Privacy at DutyMaster.
DutyMaster is operated by Heron Digital. This page describes the current account and garage release.
What you enter
We store your name, surname, employee number, company, mobile number and a hash of your password. We also store garage memberships, personal diary entries, pay settings, duty documents uploaded by garage admins, and their reviewed timetable data. We do not store your password in readable form.
Who can see it
Your personal diary and pay settings are private to your account. Approved admins of a garage can see the names and employee numbers of people requesting or holding membership of that garage. Only approved garage members can look up its published duties. Original uploads and import previews are restricted to approved admins.
Scanned duty documents
The Mac converter reads scans locally using Apple Vision. The source document is downloaded from your DutyMaster server to a temporary folder on your Mac; extracted rows and source text are sent back to that server for admin review. The converter does not send documents to a third-party OCR service or publish duties automatically. Upload duty timetables only, and avoid documents containing unrelated personal information.
Sign-in and essential storage
The website uses an essential, HTTP-only session cookie. The Android app stores its sign-in token encrypted using Android Keystore. Sessions expire after 14 days. The service also records short-lived login attempt counters and garage administration events to protect accounts and track changes. No advertising trackers are included.
Closing your account
Use Profile → Close my account to delete your profile, sessions, memberships, personal entries and pay settings. If you are the last admin of a garage with other members, appoint another approved admin first. A garage with no other members, and its duty uploads, is deleted when its only admin closes their account. Shared timetables may remain with a garage that still has members. Server access logs and hosting backups follow the hosting operator’s retention settings.
Questions
Contact Heron Digital using the details on heron-digital.co.uk. The current release does not verify mobile numbers, send SMS codes, or provide automatic password recovery.