Privacy Policy

Account & Schedule Information

• Name, phone number, and email address
• Organization name and role (manager or employee)
• Shift records, schedule data, and time-off requests
• Device push notification tokens (FCM/APNs)

Usage & Device Data

• Device model, operating system version, and app version
• App interactions and feature usage events (collected via PostHog)
• Crash reports and performance diagnostics

Jadwala requests only the permissions listed below. Each permission is optional and you can revoke it at any time in your device settings.

• Push Notifications — Requested to deliver shift reminders, swap approvals, and schedule changes. Denied by default; we ask for permission only once.

• Provide, operate, and improve the Jadwala service
• Deliver shift notifications and real-time schedule updates
• Show relevant schedule data to your organization's manager and team members
• Analyse usage patterns to improve features and diagnose technical issues
• Respond to your support requests

We use the following sub-processors to operate the service. Each may receive limited personal data as described. We recommend reviewing their privacy policies.

We do not sell your personal data. Beyond the sub-processors listed above, we share data only (a) within your organisation as required to deliver the scheduling service, (b) when required by law or to protect our legal rights, or (c) in connection with a merger or acquisition, in which case we will notify you.

You can permanently delete your account at any time from Settings → Account → Delete Account inside the Jadwala app. Deleting your account removes your profile, schedule history, and all associated personal data from our active systems within 30 days.

Residual copies in encrypted backups are purged within 90 days. Anonymised or aggregated data that cannot identify you is not subject to deletion.

Depending on your country of residence, you may have the following rights:

• Access — request a copy of the personal data we hold about you
• Correction — ask us to fix inaccurate or incomplete data
• Deletion — request erasure of your personal data (see Account Deletion above)
• Portability — receive your data in a machine-readable format
• Objection / Restriction — object to or restrict certain processing activities

We retain your data for as long as your account is active or as needed to deliver services. After account deletion, active data is removed within 30 days and backup copies within 90 days.

Jadwala is not directed at children under the age of 13, and we do not knowingly collect personal information from anyone under 13. If you believe a child under 13 has provided us with personal information, please contact us and we will promptly delete it.

Our infrastructure is operated by Supabase (EU region) and Google Firebase (global CDN). By using Jadwala, you acknowledge that your data may be transferred to and processed in countries outside your country of residence. We apply appropriate safeguards — including standard contractual clauses where required — to protect your data during such transfers.

We implement industry-standard security measures including TLS encryption in transit, encryption at rest, and role-based access controls. However, no method of transmission over the internet is 100% secure, and we cannot guarantee absolute security.

We may update this Privacy Policy from time to time. We will notify you of significant changes by posting the updated policy on this page, updating the date at the top, and — for material changes — sending a notice in the app.

If you have questions about this Privacy Policy or wish to exercise your rights, please contact us at:

privacy@jadwala.net