Privacy Policy

FlightPlan is a physician on-call scheduling system built and operated by H2 Innovations (Jordan Hicks).

This policy covers that one application, wherever you meet it. When you sign in with Google you may see it identified as h2innovations.ca, which is the same app, served at scheduler.h2innovations.ca. FlightPlan is the product name, h2innovations.ca is the operator, and there is no third party in between.

If anything here is unclear, the contact details are at the bottom of this page.

FlightPlan is a scheduling system, so it holds the information a schedule genuinely needs to function:

• Your name and your work email address
• Your work phone and pager number (so colleagues can reach the person on call)
• Your shift assignments and the availability you submit
• Your shift-trade history
• Your account's role and access status
• Your sign-in credentials, with the password stored hashed and never in a readable form
• Your notification settings (which emails or texts you want, and the security phrase you choose so you can tell our emails from a fake)

That is the operational data the tool exists to manage. It is the same information that would otherwise live in a spreadsheet or a group email. We do not store more than the schedule requires.

FlightPlan does not collect, store, or transmit any of the following:

• Patient or health information
• Financial or payment information
• Government identifiers
• Your location
• Your browsing history
• Behavioural tracking, usage analytics, or advertising identifiers

If you are ever asked for something on this list, something is wrong, so please tell us.

FlightPlan sets only the cookies sign-in cannot work without:

• A session cookie, which keeps you signed in as you move between pages.
• A security token cookie, which protects the sign-in form against request forgery.
• A short-lived cookie that remembers which page to return you to after you sign in.

All three are strictly necessary. We use no tracking cookies, no analytics cookies, and no advertising cookies. None, ever.

If you choose to connect your Google Calendar, FlightPlan reads your calendar events so it can show them alongside your availability, letting you see your existing commitments while you decide which days you can work. If your clinic enables it, FlightPlan can also publish your shift schedule to a calendar.

To do this, FlightPlan stores a Google access token for your account. That token is encrypted. Connecting is entirely optional, and you can disconnect at any time. Your Google account itself is governed by Google's own terms and privacy policy.

Limited Use disclosure. FlightPlan's use of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. Your Google Calendar data is used only to display your commitments inside FlightPlan. It is never transferred to third parties, never sold, and never used to create, train, or improve any machine learning or artificial intelligence model. FlightPlan does not integrate with any third-party AI service. The scheduling engine is a deterministic mathematical solver (constraint optimization) that runs entirely on our own server; no Google user data is sent to it or to any external model provider.

This section is specific to data FlightPlan receives from Google, and it describes exactly what the software does.

• Your calendar events are never stored. When FlightPlan shows your Google Calendar next to your availability, it requests those events from Google at the moment you open the page and displays them. They are not written to our database, not cached, and not retained after the page closes. There is no copy of your personal calendar on our servers.
• Your Google access token is stored encrypted, only so FlightPlan can read your calendar on the next visit without asking you to sign in again. It is kept only while your calendar is connected, and it is deleted the moment you disconnect.
• Your list of calendar names (for example "Work", "Family") is stored so you can choose which calendars to display. It is deleted when you disconnect.
• Your clinic's shared practice calendar. If your clinic publishes the on-call schedule to its own Google Calendar, FlightPlan keeps a record of what that shared calendar contained before each change, so a mistaken edit can be undone. This covers the clinic's own scheduling calendar only, never a physician's personal calendar. It is kept while that shared calendar stays connected to FlightPlan, and it is deleted when the connection is removed or when your clinic administrator asks us to delete it.

Deleting your Google data. You can disconnect Google Calendar yourself at any time, from Settings in the app. Disconnecting immediately revokes FlightPlan's access with Google and deletes the stored token and calendar list from our database. You do not need to ask anyone, and you do not need to give a reason. You can also remove FlightPlan's access directly from your Google account permissions page.

If your FlightPlan account is closed or removed, everything above is deleted along with it. If you would prefer us to delete your Google data for you, email the address in the Contact section and we will do it and confirm when it is done.

Your scheduling information (shifts, availability, trades) is kept while you are an active member of your clinic's schedule, because that is the record the clinic runs on and refers back to. When your account is closed, that information is removed or anonymized once it is no longer needed for the clinic's own scheduling records.

You can ask what we hold, ask for a correction, or ask for deletion at any time. See "Your control over your data" below.

In the spirit of being straightforward, here is every outside connection FlightPlan makes, and why:

• Google: only if you connect your calendar, and only to sync calendar events as described above.
• Email delivery: to send you scheduling notifications (for example, a request to submit your availability, or a notice that someone wants to trade a shift). Email goes only to you, and only about your schedule.
• Version & health reporting: FlightPlan reports its own software version and basic health so the system can be kept secure and up to date. This carries no personal data. It is about the software, not about you.

FlightPlan is a shared schedule, so the administrators at your clinic and the physicians you are scheduled alongside can see the schedule-related information above. Nobody outside your organization can see it, and we do not share it with anyone else.

We do not sell, rent, or trade your information to anyone: not to advertisers, not to data brokers, not to anyone, for any reason. That is a firm commitment, not a marketing line.

Access to FlightPlan is invite-only and role-based, so you see only what your role needs. Passwords are stored hashed, never in plain text. Calendar tokens are encrypted. We use reasonable, current security practices to keep your data safe.

You can ask to see the information FlightPlan holds about you, have it corrected, or have it removed. Contact your clinic administrator, or reach us directly using the details below.

If this policy changes, the updated version is posted here with a new date at the top. Any material change will also be communicated through the app.

Questions about your privacy? Email hixonsix@gmail.com or visit jordanhicks.h2innovations.ca.