Easy Duty Rota
Privacy Policy
Last updated 21 August 2026
1. Who we are
Easy Duty Rota is a duty roster and staff scheduling service operated by SHAB INVESTMENT, a business registered in the Republic of Maldives. In this policy, "we", "us" and "our" mean SHAB INVESTMENT. "You" means the person using the service.
You can reach us at support@easydutyrota.com.
2. What this policy covers
This policy explains what information we collect when you use Easy Duty Rota at easydutyrota.com, why we collect it, who we share it with, and what rights you have over it.
It does not cover other websites you might reach through links from our service.
3. Information you give us
Account information. When you create an account we collect your email address and a password. Your password is stored in an encrypted form that we cannot read.
Payment information. If you subscribe to a paid plan, payments are processed by our payment provider. We receive confirmation that a payment succeeded, the amount, and the date. We do not receive or store your full card number.
Rota content. This is the main information in the service, and it is entered by you:
- Staff names, and any job title or position you record
- Employment start and end dates
- Duty codes, shift assignments, on-call assignments and leave records
- Department and organisation names
- Notes you add to duty cells
- Any logo you upload
Support messages. If you contact us for help, we keep what you send us so we can answer.
4. Information about other people
This section matters, so please read it.
Most of the information in Easy Duty Rota is not about you. It is about your staff — their names, their working hours, when they are on leave, when they are on call.
Those people are not our customers. They did not sign up, and in most cases they have never heard of us. You are responsible for the staff information you enter. By using the service you confirm that you are entitled to record and process your staff's details for the purpose of scheduling their work, and that you will tell them their schedule is kept in this service if you are required to.
We handle that information on your behalf and under your instructions. We do not use it for our own purposes, we do not sell it, and we do not use it to train anything.
Please do not enter information you do not need for scheduling. Easy Duty Rota is not designed to store medical information, identity document numbers, salary details, disciplinary records, or anything else sensitive about your staff, and you should not put such information into duty notes or staff names.
5. Information we collect automatically
Session information. When you log in, our authentication provider records the time of sign-in and a session token so you stay logged in. This is necessary for the service to work.
Local storage. We keep a copy of your current rota in your browser's local storage so your work is not lost if your connection drops. This stays on your device and is cleared when you log out or clear your browser data.
Server logs. Our hosting provider automatically records technical information about requests to the service, such as IP address, browser type and time of request. These logs are used to keep the service running and secure.
We do not use third-party analytics, advertising trackers, or cookies for tracking or advertising.
6. Why we use your information
We use the information described above to:
- Give you access to your account and your rotas
- Save and display the rota content you create
- Take payment and manage your subscription
- Respond to you when you contact us for support
- Keep the service secure and detect misuse
- Understand how much of the service is being used, so we can plan capacity and improvements
We do not sell your information to anyone, and we do not share it for marketing purposes.
7. Who we share information with
We use a small number of service providers to run Easy Duty Rota. Each one only receives what it needs to do its job:
| Provider | What they do | Where they hold data |
|---|---|---|
| Supabase | Stores your account, rotas and staff data. Handles login and password resets. | Data centres outside the Maldives |
| Vercel | Hosts the website and serves it to your browser. | Global network |
| Bank of Maldives | Processes card payments (once payments go live). | Maldives |
We may also disclose information if we are legally required to do so, or where it is necessary to protect the safety of a person or the security of the service.
8. Where your data is stored
Easy Duty Rota is operated from the Maldives, but our hosting and database providers store data on servers outside the Maldives. By using the service you understand that your information, including staff information you enter, will be stored and processed outside the Maldives.
9. How long we keep information
We keep your account and rota content for as long as your account is active.
If you delete your account, we remove your account and its associated rota content within 30 days. Your access ends immediately when you delete.
If your subscription lapses, we do not delete your data. Your account moves to a view-only state and your rotas remain available to look at. This is deliberate — a rota is a working record, and losing it because a card expired would be worse than losing access to editing.
We may keep a minimal record of payments for as long as required for accounting and tax purposes.
10. Your rights
You can:
- See your data. Everything you have entered is visible in the app, and you can export rotas as PDF or image files at any time.
- Correct your data. You can edit any staff record, duty or setting yourself.
- Delete your data. You can delete your account from Settings. This removes your account and its rotas.
- Ask us questions. Contact us at support@easydutyrota.com if you want to know what we hold about you or why.
If you are a staff member whose details appear in someone's rota and you want them removed, please speak to your employer first — they control that record and can change it directly. If that is not possible, contact us and we will do what we reasonably can, but understand that we may need to involve the account owner.
11. Security
We protect your data with:
- Encrypted connections (HTTPS) for everything sent between your browser and our servers
- Database access rules that prevent one account from reading another account's data
- Encrypted password storage
- Two-factor authentication on our own administrative accounts
No service can promise perfect security. If a breach occurs that affects your information, we will tell you as soon as we reasonably can.
12. Children
Easy Duty Rota is a workplace tool and is not intended for anyone under 18. We do not knowingly collect information from children.
13. Beta status
Easy Duty Rota is a young service and is still being actively developed. We say this plainly because it matters: features change, and occasionally things break. We take backups and we are careful, but you should keep your own exports of any rota you cannot afford to lose.
14. Changes to this policy
If we change this policy in a way that materially affects you, we will let you know in the app or by email before the change takes effect. The date at the top shows when this version was published.
15. Contact
SHAB INVESTMENT G. Ranhiri, Ameenee Magu, Male' City Republic of Maldives
Email: support@easydutyrota.com