Privacy Policy | DutyCrew

What DutyCrew Does

DutyCrew helps fire department members, administrators, and chiefs manage station staffing, duty crew coverage, contact information, operational messages, notifications, reports, department settings, and iOS or web-based field workflows.

Data We Collect

Account and profile data: name, username, email, phone, rank, role, permissions, department, station, invite status, password reset status, and account status.
Operational staffing data: clock-in and clock-out records, duty sessions, live staffing status, duty crew shifts, signups, assignments, removals, shift types, apparatus, driver qualification records, staffing history, reports, and activity logs.
Department configuration data: department identity, users, ranks, apparatus, minimum staffing, station geofence settings, notification settings, backup settings, and administrative configuration.
Communications and notification data: operational messages, message metadata, notification preferences, SMS consent status, delivery logs, email delivery metadata, push delivery metadata, and device push tokens.
Location and ETA data when enabled: station geofence events, location permission status, background or foreground location signals needed for auto clock-in and clock-out, routed ETA updates, stable event identifiers, and related diagnostics.
Device and technical data: browser or app version, device/runtime identifiers, IP address, security logs, error logs, local storage state needed to keep the app working, and radio player connection or diagnostic data when radio streaming is used.

How We Use Data

Operate staffing workflows, duty crew scheduling, member directories, driver qualifications, reports, activity history, and real-time coverage visibility.
Authenticate users, enforce permissions, and secure account access.
Deliver service-related alerts, operational messages, duty crew reminders, and notification channels enabled by you or your department.
Support iOS app, mobile web, desktop web, geofence, ETA, radio streaming, and department administration workflows.
Provide backups, reliability monitoring, troubleshooting, security review, governance records, compliance records, and audit history.
Improve and maintain the service without using operational data for third-party advertising.

How Data Is Shared

With authorized users in your department according to their account role and permissions.
With department administrators who manage users, staffing records, reports, configuration, and account access.
With service providers that help host, secure, deliver, or operate DutyCrew features.
When required for legal, safety, security, abuse-prevention, or compliance reasons.

Service Providers and Infrastructure

DutyCrew may process data through service providers and infrastructure used by enabled features:

Supabase for data storage and authentication.
Netlify for application hosting, serverless functions, deployment, and logs.
Twilio for SMS delivery when SMS features are enabled.
Resend for email delivery.
Google APIs for maps, routing, ETA, and optional geospatial functionality.
Apple Push Notification service, browser push infrastructure, and related mobile push services for push delivery.
Radio streaming infrastructure for the in-app radio player when that feature is enabled.

Location, Geofence, and ETA Data

DutyCrew uses location-related data only for enabled staffing workflows such as station geofence checks, automatic duty-session transitions, live ETA visibility, and related diagnostics. Background geofence behavior requires device-level permission, and users can manage device permissions through their operating system.

Retention and Account Deletion

DutyCrew supports self-service account deletion in Profile. Deletion removes account access and future staffing assignments where supported by the service. Operational records, audit logs, reports, backups, and department records may be retained for governance, legal, compliance, safety, dispute resolution, and historical staffing review.

Security

DutyCrew uses industry-standard safeguards including encrypted transport, access controls, and authenticated service integrations. No system can guarantee absolute security, but we continually work to protect service data.

Your Rights and Choices

Update profile and notification settings from Profile.
Request account changes through your department administrator.
Delete your account using the in-app Delete Account flow.
Manage device permissions for location, notifications, and local app access through your browser, device, or iOS settings.

Children's Privacy

DutyCrew is intended for authorized department personnel and is not directed to children.

Policy Updates

We may update this policy as the platform evolves. Material updates will be reflected by an updated "Last updated" date.

Contact

Questions about this policy can be sent to info@dutycrew.org.