Privacy Policy

• Account and contact information, including your name, email address, phone number, physical address, account identifiers, email-verification status, authentication credentials, and support communications.
• Caregiver and provider profile information, including professional titles, biography, languages, work history, education, licenses, certifications, availability, job preferences, service areas, rates, organization details, and related documents.
• Client and referral information, including contact details, service address, care needs, and information submitted through request forms.
• Photos, videos, documents, and content, including profile photos, intro videos and their audio, credential files, job applications, cover letters, schedules, time-off requests, reports, and other information you submit.
• Chat messages and related metadata, including participants, timestamps, delivery and read status, block or mute settings, report reasons, and limited message evidence needed to investigate safety concerns.
• Location information, including a manually entered address or Precise Location or Approximate Location collected with your permission, together with city, state, postal code, country, latitude, and longitude.
• Device and technical information, including IP address, browser and device details, app version, installation identifier, Apple push token, notification preferences, authentication and fraud-prevention signals, service audit records, and product interactions.
• Provider billing and subscription information. Stripe processes payment-card or bank details for provider portal billing; IHC receives limited billing, transaction, and subscription metadata and does not store full card or bank-account details on its servers.

We collect information directly from you, from permissions you choose to grant, from your use of Platform features, from organizations that interact with your applications or referrals, and from processors that provide identity verification, media storage, payment, email, hosting, and notification services.

Identity verification is provided through a hosted Didit flow. Depending on the configured check, Didit may collect identity and contact details, government-issued identity documents and document images, date of birth, selfies, face images or video, liveness captures, biometric data derived from facial comparisons, device and IP information, location or anti-fraud signals, and verification results.

IHC receives and stores verification session identifiers, status, decisions, risk or review results, and related security and audit records needed to determine whether an account is verified. Identity verification is required before caregivers can apply for, bid on, or otherwise participate in jobs.

The current caregiver app may display background-check status but does not start a background check. Before a background-check provider is enabled, we will identify the provider, explain the information requested and retention terms, and obtain any consent required by law.

• Create, authenticate, secure, and support accounts and Platform access.
• Build professional and organization profiles, facilitate referrals, and personalize nearby jobs and service opportunities.
• Verify identities and credentials, prevent fraud, investigate reports, enforce eligibility rules, and protect users.
• Process applications, schedules, time off, work confirmations, earnings, provider subscriptions, and Platform communications.
• Deliver chats, account notices, application updates, shift reminders, safety alerts, transactional email, and push notifications you enable.
• Operate, troubleshoot, analyze, and improve Platform reliability, security, and performance, and comply with legal obligations.

We do not sell personal information. We do not use caregiver data for cross-app tracking, targeted third-party advertising, or data-broker profiling.

We disclose only the information needed for the service, transaction, safety purpose, or legal requirement involved. Known processors and recipients include:

• Didit, which processes identity documents, face images, liveness and biometric data, verification telemetry, and results for identity verification and fraud prevention.
• Cloudflare, which provides R2 object storage and delivery for profile photos, intro videos, and professional credential documents.
• Apple, which provides the Apple Push Notification service and iOS services used for notifications, location, geocoding, and maps.
• Resend, which delivers transactional account and verification emails on our behalf.
• Stripe, which processes provider subscription and billing payments and returns limited transaction and subscription information to IHC.
• Vercel, which hosts parts of the public website and provides limited website performance measurement, including technical request and interaction data.
• Healthcare providers, organizations, professionals, clients, and families that receive the profile, referral, application, credential, schedule, payment, or communication information needed to evaluate or work with you.
• Professional advisers, regulators, law enforcement, courts, or other parties when disclosure is required to comply with law, protect rights or safety, prevent fraud, resolve a dispute, or handle a corporate transaction.

Processors are required by contract or applicable law to protect information and use it only for authorized services. Organizations acting independently may have their own privacy obligations and notices.

Before the hosted Didit capture flow opens, the caregiver app identifies Didit, describes the identity and biometric information involved, explains sharing and retention, and requests explicit consent. You may stop before submitting information or contact us to withdraw consent for future identity processing and request deletion of verification data. Withdrawal does not undo processing already completed and may leave job-related actions unavailable.

We generally retain account, profile, location, professional, referral, job, schedule, financial, notification, and user-content records while an account is active and for as long as needed to provide the requested service.

When a caregiver requests account deletion in Settings, access is blocked immediately and active sessions and push delivery are disabled. After 30 days, we delete or anonymize the caregiver account, profile, location, media, credential documents, notification devices, and identity-verification records in IHC systems.

At permanent deletion, chat message bodies and report evidence linked to the caregiver are redacted. We may retain de-identified message, safety, fraud-prevention, payment, transaction, legal, or audit records where needed to protect users, resolve disputes, enforce agreements, or satisfy law. Backups and processor copies expire under applicable backup schedules, contracts, and legal requirements.

Didit retains verification inputs, outputs, biometric data, and operational metadata according to IHC's configured retention setting, our instructions, Didit's verification privacy notice, and applicable law. Didit offers settings from 30 days to 10 years and defaults to unlimited retention when no shorter period is configured. You may contact us to request deletion of a Didit verification session; some records may be retained where law permits or requires it.

• Update profile, professional, location, availability, media, and notification information through the Platform where those controls are available.
• Change camera, microphone, photo, location, and notification permissions in iOS Settings. Revoking permission stops future device access but does not delete information already submitted.
• Request access, correction, deletion, restriction, or portability where applicable by contacting support@internalhealthcare.com. We may need to verify your identity before completing a request.
• Caregivers can delete an account from Settings > Account settings > Delete account. The app explains the immediate access restriction and 30-day deletion schedule before confirmation.

If you decline optional permissions, you can still use features that do not require them. Caregivers may enter location details manually, while job-related actions remain unavailable until required identity verification is completed.

We use administrative, technical, and organizational safeguards designed to protect personal information, including authenticated access, encrypted network transport, protected credential storage, access controls, and audit records. No system can guarantee absolute security.

IHC and its service providers may process information in the United States and other countries where they operate. When required, we use contractual and legal safeguards for international transfers.

The caregiver app and professional Platform features are intended for adults age 18 and older. We do not knowingly collect personal information from children through those services.

We may update this policy as our services, processors, or legal obligations change. We will update the date above and provide additional notice or request consent when required by law.

Internal Healthcare Group

Website: www.internalhealthcare.com

Support Email: support@internalhealthcare.com

Support Line: +1 844-683-7625