Privacy Policy
How we handle staff work records and Google Drive access.
Midorien Time Study is a staff work-time recording tool operated by the facility’s time-study administrator. It records and summarizes work activities and saves a CSV for each shift to the administrator’s designated Google Drive folder.
Information we use
- Staff and work records. Staff ID, name, activity categories and names, start and end times, durations, and shift identifiers are used to record, edit, summarize, and export work time.
- Google account and folder details. The connected administrator’s account email address, folder ID, owner details, and write permissions are used to verify the designated destination.
- File details. File IDs, names, destination folders, deletion status, and checksums are used to confirm successful saves and prevent duplicate uploads when retrying.
- Authorization credentials. Google OAuth credentials enable continued access authorized by the administrator. The app does not receive Google account passwords.
Google Drive access
The administrator authorizes the Google Drive drive.file permission. Access is limited to files and folders authorized for the app and files created by the app. The app does not search or collect the contents of the entire Drive.
When you export a CSV, staff IDs, names, and work records pass through our server to the designated Google Drive folder. Files are named staffID_name.csv. Staff do not need to connect their own Google accounts.
The app does not download CSV files to your device or make them public. The administrator controls access through Google Drive sharing settings.
Storage and retention
Work-in-progress records and retry information, including the CSV content, are stored in the browser on the device you use. They remain between visits until cleared. After a confirmed Drive save, choosing the next-staff action clears that shift’s records, staff details, and retry information from the browser. Clearing the site’s browser data also removes local records, including any records not yet uploaded.
Saved CSV files remain in Google Drive until the administrator removes them. The app does not automatically overwrite or delete earlier exports. Correcting records and exporting again may create a separate file.
The server processes CSV content to transfer it to Drive and does not maintain a separate application database of work records. Authorization credentials are stored as server-side secrets until the administrator removes or replaces them. Revoking Google access prevents further uploads but does not automatically remove stored credentials or existing CSV files.
Service providers and data use
Cloudflare hosts the app and processes uploads. Google provides authorization and Drive storage. These providers may process technical information, such as IP addresses and access logs, for service operation and security under their own policies and retention practices.
The app uses records for the facility’s time-study collection and analysis. It does not sell data, serve advertisements, or use data to train AI models.
Use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including its Limited Use requirements.
Security and access
Connections use HTTPS, and Google credentials are kept out of the public page. The app checks upload origin, format, size, and destination. Uploads do not require an individual staff login, and entering a staff ID does not verify identity. The facility administrator is responsible for device access and Drive sharing permissions.
Corrections, deletion, and disconnection
You can correct current records in the app before moving to the next staff member. For access to, correction of, or deletion of saved CSV files, contact your facility’s time-study administrator through your usual internal contact channel. The administrator can remove files in Drive and manage any older exports.
The connected administrator can revoke access in Google Account connections. To remove server-side authorization credentials, contact the facility’s time-study administrator.
Questions and policy updates
For questions about this policy or how records are handled, contact your facility’s time-study administrator through your usual internal contact channel.
Changes will be published on this page with an updated revision date. If we introduce a new use of Google user data, we will provide notice and obtain any required consent before that use begins.