Overview
CareV (“CareV”, “we”, “us”) operates a home-healthcare platform that connects families in India with verified care professionals — nurses, physiotherapists, and day-care attendants. This Privacy Policy covers the CareV website (carev.co.in) and the CareV mobile applications for customers and care providers.
We are currently in a pre-launch phase. Today the website only collects a waitlist email address. The sections below describe the mobile apps and platform so the policy is complete and accurate when the service becomes available in your area.
Information we collect
We collect only the information needed to verify identities, match care, and run the service.
From customers (people booking care)
- Mobile number (used for sign-in — see Authentication below)
- Full name and email address
- Date of birth and sex/gender
- Occupation (optional)
- Address and location details (address, city, state, PIN code, country, GPS coordinates)
- Optional profile details such as blood group, preferred languages, and availability/donation preference flags
From care providers (professionals offering care)
- Name, display name, email, gender, date of birth, and spoken languages
- Service location, coverage radius, and address details
- Qualifications, years and band of experience, previous workplace, specialised skills, and employment type
- Identity and credential documents (see Identity & documents below)
- Bank/UPI payout details — UPI ID, account holder name, IFSC, and only the last four digits of the bank account number
- Emergency contact numbers and relationship, and permanent address
- Work preferences, vehicle/driving-licence status, and a weekly availability schedule
We do not collect medical records, diagnoses, or health history; we do not record calls, audio, or video; we do not collect persistent device identifiers (such as IMEI); and we do not use social-login providers.
Authentication & OTP verification
Sign-in uses your mobile number with a one-time password (OTP) delivered by SMS through Firebase Authentication (a Google service). You enter your number, receive a 6-digit code, and verify it in the app. We do not offer email/password or social sign-in.
Your phone number is managed by Firebase Authentication to establish your account identity. Email is collected as part of your profile. We apply a limit on repeated failed OTP attempts to protect against abuse.
Location data
We use your device location only while the app is in use (foreground), and only when you ask us to detect your address or set your service area. We use it to:
- auto-detect and fill your address during onboarding (reverse-geocoded to street/city/state/PIN code);
- match customers with nearby available providers; and
- for providers, publish an approximate live position only while they explicitly toggle “online”.
We do not track location in the background, run any continuous location service, or follow a provider’s movement to a customer in real time. When a provider goes offline, their published location record is deleted. We do not use Google Maps; location is handled with on-device GPS and geocoding.
Identity verification & documents (providers)
To keep families safe, care providers complete identity and credential verification. This may include:
- Aadhaar: Only the last four digits and a masked form (e.g. ••••-••••-1234) are stored in our database. The full Aadhaar number is held only in encrypted storage on the provider’s own device while onboarding is in progress, and is never sent to our servers. Our systems explicitly reject any attempt to write a raw Aadhaar number into stored records. Authorised CareV staff verify the number by visually comparing it against the uploaded ID photo below, not by reading a stored number back.
- Aadhaar front/back images and professional credentials (e.g. nursing certificate, registration ID, degree/practice certificates, training certificates).
- A live verification selfie. Liveness/face detection is performed on the device using Google ML Kit; we do not build a biometric face-recognition database.
Uploaded documents are stored in secure cloud storage and are never publicly accessible. Access is granted through short-lived signed links to authorised staff only.
Device & diagnostic information
- Push tokens: A Firebase Cloud Messaging token so we can send you booking and account notifications.
- Crash diagnostics: If the app crashes, Firebase Crashlytics records technical diagnostic data to help us fix problems (disabled in development builds).
- App analytics: Firebase Analytics records a small number of in-app events (for example, selecting whether you are a customer or a provider) to understand product usage. These events are not used to build advertising profiles.
- App integrity: Firebase App Check attestation tokens confirm that requests come from the genuine CareV app.
How we use information
- Create and secure your account and verify your identity.
- Match care requests with suitable, verified providers and coordinate bookings.
- Send booking updates, reminders, and account notifications.
- Verify provider credentials and maintain trust and safety.
- Maintain, debug, and improve the apps and website.
- Comply with legal obligations and prevent fraud or abuse.
Website, cookies & local storage
The CareV website does not use advertising cookies, trackers, or third-party analytics. When you join the waitlist, your email address is stored in your browser’s local storage so that, on a return visit, the site remembers you are already on the list. The admin console uses local storage only to remember interface preferences. No HTTP tracking cookies are set.
Security practices
- All network traffic is encrypted in transit (HTTPS/TLS).
- Sensitive on-device data is held in encrypted local storage backed by the platform keystore/keychain.
- Documents are served only via short-lived signed URLs; raw storage paths are never exposed.
- Aadhaar is minimised (last four digits stored); the full number is never sent to our servers and is verified visually against the uploaded ID photo instead.
- Firebase App Check helps ensure requests originate from the genuine app.
- Staff access to sensitive records is role-restricted and recorded in an immutable audit log.
No method of transmission or storage is completely secure, but we work to protect your data using industry-standard measures.
Data retention
We keep your information for as long as your account is active or as needed to provide the service and meet legal, tax, and safety obligations. Onboarding drafts stored on your device are cleared when you log out. When you request deletion, we remove or anonymise personal data that we are not legally required to retain.
Your rights
Subject to applicable Indian law, including the Digital Personal Data Protection Act, 2023, you may request to:
- access the personal data we hold about you;
- correct or update inaccurate information;
- delete your data and account;
- withdraw consent you previously gave; and
- raise a grievance about how your data is handled.
To exercise any of these, contact us at info@carev.co.in.
Account & data deletion
You can request deletion of your account and associated personal data by emailing info@carev.co.in from your registered email or via the app. We will verify your identity and process the request within a reasonable period, retaining only what the law requires.
Children
CareV accounts are intended for adults (18+). Care may be arranged for dependants, but the account holder must be an adult who is responsible for the booking. We do not knowingly create accounts for minors.
Changes to this policy
We may update this policy as the platform evolves — for example, when payments are introduced. We will revise the “Last updated” date and, for material changes, provide an in-app or email notice.
Contact us
Questions about this policy or your data? Email info@carev.co.in. Complaints regarding content and personal data, as required under India’s IT Rules and the DPDP Act, are handled by the CareV Grievance Officer, reachable at the same address.