Privacy Policy
Last updated: August 23, 2026 (This is a courtesy translation. The Japanese version is the governing text.) The web service āOnCall Generatorā is the web version of the same service described below as āMinna no Touchoku-hyo.ā Unless the context requires otherwise, references below to the āAppā include this web service.
The web version uses Cloudflare Workers and Cloudflare Assets, provided by Cloudflare, Inc., for delivery, security, and operational monitoring. To provide those services, Cloudflare may process technical information such as IP addresses, requested URLs, device and browser information, security logs, and diagnostic logs. Google Firebase continues to be used for authentication, duty-roster data storage, and abuse prevention as described below.
Minna no Touchoku-hyo (Everyone's Duty Roster) Privacy Policy Last updated: December 21, 2025 (This is a courtesy translation. The Japanese version is the official text; in case of any discrepancy, the Japanese version prevails.) This Privacy Policy (the "Policy") sets out how user information is handled in the duty-roster creation and sharing app "Minna no Touchoku-hyo" (the "App").
1. Scope
This Policy applies to information obtained, stored, or shared through use of the App. If you move from the App to external sites or third-party services, the handling of information at the destination is governed by that service's own terms and policies.
2. Information We Collect
The App may obtain or store the following information.
2.1 Information you enter or provide
Display name (the name shown in duty rosters) Department (optional) Information about rooms (duty rosters) Room PIN (password) Target month Standby category settings (staff counts, points, no-duty, etc.) Salary settings (amounts per day of week and shift type) Fairness rules (weekly limit, monthly limit, spacing, etc.) No-pair rules (pairs who must not share a slot) Request information Request status for each slot (each day, day/night shift): OK / Preferred / Difficult / Other work Finalized roster (assignment results) Assignees for each slot (held as an array of UIDs; displayed as display names)
2.2 Information handled automatically for the App to work (identifiers, etc.)
Identifiers issued through authentication (Firebase UID, etc.) The App uses identifiers issued by the authentication platform to identify sign-in state and link data. Information stored on your device (local storage) History of room PINs you have joined, the last room you opened, and rooms you have hidden Swap simulation data (results and history of swap operations, etc.) These are stored on the device (UserDefaults or in-app storage) and restored as needed.
2.3 Information we do not collect
The App does not access your device's contacts, location, photo library, microphone, or similar beyond what is necessary to provide the duty-roster features (and cannot access them unless you grant OS permission).
3. Purposes of Use
We use the information we obtain for the following purposes.
Providing and operating the App (creating rooms, joining, entering requests, showing finalized rosters, showing summaries, swap simulation, etc.) Identity verification and abuse prevention (authentication, access control, etc.) Responding to user inquiries Incident response and security (for example, mechanisms to prevent unauthorized access) Consideration of feature improvements (we do not collect data for analysis that directly identifies individuals; if we do so in the future, we will update this Policy)
4. Sharing Within a Room (Important)
In the App, information necessary for operating the duty roster is shared among members who joined with the same room PIN.
Examples of information that may be shared:
Members' display names and departments (optional) Each slot's request status (OK / Preferred / Difficult / Other work) Assignment results after finalization (assignees) Room settings (standby categories, salary settings, fairness rules, no-pair rules, etc.) By design, anyone who knows the PIN can join the room. Handle the PIN carefully and avoid unnecessary sharing.
5. Use of Third-Party Services (Processors)
The App uses the following third-party services (cloud platforms, etc.) to provide its features. Data may be processed to the extent necessary under the privacy policies of these providers.
Google Firebase Authentication Data storage (Cloud Firestore) Abuse prevention (App Check, etc., where configured) Note: Firebase servers may be located outside your country (for example, in the United States), and data may be processed abroad.
6. Provision to Third Parties
We do not provide user information to third parties except in the following cases.
With the user's consent Where required by law Where necessary to protect a person's life, body, or property and it is difficult to obtain consent Provision to processors (such as Firebase) to the extent necessary to achieve the purposes of use
7. Retention Period
Room data (members, requests, slots, finalized rosters, etc.) is retained, in principle, for as long as the room exists. Data may be deleted due to room deletion or operational policy. History stored on the device (join history, swap simulation, etc.) is deleted when you delete the App or perform a reset operation within the App.
8. Security
We take reasonable safeguards to prevent unauthorized access to, leakage of, or tampering with information. Examples include authentication, access control, and encrypted communication (TLS).
However, due to the nature of Internet communication, complete security cannot be guaranteed.
9. Your Rights (Disclosure, Correction, Deletion, etc.)
You may contact us at the address below if you wish to:
Inquire about your account information or stored data Request deletion of data to the extent possible (for example, changing your display name, deleting your requests, or resetting on-device swap simulations) Note: Authority to delete or manage room data may belong to the owner (creator). For operational deletions, please ask the owner.
10. Notifications (Local Notifications)
The App may use your device's local notification feature for duty/day-shift reminders and similar purposes. Notifications are scheduled on the device, and their content is based on the App's data. To stop notifications, turn them off in the OS settings.
11. Use by Minors
The App is intended for use by healthcare professionals and related personnel. It is not intended for use by minors.
12. Changes to This Policy
This Policy may be revised due to legal changes, new features, and so on. If there are material changes, we will notify you in the App or by other appropriate means.
13. Contact
For inquiries about this Policy, please contact: medixmatch2025@gmail.com