Hands to Hold Privacy Policy

• The app collects what the agency needs to hire caregivers and to care for clients, and nothing more.
• Only you and the agency office can see your file. Other caregivers and clients cannot.
• We never sell your information, show ads, or track you across other apps and websites.
• Your most sensitive numbers are encrypted, and every time the office opens one, it is logged.
• You can delete your account from inside the app at any time.

Your account. Your name, email address, phone number, password (stored only as a secure hash, never readable by anyone), your role in the app, and a profile photo if you add one.

Your profile and application.Your date of birth, home address, emergency contact, and the answers you give in your application, such as your work authorization, caregiving experience, driver's license and CNA license numbers, the languages you speak, and your references and how to reach them.

Hiring and pay forms, for caregivers.Your Social Security number, the details you enter on Form I‑9 and Form W‑4, and the bank account you choose for direct deposit.

Care details, for clients. Your date of birth, home address, Social Security number, insurance, Medicare and Medicaid details, health conditions, allergies, mobility needs, doctor and pharmacy, the people who help you make decisions, and the care plans, assessments and agreements the agency prepares with you.

Documents and uploads. Files and photos you upload because the agency asks for them, such as a photo ID, a TB test or a clearance record, along with their expiry dates. Office staff may also add documents to your file, such as a signed evaluation.

Signatures. The signature you draw or type when you sign a form, a policy or an agreement, and the date and time you signed it. The signed copy is kept with your file.

Messages. The messages you send to and receive from the office in the app.

Training and test results. The lessons and videos you finish, your answers and scores on competency tests, and the certificates you earn.

Reports you file. Incident reports, and problem reports you send from Report a problem, with a screenshot if you choose to add one.

Notifications and push tokens. The notifications the app sends you, which ones you have read, your notification settings, and a push token, a random code from your device that lets us deliver alerts to it. Signing out removes the token from your account.

Activity log. A record of important actions, such as who reviewed a document, who changed a record, and who opened a protected number. The agency keeps this log to show that your information was handled properly.

Crash reports. When the app crashes on a phone or tablet, Firebase Crashlytics receives a technical report: the device model, system version, app version and where in the code the problem happened. On Windows, a cleaned up report goes to our own server with anything typed on screen removed. Crash reports are not tied to your name or account and are used only to fix bugs.

• Your location. The app never asks for it and never uses it.
• Your contacts, microphone, or anything on your device you have not chosen to share.
• Advertising identifiers, analytics or tracking of any kind.

The camera and photo library are used only when you choose to take or pick a photo, for your profile or for a document.

The agency also uses HHAeXchange, a separate system of its own. Hands to Hold does not connect to HHAeXchange, and no data from HHAeXchange is copied into Hands to Hold.

Your information is used only to run Hands to Hold for the agency, which means to:

• review applications, finish hiring, and pay caregivers
• give and track training, and keep the records the agency must keep
• plan and document client care, and keep signed forms on file
• let you and the office message each other, and send you alerts you have not turned off
• keep the app secure, fix problems, and answer your questions

We do not sell your information, use it for advertising, or share it with data brokers.

You. You can see your own file, documents, forms, messages and training in the app.

The agency office. Office staff at Hands to Hold Home Care can see what their role needs. Full Social Security numbers and bank account numbers can be opened only by authorized office staff, and each time one is opened it is recorded in the activity log.

Volt LLC. A small number of people at Volt LLC can reach the systems that run the app, only to keep it working, fix problems or answer a request from you or the agency.

Other users.Caregivers and clients cannot see each other's files.

When the law requires it.We may share information if a valid legal process requires it, or to protect someone's safety. State agencies and auditors may review the agency's records as the law allows.

We use a few trusted services, each only for the job listed here:

• Supabase hosts the app: sign in, the database, file storage for documents and uploads, and the server functions that encrypt protected numbers and delete accounts.
• Firebase Cloud Messaging, from Google, delivers push notifications to your device, along with Apple's push service on iPhone and iPad.
• Firebase Crashlytics, from Google, receives crash reports from phones and tablets, as described above.
• Google Workspace sends account emails, such as a password reset link.
• Google Fonts supplies the lettering the app uses, which your device may download from Google the first time it is needed.
• Apple, Google and Microsoft deliver the app through their stores, under their own privacy policies.

None of these services may use your information for their own advertising.

Everything travels over encrypted connections. Access is checked on our servers for every request, so an account can reach only what its role allows. Full Social Security numbers and bank account numbers are encrypted on our servers before they are saved, are never stored in plain text, and every view of them is logged. Documents are kept in private storage that only you and the agency office can open.

No system is perfectly secure. If we learn of a breach that affects your information, we will tell you and the agency as the law requires.

Your information stays while your account is open. The agency must keep certain employment and care records for as long as Pennsylvania and federal law require, such as Form I‑9, incident reports, care plans and the activity log. Those records stay with the agency even after an account is deleted, with your name removed where the law allows.

You can delete your account at any time from inside Hands to Hold:

1. Open the You tab.
2. Under Settings, tap Delete my account.
3. Tap Delete to confirm.

This permanently deletes your Hands to Hold account, your profile, the documents and screenshots you uploaded, your messages, notifications, training records and your other personal information in the app. Records the agency is required to keep, such as incident reports, compliance logs and care plans, are kept with your name removed. If you also use another Volt LLC app with the same sign in, that sign in stays so the other app keeps working.

If you cannot open the app, email info@volt.rocks from the address on your account and ask us to delete it. We will confirm when it is done, usually within 30 days.

• See and update most of your details yourself in the app.
• Ask the office, or us, for a copy of your information, or to correct something that is wrong.
• Turn notifications off in Settings or in your device settings.
• Delete your account, as described above.

Some requests about hiring or care records are decided by the agency, because those records belong to it. We will pass your request to the agency when that is the case.

You must be 18 or older to create an account. A family member or representative may use Hands to Hold on behalf of a client. We do not knowingly collect information from children under 13 through the app.

We may update this policy from time to time. If a change is important, we will try to give at least 30 days of notice before it takes effect, in the app or on this page. The effective date at the top always shows the latest version.

Volt LLC, 610 Old York Road, Suite 400, Jenkintown, PA 19046, or info@volt.rocks. For questions about your application, your work or your care, please message the agency office in the app.