Privacy Policy and Data Protection
This Privacy Policy explains how CareO’Clock Home Care Services (“CareO’Clock”, “we”, “our”, “us”) collects, uses, shares, retains, and deletes personal data when you use our website, mobile application, and related services for clients, caregivers, and administrators alike.
1. Information We Collect
We collect only what’s needed to coordinate safe, reliable care and to operate the platform.
Account Information
Name, email address, phone number, account role, and secure login credentials.
Care Coordination Data
Care requests, assignments, schedules, visit records, and related communications needed to deliver services.
Visit Location
For caregivers, a one-time device location check at visit check-in and check-out. See Section 4.
Payment & Billing
Transaction references and billing records required for accounting, fraud prevention, and legal compliance.
Device & Technical Data
IP address, device/app data, security logs, and push notification tokens.
Support Information
Details you provide when you contact us for help.
2. How We Use Information
Every use ties back to delivering, securing, or improving the CareO’Clock platform.
- Provide, operate, and improve CareO’Clock services.
- Authenticate users and secure accounts and sessions.
- Coordinate care workflows, bookings, communications, and payments.
- Confirm that visits take place at the scheduled address.
- Detect, prevent, and investigate abuse, fraud, and security incidents.
- Comply with legal, regulatory, and contractual obligations.
3. How We Share Information
We do not sell personal data. We share data only where absolutely necessary to provide services or comply with law.
Authorized Users
Clients, caregivers, and admins access data based on role-based, need-to-know access controls.
Trusted Service Providers
Vendors supporting hosting, authentication, analytics, notifications, mapping, and payments bound by confidentiality and security obligations.
Regulators & Authorities
Regulators, public authorities, or law enforcement, only where required by applicable law.
4. Location Policy
This section applies to caregivers using the CareO’Clock app to check in and out of visits. Clients and website visitors are not asked for their location.
Only When You Check In or Out
Your device location is requested at the moment you check in or out of a visit, and at no other time.
No Ongoing Tracking
We do not track your movements between visits or in the background.
What We Check
Your position at that moment is compared with the visit address to confirm you are at the scheduled location.
What We Keep
We keep the result of the check (such as verified, uncertain, outside, or unavailable), the approximate distance from the visit address, and the accuracy of the reading. Your exact coordinates are not stored.
How location is used
- To verify visit attendance and keep visit records accurate.
- To support payroll and billing accuracy.
- To flag visits for office review when location could not be confirmed.
- Never for advertising, and never sold.
Visit address lookup
To compare your position with the visit address, we convert the address into map coordinates using a third-party mapping service (Google). Only the address is sent for this purpose. Your device location is not sent to the mapping service.
Your choices
Location access is controlled by your device or browser settings. If location is unavailable or you decline, you can still check in or out without it. The visit is saved and may be reviewed by our office. Location results are visible only to authorized CareO’Clock administrators and are retained and deleted under Sections 5 and 6.
5. Data Retention
We keep personal data only as long as needed for service delivery, security and legal obligations.
6. Account Deletion and Data Deletion
You can request deletion through in-app account deletion (where available) or by emailing [email protected].
Deletion Is Initiated
You’re logged out immediately once the deletion request is received.
Access Is Revoked
Active tokens and sessions are revoked immediately across the platform.
Data Is Held, Then Anonymized
Your data is held for one week and then anonymized, except for records we must retain by law.
7. Your Privacy Rights
Subject to applicable law, you may exercise the following rights by contacting [email protected].
Access
Request a copy of the personal data we hold about you.
Correction
Ask us to fix inaccurate or incomplete information.
Export
Receive your data in a portable format.
Restriction
Limit how your data is processed in certain cases.
Deletion
Request erasure of your personal data, subject to legal retention.
8. Security
Layered safeguards protect personal data across the platform, with the same accountability applied to every CareO’Clock visit.
Secure Authentication
Credentials are protected end-to-end at login and throughout every session.
Role-Based Access
Data is visible only to the people who need it to do their job.
Server-Side Validation
Requests are validated on our servers, not just in the app.
Token & Session Controls
Sessions and access tokens are time-limited and revocable.
Monitoring & Audit Logging
Activity is logged with a timestamp, user ID, and IP address for a verifiable record.
9. Cookies, Comments & Embedded Content
These practices apply specifically to browsing careoclock.ca, separate from the CareO’Clock app.
Cookies
Login cookies last two days (two weeks with “Remember Me”); screen-option cookies last a year. Comment cookies, if opted into, last a year.
Comments
Comment forms collect your comment data plus your IP address and browser user agent to help detect spam.
Blog onlyMedia & Embeds
Embedded content (videos, images, articles) behaves as if you visited the source site directly, and may set its own cookies.
Password Resets
If you request a password reset, your IP address is included in the reset email for security verification.
Spam Detection
Visitor comments may be checked through an automated spam-detection service before publication.
10. Children
CareO’Clock services are not directed to children. If you believe personal data was provided inappropriately, contact us and we will review and take appropriate action.
11. Changes to This Policy
We may update this Privacy Policy from time to time. Material updates will be posted on this page with a revised effective date.
Common Privacy Questions
Quick answers to what clients and caregivers ask most.
Do you sell my personal data?
No. CareO’Clock does not sell personal data. We only share it where necessary to provide services or comply with the law. See Section 3.
Do you track my location?
No. Caregivers’ location is checked only at the moment of check-in and check-out, and never in the background. We keep the result of the check, not your exact coordinates. See Section 4.
How is my health information protected?
Protected Health Information (PHI) access is time-limited and token-secured, viewable by a caregiver only in a brief window before their scheduled visit, and every access is audit logged.
What happens to my data if I delete my account?
You’re logged out and your sessions revoked immediately. Your data is held for one week and then anonymized, except for records we’re legally required to retain.
Who can see my information within CareO’Clock?
Access is role-based and need-to-know: only the clients, caregivers, and admins directly involved in your care can view relevant records.
How do I exercise my privacy rights?
Email [email protected] to request access, correction, export, restriction, or deletion of your personal data.
12. Contact Us
Have a privacy question or want to exercise your rights? Reach our team directly.