Privacy Policy

Information we collect

• Your Google account basics when you sign in with Google: name, email address and profile picture. We never see your Google password.
• Your role on the team (doctor, general manager or student) and the invitation that added you.
• What you do in Relay: the shifts you join or are assigned to, the tasks you add, edit or complete, optional handover notes, and an activity log of these actions for accountability.
• Your settings: language, theme, notification preferences and quiet hours.
• Technical data needed to run the service: a session cookie that keeps you signed in, language and theme cookies, and server logs (such as IP address and request time) kept for security and troubleshooting.

Google Calendar

A coordinator can choose to connect a Google Calendar. When connected, Relay creates and updates events for team shifts in a dedicated "Relay Shifts" calendar, and receives change notifications for that calendar so the schedule stays in sync. Access tokens are stored encrypted and are used only for this purpose. You can disconnect at any time in Relay or from your Google account permissions.

Relay's use and transfer of information received from Google APIs to any other app will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

We do not use Google user data for advertising, we do not sell it, and we do not use it to train artificial intelligence or machine learning models.

Connected apps

If you connect an AI assistant (such as Claude) to Relay, the assistant can read and, with your confirmation, change the same shift and task information you can see in Relay. You can review and revoke connected apps at any time under Settings → Connected apps.

No patient information

Relay is not a medical record. Do not enter information that identifies a patient (names, ID numbers, dates of birth or similar) in tasks, notes or any other field.

How we use information

• To run Relay: show your shifts and tasks, keep the team schedule up to date and send the notifications you choose.
• To keep the service secure, prevent abuse and fix problems.
• We do not sell personal information and we do not show ads.

Who we share it with

Your name and the work you do in Relay are visible to the members of your team, according to their role. We use a small number of service providers to run Relay: DigitalOcean (hosting, servers in the United States), Google (sign-in and the optional calendar connection) and, when email notifications are turned on, Brevo (email delivery). They process data only on our behalf. We may disclose information if the law requires it.

Retention

We keep your information while your account is active. Notifications are deleted after 90 days, and deleted items are permanently removed after a 90-day recovery window. The activity log is kept for accountability. When an account is removed, its personal details are deleted, except where we must keep a record by law.

Security

Relay uses encrypted connections (HTTPS), encrypts stored calendar credentials, restricts access by role, and keeps an audit trail of changes. No system is perfectly secure, but we work to protect your information.

Your rights

You can ask to see, correct or delete your personal information, or to export it, by contacting us. Depending on where you live, you may have additional rights under laws such as the Israeli Protection of Privacy Law or the EU GDPR.

Changes

If we change this policy we will update the date above, and tell users in Relay about significant changes.

Contact

Questions or requests: ramburvin@gmail.com