1. Introduction

RosterHub ("we," "our," or "us") respects your privacy and is committed to protecting your personal data. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our roster management application ("the Service"). This policy complies with applicable data protection laws including US privacy regulations and Qatar's data protection framework.

2. Information We Collect

We collect the following types of information:

Personal Information

• Full name
• Email address
• Employee/Corporation number
• Mobile number
• Password (encrypted)

Roster Data

• Work schedules and shift information
• Overtime hours and leave records
• Manual hour entries
• Shift codes and descriptions

Technical Information

• Browser type and version
• Device information
• IP address
• Usage data and analytics

3. How We Use Your Information

We use your information for the following purposes:

• To provide and maintain the Service
• To manage your account and authentication
• To store and display your roster data
• To calculate work hours, overtime, and leave statistics
• To send important service notifications
• To improve and optimize the Service
• To ensure security and prevent fraud
• To comply with legal obligations

4. Data Storage and Security

We implement appropriate technical and organizational measures to protect your personal data:

• Data is stored securely using Firebase Cloud Services
• Passwords are encrypted using industry-standard hashing
• Access to data is restricted and authenticated
• Regular security assessments and updates
• Data transmission is encrypted using SSL/TLS

5. Data Sharing and Disclosure

We do not sell, rent, or trade your personal information. We may share your information only in the following circumstances:

• Service Providers: With third-party service providers (e.g., Firebase) who assist in operating the Service
• Legal Requirements: When required by law, court order, or governmental regulation
• Protection of Rights: To protect our rights, property, or safety, or that of our users
• Business Transfers: In connection with any merger, sale, or acquisition of all or part of our company

6. Your Rights

Depending on your location, you have the following rights regarding your personal data:

• Access: Request access to your personal data
• Correction: Request correction of inaccurate or incomplete data
• Deletion: Request deletion of your personal data
• Restriction: Request restriction of processing your data
• Portability: Request transfer of your data to another service
• Objection: Object to processing of your data
• Withdraw Consent: Withdraw consent at any time where we rely on consent

7. Data Retention

We retain your personal data only for as long as necessary to fulfill the purposes outlined in this Privacy Policy, unless a longer retention period is required by law. When you delete your account, we will delete or anonymize your personal data within 30 days, except where we are required to retain it for legal purposes.

8. Cookies and Tracking

We use localStorage and sessionStorage to maintain your login session and preferences. We do not use third-party tracking cookies for advertising purposes. Essential cookies are necessary for the Service to function properly.

9. International Data Transfers

Your data may be stored and processed in data centers located in different countries through our use of Firebase. We ensure that appropriate safeguards are in place to protect your data in accordance with applicable data protection laws.

10. Children's Privacy

The Service is not intended for individuals under the age of 18. We do not knowingly collect personal information from children. If you become aware that a child has provided us with personal data, please contact us, and we will take steps to delete such information.

11. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. We will notify you of any material changes by updating the "Last Updated" date and, where appropriate, by email or through the Service. Your continued use of the Service after such changes constitutes acceptance of the updated Privacy Policy.

12. Compliance

This Privacy Policy complies with:

• US privacy laws and regulations
• Qatar's data protection framework and regulations
• General data protection principles and best practices

13. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us through the application or by creating an issue on our GitHub repository.