Privacy Policy for Carestream 24

Carestream 24 Inc. ("we," "our," or "us") is committed to protecting the privacy and security of your personal information. This Privacy Policy explains how we collect, use, store, and protect your personal data when you use our shift management app, Carestream 24, available on iOS, Android, and our website (collectively, the "App"). This policy applies to all users, including healthcare professionals seeking shifts in care homes, hospitals, and other healthcare facilities in Canada. We do not use your data for tracking purposes, such as targeted advertising or sharing with data brokers.

1. Information We Collect

We collect the following types of personal information to provide, personalize, and improve our services. All data types listed below are linked to your identity to provide personalized services and ensure app functionality. We do not use your data for tracking purposes, such as targeted advertising or sharing with data brokers.

2. How We Use Your Information

We use your personal information for the following purposes, as indicated for each data type. We do not use your data for tracking purposes, such as targeted advertising or sharing with data brokers.

• Account Management: To create, secure, and personalize your account using your Name, Email Address, Phone Number, Physical Address, Other User Contact Info, User ID, and Device ID.
• Qualification Verification: To confirm your professional credentials and eligibility for healthcare shifts in Canada using Photos or Videos, Name, Physical Address, and Other User Contact Info.
• Shift Management: To facilitate shift applications, verify on-site presence at care homes via Precise Location, and enable automatic shift approval.
• Job Personalization: To calculate distances to care homes and filter nearby jobs using Coarse Location (optional).
• Payment Processing: To process payments for completed shifts using bank account details (part of Other User Contact Info) and track earnings via Product Interaction.
• Communication: To send shift reminders, OTPs, voice calls, and push notifications using Email Address, Phone Number, and Other User Contact Info.
• App Improvement: To analyze usage (Product Interaction, Other Usage Data) and diagnostics (Crash Data, Performance Data, Other Diagnostic Data) via Sentry and PostHog to enhance functionality, performance, and user experience.
• Product Personalization: To tailor shift recommendations and app features to your preferences using Name, Email Address, Phone Number, Physical Address, Other User Contact Info, Coarse Location, and Photos or Videos.
• Legal Compliance: To comply with applicable laws, regulations, and industry standards in Canada.

3. Data Storage and Security

All personal data, including our database, is hosted on secure Digital Ocean servers located in Toronto, Canada. We take the security of your personal information seriously and protect it using industry-standard measures, including:

• Encryption of sensitive data (e.g., bank details, professional documents, Photos or Videos) both in transit and at rest.
• Access controls to ensure only authorized personnel can access your information.
• Regular security audits and updates to protect against unauthorized access, disclosure, alteration, or destruction.

We retain your personal information only for as long as necessary to fulfill the purposes outlined in this Privacy Policy, comply with legal obligations, resolve disputes, and enforce our agreements. When your data is no longer needed, we will securely delete or anonymize it.

4. Data Sharing and Third-Party Services

We may share your personal information with third-party service providers who assist us in operating the App. These providers are contractually obligated to protect your data and use it only for the purposes specified by us, such as authentication, notifications, payment processing, and analytics. Examples include:

• Authentication Services: We use Clerk for user authentication, which may access your Email Address, User ID, and Device ID for secure login.
• Payment Processors: Secure payment gateways process payments, accessing bank account details (part of Other User Contact Info).
• Communication Services: Third-party services send OTPs, voice calls, and push notifications, accessing Email Address, Phone Number, and Other User Contact Info.
• Analytics Services: We use Sentry and PostHog to collect data (e.g., User ID, Product Interaction, Crash Data, Performance Data, Other Usage Data, Other Diagnostic Data) for error tracking, performance monitoring, and user behavior analysis, without sharing for advertising purposes.

We do not sell, rent, or share your personal information with third parties for marketing or advertising purposes.

We may disclose your information to comply with legal obligations, such as responding to lawful requests from government authorities or enforcing our terms of service.

5. Your Rights

Under applicable privacy laws, including the Personal Information Protection and Electronic Documents Act (PIPEDA), you have the following rights regarding your personal information:

• Access: Request a copy of the personal information we hold about you.
• Correction: Request corrections to inaccuracies in your personal information.
• Deletion: Request deletion of your personal information, subject to legal obligations (e.g., retaining payment records for tax purposes).
• Withdrawal of Consent: Withdraw consent to the collection and use of your data at any time, though this may affect your ability to use the App.

To exercise these rights, contact us at support@carestream24.ca. We will respond within 30 days.

6. Location Data and Permissions

The App collects Precise Location and Coarse Location data to verify your presence at care homes and personalize shift recommendations. Precise Location is collected via GPS during shift check-in and check-out to confirm you are at the correct care home. Coarse Location may be optionally saved to calculate distances to care homes and filter nearby jobs in the shift marketplace. Location data is only collected with your explicit permission and is not used for advertising or tracking purposes.

• iOS and Android Permissions: The App will request permission to access your device’s location when you use the shift check-in feature or enable job filtering. You can manage these permissions in your device settings.
• Purpose Limitation: Location data is used solely for shift verification and job personalization and is not shared for advertising or other purposes.
• Optional Location Saving: You may choose to save your Coarse Location to see distances to care homes and filter nearby jobs. This feature is optional and can be disabled in the App settings.

7. Cookies and Similar Technologies

Our website uses cookies and similar technologies to enhance your browsing experience and collect usage data (e.g., Product Interaction, Other Usage Data). Cookies are small data files stored on your device that help us remember your preferences and understand how you interact with our website.

• Types of Cookies: We use session cookies (temporary) and persistent cookies (stored until deleted or expired).
• Managing Cookies: You can manage cookie preferences through your browser settings. Disabling cookies may affect website functionality.

8. International Data Transfers

All personal data is stored and processed on Digital Ocean servers in Toronto, Canada. If we transfer your data to third-party providers outside Canada (e.g., for analytics or communication services), we ensure appropriate safeguards are in place to protect your information in accordance with Canadian privacy laws.

9. Changes to This Privacy Policy

We may update this Privacy Policy to reflect changes in our practices or legal requirements. We will notify you of significant changes by posting the updated policy on our website and within the App. Your continued use of the App after such changes constitutes acceptance of the revised policy.

10. Contact Us

For questions, concerns, or requests regarding this Privacy Policy or our data practices, contact us at:

Carestream 24 Inc.
Email: support@carestream24.ca
Address: 7880 Beaverton Boulevard
Niagara Falls, Ontario
L2H3M5, Canada

11. Consent

By using the App, you consent to the collection, use, and processing of your personal information as described in this Privacy Policy. If you do not agree, please do not use the App.