Sched Privacy Policy

Who controls your information

Your employer or organization usually decides why workforce information is collected and how long it is kept. In that relationship, your employer is the data controller and Sched acts as its service provider or processor. Contact your employer first about workplace-record corrections, access, or retention rules. Sched controls limited account, security, and service administration data needed to operate the service.

Information we process

• Authentication and contact data: name, work or personal email, account image, sign-in records, and account identifiers.
• Workforce and HR records: job, location, department, employment status, hire date, certifications, availability, time-off balances, optional birthday, contact details, emergency contacts, and employer-defined profile fields.
• Scheduling, timekeeping, and location: assigned and open shifts, swaps, attendance, breaks, time punches, timesheets, payroll export facts, and foreground device location when you use a location-checked punch. Sched does not collect continuous background location.
• Workplace content and files: chat messages, announcements, polls, kudos, logbook entries, comments, uploaded documents, photos, and acknowledgments you submit at work.
• Notifications and push: notification preferences, delivery status, mobile push tokens, and the operational messages sent to your device or email.
• Security and activity logs: IP address, browser or device details, audit events, API and webhook activity, diagnostics, and records used to prevent abuse and investigate incidents.

How we use information

We use this information to authenticate users; provide schedules, timekeeping, communication, staffing, compliance, and reporting features; deliver notifications; support users; secure and improve Sched; enforce terms; and meet legal obligations. We do not sell personal information or use workforce information for third-party behavioral advertising.

Service providers and disclosures

We disclose information only as needed to operate Sched, follow an organization's instructions, complete a user-requested integration, protect people and the service, or comply with law. Service providers include infrastructure, database, monitoring, and security vendors; Zoho for service email; and Expo Push Notifications for mobile push delivery. An organization may also connect payroll, calendar, API, or webhook providers of its choice. These providers process only the information needed for their service and are subject to their own terms and safeguards. We may disclose information in a merger or similar transaction with appropriate notice and protections.

Security

Sched uses access controls, tenant separation, encryption in transit, credential protection, audit records, and operational monitoring. No system is perfectly secure, so report suspected unauthorized access promptly and never send passwords or access tokens by email.

Retention and account deletion

We retain information while an account or organization uses Sched and afterward as directed by the employer, needed to operate and secure the service, or required by law. When account deletion completes, authentication and active access are deleted, direct profile information is scrubbed, and calendar and device access are revoked. Employer-controlled schedules, timekeeping, payroll, compliance, audit history, and workplace content may be retained under a stable pseudonymous member identity when the employer or law requires those records. We retain a non-sensitive deletion digest, status, and timestamps as evidence that the request was completed. See our account deletion guide for the seven-day, cancelable process.

Your choices

You can update available profile and notification settings in Sched, control device permissions in your operating system, and request account deletion in the app. Your employer may need to handle requests concerning employer-controlled records. Depending on where you live, you may also have rights to access, correct, export, object to, restrict, or delete personal information. We will help the relevant controller respond where required.

Children

Sched is a workplace service and is not directed to children under 13. Organizations that employ younger workers are responsible for providing appropriate notices, obtaining required permissions, and using Sched consistently with applicable child and employment laws.

International use

Sched is operated from the United States. If you use it internationally, information may be processed in the United States or other countries where our service providers operate. Organizations are responsible for ensuring an appropriate legal basis and transfer mechanism for their workforce data.

Changes and contact

We may update this policy as the service or law changes and will post the revised date here. Questions for Sched can be sent to neima@nakhaee.us. For employer-controlled workforce records, also contact your organization.