Privacy Policy

• Office staff and administrators at Safe and Sweet.
• Caregivers who work for Safe and Sweet, and people applying to work there.
• Clients who receive care from Safe and Sweet, and family members or representatives acting for them.

What is collected depends on your role. Each item below is something the app actually stores.

• Account. Your name, email address, role and a password. The password is stored only as a secure hash by our sign in provider; nobody at Safe and Sweet or Volt can read it.
• Profile. Phone number, home address, date of birth, an optional profile photo, emergency contacts, availability and qualifications.
• Employment and onboarding (caregivers and applicants). Your job application, the information on your Form I9 and Form W4, your Social Security number, direct deposit details (bank name, routing and account number) and the signatures you give in the app. The full Social Security number and bank numbers are encrypted before they are stored, and only the last four digits of the Social Security number are kept in readable form.
• Documents and certifications.Files and photos you upload, such as identification, certificates, licenses, clearances and background check results, with their issue and expiration dates and the office's review decision.
• Training and quiz results. Which training videos and courses you completed, your quiz and competency test answers and scores, policy acknowledgements, and performance evaluations the office writes.
• TB screening. Your tuberculosis test or screening date, result, expiration date and any screening questionnaire answers, so the agency can keep the annual check current.
• Clients' care information. For clients: date of birth, address, care needs, insurance and Medicaid details, allergies, medications, assessments, service plans and care schedules.
• Shifts and visits. Schedules, assignments, and the check in and check out times and task notes a caregiver records for a visit.
• Incidents. Incident reports a caregiver or the office files, including the people involved and what happened.
• Messages and notifications. Messages you send to the office or other users in the app, and the notifications the app sends you.
• Push notification token. A token from Firebase Cloud Messaging that lets the app deliver notifications to your device, and your notification preferences.
• Bug reports. If you use Report a Bug, the subject and message you type and any screenshot you choose to attach.
• Activity records. A log of who viewed or changed sensitive records, such as an office reading an encrypted Social Security number, kept for security and compliance.

The app never uses your location, in the foreground or the background. It does not read your contacts or use your microphone. It has no advertising, no analytics and no tracking code, it does not read your advertising identifier, and it does not track you across other apps or websites. Your information is never sold.

The app asks for the camera and your photo library only when you choose to take or attach a profile photo, a document or an identification image. It asks to send notifications so you hear about shifts, messages, expiring documents and training. You can turn any of these off in your device settings; the rest of the app keeps working.

• To run your account and let you sign in.
• To review job applications, onboard and employ caregivers, and run payroll.
• To plan, schedule, deliver and document client care.
• To track training, certifications, TB screening and other requirements, and remind you before something expires.
• To send you messages and notifications about your work or your care.
• To keep the records that Pennsylvania rules, payers and auditors require of a home care agency.
• To secure the app, investigate problems and fix bugs.

Inside the app, people see only what their role needs. Caregivers and clients see their own records and what relates to their own shifts and care. Safe and Sweet office staff can see the records they manage.

The app relies on these service providers, each handling the information only to provide its service:

• Volt LLC, the developer, which runs and supports the app.
• Supabase, which hosts the database, sign in and file storage in the United States.
• Google Firebase Cloud Messaging, with Apple Push Notification service on iPhone, which delivers push notifications.
• Google, whose email service sends account emails such as password reset links.

Safe and Sweet may also share information where the law requires it or where it is needed to provide and be paid for care, for example with state agencies, managed care organizations and other payers, auditors, or a client's other health care providers. We do not share information for anyone's advertising.

Client care information is health information. Where Safe and Sweet is covered by the Health Insurance Portability and Accountability Act (HIPAA), it handles that information as HIPAA requires, and its Notice of Privacy Practices, available from the office, also applies to you.

Everything travels between the app and the servers over encrypted connections. Full Social Security numbers and bank account details are encrypted with 256 bit AES before they are stored, the key is held apart from the database, and every time the office reads one it is logged. Uploaded files sit in private storage. Database rules limit each person to the records their role allows. No system is perfectly secure, so if you believe your account has been misused, tell the office straight away.

You can delete your account at any time in the app: open Settings and choose Delete Account. That removes your sign in, your profile, your uploaded files and your personal records, including documents, messages, notifications, schedules, visits, certifications and training results.

Some records about a client's care must be kept by law even after an account goes, such as incident reports, service plans, compliance logs and audit logs. Those are kept with your name and account removed from them. Separately, Safe and Sweet may keep employment and care records it must retain under state or federal law in its own files, for as long as that law requires.

If the app cannot finish a deletion, contact the office using the details below and we will complete it.

You can see and update most of your information in the app. To get a copy of your information, correct something you cannot change yourself, or ask a question about how it is used, contact the office. You can turn notification types on or off in the app's notification settings.

The app is for adults. Caregivers and applicants must be at least 18, and client accounts are for adults receiving care or the adults acting for them. The app is not directed to children under 13 and does not knowingly collect their information.

If this policy changes in a way that matters, we will update this page and its date, and tell you in the app when the change is significant. The Terms of Use also apply to the app. Questions about this policy or your information go to:

Safe and Sweet Home Care, LLC, 1815 W Cayuga Street, 2nd Floor, Philadelphia, PA 19140. Email baheejahmahdi@yahoo.com or call the office at 215 800 0432.

Technical questions about the app can also go to its developer, Volt LLC, at info@volt.rocks.