Privacy Policy

Last updated: October 31, 2026

aiiara ("aiiara", "we", "us") is a shift-scheduling service for teams, available at aiiara.com and through our web, iOS and Android apps. This policy explains what personal information we collect, why, and the choices you have.

Who is responsible

Organizations that use aiiara (for example, a hospital group) set up their own workspace and decide who may join it. We process your information to run the service for that organization. Contact: soroush.larjani@gmail.com.

Information we collect

• Account information: your name, email address, and optionally phone number and profile photo.
• Sign-in with Google: if you choose "Continue with Google", we receive your name and email address from Google. We do not request access to your Google contacts, calendar, Drive or other Google data, and we do not import your Google profile photo.
• Scheduling content: shifts and assignments, shift offers and swaps, availability and time-off requests, departments, locations, tasks, announcements, comments, reactions and messages that you or your organization create in the service.
• Imported files: spreadsheets that an administrator uploads to import a schedule, which may contain team members' names.
• Notification data: your notification preferences and, if you enable push notifications, a device token.
• Activity records: an audit log of administrative and scheduling actions (who did what, and when) so organizations can review changes.

Please do not enter patient or other health information into aiiara. The service is for scheduling and team communication only.

How we use it

• To provide the service: display schedules, process shift offers and swaps, and show your organization's content to its members.
• To send notifications you or your organization have enabled, such as schedule published, shift offer and reminder messages, by in-app notice, push notification and email.
• To secure the service, prevent abuse and investigate problems.

We do not sell personal information and we do not use it for advertising.

Who can see your information

Information in a workspace is visible to that organization's members and administrators according to the permissions the organization has set. Data is separated between organizations by database-level access controls. Messages are visible to the participants in the conversation.

Service providers

We use trusted providers to run aiiara, and they process information only on our behalf:

• Supabase – database, authentication and file storage, hosted in Canada (Montréal region on AWS).
• Google – sign-in with Google, and Firebase Cloud Messaging for push notifications.
• Resend – sending email notifications.
• Cloudflare – website hosting and DNS.

Some providers may process limited data outside Canada, for example to deliver a push notification or an email.

Retention

We keep your information while your account is active in an organization. Items removed in the app may be retained in a deleted state for a period so that audit records remain accurate. Imported spreadsheets are retained until removed by the organization's administrators. You can ask us to delete your account and associated personal information at any time (see "Your choices").

Security

We use encryption in transit, row-level access controls in the database, and restricted storage for uploaded files. No system is perfectly secure, so we cannot guarantee absolute security.

Your choices

• You can edit your profile and notification preferences in the app.
• You can ask to access, correct or delete your personal information by emailing us. Your organization's administrators may also be able to help.
• You can disable push notifications in your device settings.

Children

aiiara is intended for working adults and is not directed to children under 16.

Changes

If we make material changes to this policy we will update the date above and, where appropriate, notify users in the app or by email.

Contact

Questions or requests: soroush.larjani@gmail.com.