Privacy Policy
Privacy Policy
Welcome to CareDeal ("we," "our," or "us"). CareDeal is a platform that connects people in need of at-home care with qualified caregivers in Belgium and the European Union.
This Privacy Policy explains how we collect, use, disclose, and safeguard your personal information when you use our application (the "App"). By using CareDeal, you agree to the collection and use of information in accordance with this policy.
Important: CareDeal handles health-related information as defined under the General Data Protection Regulation (GDPR). We take your privacy seriously and are committed to protecting your personal data.
Welcome to CareDeal ("we," "our," or "us"). CareDeal is a platform that connects people in need of at-home care with qualified caregivers in Belgium and the European Union.
This Privacy Policy explains how we collect, use, disclose, and safeguard your personal information when you use our application (the "App"). By using CareDeal, you agree to the collection and use of information in accordance with this policy.
Important: CareDeal handles health-related information as defined under the General Data Protection Regulation (GDPR). We take your privacy seriously and are committed to protecting your personal data.
Data Controller
For the purposes of GDPR, the data controller responsible for your personal data is:
Care-Support SRL Registered in Belgium with Company Number: BE 0827.850.260
Information We Collect
We collect different types of information to provide and improve our services to you.
1. Personal Information You Provide
When you create an account or use our App, you may provide:
Contact Information:
Full name
Email address
Phone number (with verification)
Profile Information:
Date of birth
Gender
Language preference
Care-Related Information:
Care needs and requirements
Health and fitness data related to care requests
Medical conditions or special needs (optional, user-provided)
Location Information:
Address or working area (for caregivers)
General location for service matching
Payment Information:
Payment details are processed through our third-party payment provider (Mollie)
We do not store your full credit card information
We store transaction history
Identity Verification (for Caregivers):
Government-issued ID
Professional license (INAMI)
2. Information Collected Automatically
When you use the App, we automatically collect:
Device Information:
Device type and model
Unique device identifiers
Usage Data:
App features you use
Time and date of access
Pages viewed and actions taken
App crashes and performance data
Analytics Data:
User behavior patterns
Feature usage statistics
Session duration
Interaction with notifications
3. Camera and Photo Library
With your permission, we may access:
Camera: To take photos for document verification
Photo Library: To select existing photos for verification purposes
4. Push Notifications
With your consent, we collect:
Device tokens for sending push notifications
Notification preferences and interaction data
How We Use Your Information
We use your personal information for the following purposes:
1. Provide and Maintain Services
Create and manage your account
Connect care seekers with caregivers
Process and manage care requests
Facilitate communication between users
Process payments
Verify caregiver credentials and qualifications
2. Improve User Experience
Personalize your experience in the App
Analyze usage patterns to improve features
Develop new features and services
Conduct research and analytics
3. Communication
Send service-related notifications
Provide customer support
Send important updates about the App
Respond to your inquiries
4. Safety and Security
Detect and prevent fraud
Ensure platform safety
Verify user identity
Comply with legal obligations
Protect against malicious activities
5. Legal Compliance
Comply with applicable laws and regulations
Respond to legal requests
Enforce our Terms of Service
Protect our rights and property
Your Rights
Under GDPR, we process your personal data based on the following legal grounds:
Consent: You have given explicit consent for processing your personal data for specific purposes (e.g., marketing communications, location tracking)
Contract Performance: Processing is necessary to fulfill our contract with you (e.g., providing the App services, managing your account)
Legal Obligation: Processing is necessary to comply with legal requirements (e.g., tax obligations, responding to legal requests)
Legitimate Interests: Processing is necessary for our legitimate interests, such as:
Improving our services
Ensuring platform security
Preventing fraud
Analytics and service optimization
Vital Interests: In rare cases, processing may be necessary to protect your vital interests or those of another person
For health-related data (special category data under GDPR Article 9), we rely on:
Explicit consent: You provide explicit consent for us to process health-related information
Necessary for health/social care: Processing is necessary for health or social care purposes
How We Share Your Information
We do not sell your personal information to third parties. We may share your information in the following circumstances:
1. With Other Users
Care Seekers and Caregivers: When you create a care request or respond to one, relevant profile information is shared to facilitate the connection
Communication: Messages and contact information shared during the care arrangement process
2. Service Providers
We share data with trusted third-party service providers who help us operate our App:
Firebase (Google):
Authentication services
Cloud storage
Database (Firestore)
Analytics
Crash reporting (Crashlytics)
Push notifications (Cloud Messaging)
Cloud Functions
Mollie:
Payment processing
Apple and Google:
App distribution (App Store and Google Play)
Push notification delivery
In-app review services
3. Legal Requirements
We may disclose your information if required by law or in good faith belief that such action is necessary to:
Comply with legal obligations
Protect and defend our rights or property
Prevent fraud or security issues
Protect the safety of users or the public
Respond to government requests
4. Business Transfers
In the event of a merger, acquisition, or sale of assets, your personal information may be transferred. We will notify you before your information is transferred and becomes subject to a different privacy policy.
