned records.
Changes
We may update this policy as Pivot Shift changes. If a change materially affects how we use your information, we will update this page and, where appropriate, provide additional notice in the app.
Contact
For privacy questions or data requests, contact tech_support@pivotshift.org.