Document Information

Change History

Version Effective Date Summary
2026.06.20 June 20, 2026 Added the ward administrator/member data model, Customer Data handling roles, cookie and analytics notice, international transfer terms, privacy rights, and sensitive data restrictions.

1. Overview

Dutying ("Dutying," "we," "us," or "our") provides mobile applications, web services, admin pages, landing pages, and related services for schedule and ward management (the "Service"). This Privacy Policy explains how we collect, use, disclose, retain, and protect personal information.

This Global English Privacy Policy is intended for users outside Korea, Japan, and mainland China unless a more specific local policy applies. Depending on your location, you may have additional rights under laws such as the GDPR, UK GDPR, state privacy laws in the United States, or other applicable data protection laws.

2. Roles and Definitions

"User" means an individual who uses the Service. "Customer" means a ward, healthcare institution, workspace, or authorized ward administrator. "Ward Administrator" means a user who creates or manages a workspace or ward and can manage member information, schedules, and permissions. "Member" means a nurse or other ward member registered or invited by a Customer for scheduling, ward operations, and workforce management. "Customer Data" means member information, ward information, schedule information, messages, posts, notes, and related data entered, uploaded, or managed by a Customer or Ward Administrator.

For account, login, support, billing, security, product analytics, and service operations data where we determine the purposes and means of processing, Dutying acts as a controller or business, as applicable. For Customer Data entered by Customers or Ward Administrators for ward operations and scheduling, the Customer generally determines the purposes and means of processing, and Dutying processes such Customer Data as a processor or service provider to provide the Service and follow the Customer’s instructions.

3. Personal Information We Process

Category Examples Source
Account information Name, email address, login identifier, authentication information, phone number where applicable User input or third-party login provider
Ward and workspace information Hospital name, ward name, team name, ward code, administrator permissions, invite and join status User or Ward Administrator input
Member information entered by Ward Administrators Name, optional phone number, gender where required by settings, employment date or year, team, worker status, available shift types, administrator role, skill level, notes, invite and connection status Entered or uploaded by Ward Administrators, or generated through use of the Service
Schedule information Requested shifts, confirmed schedules, shift types, time-off or availability status, scheduling rules, change history User or Ward Administrator input, or generated through use of the Service
Support information Name, email, inquiry details, support history, information contained in attachments Email, chat, or support channels
Automatically collected information Usage records, access logs, IP address, cookies, device information, browser information, operating system information, error logs Automatically collected when using the Service

Ward Administrators must enter Member information only to the extent necessary for ward operations and scheduling. They must not enter unnecessary personal information or sensitive information such as health status, pregnancy, religion, family circumstances, political opinions, union membership, or similar information in notes, chats, posts, scheduling requests, or other free-text fields.

4. Purposes of Processing

We process personal information to create and manage accounts, authenticate users, operate wards and workspaces, invite and connect Members, provide scheduling and workforce management features, provide customer support, protect security, prevent misuse, debug errors, improve service quality, send important notices, comply with legal obligations, and enforce our terms.