Privacy Policy

Last updated: September 17, 2026

Staff2 (“Staff2”, “we”, “us”) is a team operations platform operated by MAQ Solutions that helps businesses manage scheduling, time tracking, stock, checklists and related staff operations. This policy explains what data we collect through the Staff2 web app and Android app, why we collect it, and the choices you have.

By using Staff2 you agree to the collection and use of information as described here. If you don’t agree, please don’t use the app.

Information we collect

Account information. When you register or sign in (including via Google Sign-In), we collect your name, email address, and a profile photo if you provide one. If you join an organization, your role and employment details (e.g. hourly rate, contract type) may be added by your employer/admin.

Work data. Shift schedules, availability, clock in/out timestamps, leave requests, shop assignments, checklist responses, stock and recipe records, and internal chat messages you send within the app.

Camera access. The checklist scanner uses your device camera to read QR/barcodes. Scanning happens on-device — we do not capture or store camera images, only the decoded code value.

Payment information. Subscription payments are processed by PayPal. We receive subscription status and billing metadata (e.g. plan, renewal date) — we never see or store your card or PayPal account credentials.

Usage and device data. We use Vercel Analytics to collect anonymous, aggregated usage data (pages visited, general device/browser type) to help us improve the product. This data is not tied to your identity.

Cookies. We use essential cookies for authentication and session management, and optional analytics cookies you can decline via the cookie banner.

How we use your information

  • To provide core functionality: scheduling, time tracking, stock, checklists and team communication.
  • To authenticate you and keep your account and organization’s data secure.
  • To process subscription billing and send related notices.
  • To send transactional notifications (e.g. shift changes, approvals) and, where enabled, push notifications.
  • To provide customer support when you contact us.
  • To improve the app through aggregated, anonymized usage analytics.
  • To detect abuse and keep the platform secure and reliable.

How we share your information

Work data you enter is visible to other members of your organization according to their role (e.g. managers can see staff schedules and hours; staff see their own data and what their admin shares). We do not sell your personal data.

We share data with the following service providers, only as needed to run Staff2:

  • Firebase (Google) — authentication, database and hosting infrastructure.
  • PayPal — subscription payment processing.
  • Vercel — app hosting and anonymous analytics.

We may also disclose information if required by law, or to protect the rights, safety and property of Staff2, our users, or others.

Data retention

We retain your account and work data for as long as your account is active, or as needed to provide the service. If you or your organization’s admin deletes your account, we delete or anonymize your personal data within a reasonable period, except where we must retain records to comply with legal, tax or accounting obligations.

Your rights

Depending on your location, you may have the right to:

  • Access the personal data we hold about you.
  • Correct inaccurate data.
  • Request deletion of your data.
  • Export your data in a portable format.
  • Object to or restrict certain processing.

To exercise any of these rights, contact us at info@staff2.app. Note that some data is controlled by your employer/organization admin, who may need to action certain requests directly.

Data security

We use industry-standard measures to protect your data, including encrypted connections (HTTPS), per-organization data isolation, and role-based access controls so people only see what they need. No method of transmission or storage is 100% secure, so we cannot guarantee absolute security.

Children's privacy

Staff2 is a workplace tool intended for use by employees and employers. It is not directed at children, and we do not knowingly collect data from anyone under 16.

Changes to this policy

We may update this policy from time to time. If we make material changes, we’ll notify you through the app or by email. The “Last updated” date above reflects the latest revision.

Contact us

If you have questions about this policy or how we handle your data, contact us at info@staff2.app or visit staff2.app.