Privacy · Effective 23 September 2026
What we keep about you, and why
that7days is a scheduling app for teams that work in shifts: roadshow agents, swim coaches, and the people who organise them. This page says what it collects, what it does with it, who else touches it, and how to see, correct or remove it.
It is written for Singapore’s Personal Data Protection Act 2012 (PDPA). Questions about anything here go to hello@that7days.com, which also reaches the person responsible for data protection.
Who decides what happens to your data
Most of what is in that7days is put there by an organisation — the agency, school or team you work with or book from. It decides who is on its roster, what they are paid and which families it serves. For that data the organisation is responsible for it under the PDPA, and that7days holds and processes it on the organisation’s behalf.
that7days is responsible directly for your account itself: how you sign in, and the contact details you give us.
What we collect
| What | Why |
|---|---|
| Name and email | To sign you in, and to tell your organisation who you are. |
| Google profile | If you choose “Continue with Google”: your name, email address and profile picture. We do not get your Google password, contacts, files or anything else in your Google account. |
| Phone and WhatsApp | Only if you add them: to send shift offers and reminders by WhatsApp, which you agree to separately and can turn off. |
| Emergency contact | Only if you add one, for your organisation to use if something happens at work. |
| Schedule | Shifts, lessons, availability, days off, and replies to offers — the point of the app. |
| Check-in location | When you check in or out of a shift, where you were and how accurately, so your organisation can confirm attendance and hours. Only at that moment — the app does not track you in between. |
| Check-in photo | Only if your organisation asks for one at check-in. |
| Pay and earnings | Rates, hours, commission, expense claims and payment status, so you and your organisation can see what is owed. |
| Skills and credentials | Qualifications, tags and their expiry dates, so the right people are put on the right work and reminded before something lapses. |
| Messages | Chat between you and your organisation inside the app. |
| Clients and bookings | For organisations that take bookings: the client’s or family’s name, billing email, bookings, attendance and invoices. |
| Activity records | Who changed what and when, so mistakes can be traced and undone. |
We do not sell personal data, show advertising, or use it to profile you for anyone else.
Who else handles it
that7days runs on services from other companies. Each gets only what it needs to do its part:
- Supabase — the database and sign-in, hosted in Singapore.
- Cloudflare — serves the website and runs the app.
- Google — “Continue with Google”, if you use it.
- Resend — sends email such as sign-in links and shift notices.
- Meta (WhatsApp) — delivers WhatsApp messages, if you have turned them on.
- OneMap (Singapore Land Authority) and OpenStreetMap — look up an address when someone types one in to place a venue on the map. They receive the address being searched, not who is searching.
Some of these store or process data outside Singapore. Where they do, we rely on their contractual commitments to protect it to a standard comparable to the PDPA.
Your organisation sees what it needs to run its roster. Other organisations on that7days cannot see your data.
How long we keep it
For as long as your account or your organisation’s account is in use. Pay, attendance and invoice records may need to be kept for longer, because organisations have to keep them for tax and employment purposes; after that they are deleted.
What you can ask for
- A copy of the personal data we hold about you, and how it has been used in the past year.
- A correction of anything that is wrong. Much of it you can change yourself in the app.
- Withdrawing consent — for WhatsApp messages you can do it in the app at any time. Withdrawing consent for everything means closing your account.
- Deleting your account. Email us and we will remove it. Records your organisation must keep by law stay with the organisation.
Email hello@that7days.com from the address on your account. We reply within 30 days. If a request is about data your organisation controls, we pass it to them and tell you we have.
Keeping it safe
Data is encrypted in transit and at rest. Every query runs as the person asking, and the database itself refuses to return another organisation’s data. Sign-in uses one-time email links or Google — there are no passwords here to steal. If a breach puts your data at risk, we will tell you and the Personal Data Protection Commission as the PDPA requires.
Cookies
The app sets only the cookies it needs to keep you signed in and to complete a sign-in safely. There are no advertising or tracking cookies.
Changes
If this page changes in a way that matters, the date at the top changes, and if you have an account we will tell you in the app or by email.