What we store and who can see it

What is stored

• In-charges and supervisors: name, email address, and a password. Passwords are stored scrambled (hashed), never as plain text.
• Staff on a roster: name, rank, and, if the in-charge enters them, a phone number, staff ID and email address.
• Rosters: each person's shifts, leave and swap requests, preferred days off, and a history of changes made to a roster.
• Staff logins: the phone number and a PIN. PINs are stored scrambled (hashed), never as plain text.

Who can see a roster

• The unit's in-charges, and the site administrator.
• Facility supervisors, who can view the units in their own facility but cannot change them.
• Anyone who has the unit's roster link. The link is long and hard to guess, and it shows names, ranks and shifts. It does not show phone numbers or email addresses. An in-charge can replace the link at any time, which stops the old one working.
• Staff who log in with their phone number and PIN see only their own calendar.

What it is used for

The information is used only to build, publish and share duty rosters, and to send messages about them, such as account approval emails and, where a unit has turned them on, text alerts to staff. It is not sold or passed to advertisers.

Changing or removing information

In-charges can edit or remove their staff and rosters at any time. Staff who want their details corrected or removed should first ask their in-charge. You can also write to [email protected].

Advance Roster is run by Curtiex Ventures.