Third-Party Services
Our App integrates with the following third-party services:
Firebase (Google Cloud Platform)
Services Used: Authentication, Firestore, Cloud Storage, Analytics, Crashlytics, Cloud Messaging, Cloud Functions
Data Shared: User account information, usage analytics, crash reports, device information
Privacy Policy: https://firebase.google.com/support/privacy
Location: Data stored in europe-west1 (Belgium)
Mollie
Services Used: Payment processing
Data Shared: Payment information, transaction history
Privacy Policy: https://www.mollie.com/privacy
Location: European Union (GDPR compliant)
Apple App Store
Services Used: App distribution, in-app review
Data Shared: App usage data, review submissions
Privacy Policy: https://www.apple.com/legal/privacy/
Google Play Store
Services Used: App distribution, in-app review
Data Shared: App usage data, review submissions
Privacy Policy: https://policies.google.com/privacy
All third-party services we use are GDPR-compliant and have appropriate data processing agreements in place.
Data Security
We implement appropriate technical and organizational measures to protect your personal data:
Security Measures
Encryption: All data transmitted between your device and our servers is encrypted using HTTPS/TLS
Firebase Security Rules: Strict database access rules to protect your data
Authentication: Secure Firebase Authentication with phone number verification
Access Controls: Limited employee access to personal data on a need-to-know basis
Regular Audits: Periodic security assessments and updates
Data Minimization: We only collect data necessary for our services
Your Responsibilities
Keep your account credentials confidential
Use a strong password
Report any unauthorized access immediately
Keep your device and app updated
Note: No method of transmission over the internet or electronic storage is 100% secure. While we strive to protect your data, we cannot guarantee absolute security
Data Retention
We retain your personal data only as long as necessary for the purposes outlined in this Privacy Policy:
Active Accounts
Account data is retained while your account is active
Usage data is retained for analytics purposes (typically 26 months)
Transaction records are retained for 7 years (tax and accounting purposes)
Deleted Accounts
When you delete your account:
Profile data is removed from active systems immediately
Backup systems retain data for up to 30 days
Financial records may be retained longer for legal compliance
Anonymized analytics data may be retained indefinitely
Legal Requirements
Some data may be retained longer to comply with Belgian and EU legal obligations
Data subject to legal holds or ongoing investigations is retained as required
You can request deletion of your data at any time by contacting caredeal@softwhale.be or using the in-app account deletion feature.
Your Rights Under GDPR
As a user in the European Union, you have the following rights regarding your personal data:
1. Right to Access
You can request a copy of the personal data we hold about you.
2. Right to Rectification
You can request correction of inaccurate or incomplete data.
3. Right to Erasure ("Right to be Forgotten")
You can request deletion of your personal data. See our Account Deletion page for details.
4. Right to Restrict Processing
You can request that we limit how we use your data.
5. Right to Data Portability
You can request your data in a structured, machine-readable format.
6. Right to Object
You can object to processing of your data for direct marketing or based on legitimate interests.
7. Right to Withdraw Consent
Where processing is based on consent, you can withdraw your consent at any time.
8. Right to Lodge a Complaint
You can file a complaint with your local data protection authority:
Belgium: Commission de la protection de la vie privée / Commissie voor de bescherming van de persoonlijke levenssfeer
How to Exercise Your Rights
To exercise any of these rights:
Email us at caredeal@softwhale.be
Use the in-app settings (for some rights)
We will respond within 30 days
Children's Privacy
CareDeal is not intended for use by children under the age of 18. We do not knowingly collect personal information from children under 18.
If you are a parent or guardian and believe your child has provided us with personal information, please contact us immediately at caredeal@softwhale.be. We will delete such information from our systems.
Note: Our service involves connecting caregivers with individuals who may need care, including minors. In such cases, the parent or legal guardian must create the account and provide consent.
International Data Transfers
Your data is primarily stored in the European Union (specifically in Firebase's europe-west1 region in Belgium).
In some cases, data may be transferred to countries outside the EU for processing by our service providers (e.g., Google Cloud Platform). When this occurs:
We ensure adequate safeguards are in place (Standard Contractual Clauses)
Recipients are certified under appropriate frameworks (e.g., EU-US Data Privacy Framework)
We comply with GDPR requirements for international transfers
Cookies and Tracking Technologies
Mobile App
Our mobile app does not use traditional web cookies. However, we use similar technologies:
Local Storage: To store app preferences and cache data
Session Tokens: To maintain your logged-in session
Analytics SDKs: Firebase Analytics to understand app usage
Web Version
If you access CareDeal via a web browser, we may use cookies for:
Essential functionality
Analytics
Preferences
You can control cookies through your browser settings.
Changes to this Privacy Policy
We may update this Privacy Policy from time to time to reflect changes in our practices or legal requirements.
Notification of Changes
We will notify you of material changes via:
Email (to your registered address)
The "Last Updated" date at the top of this policy will be revised
Continued use of the App after changes constitutes acceptance
Version History
We maintain a history of privacy policy changes. Previous versions are available upon request at caredeal@softwhale.be.
California Privacy Rights (CCPA)
If you are a California resident, you have additional rights under the California Consumer Privacy Act (CCPA):
Your Rights
Right to Know: What personal information we collect, use, and share
Right to Delete: Request deletion of your personal information
Right to Opt-Out: Opt-out of the sale of personal information (Note: We do not sell personal information)
Right to Non-Discrimination: We will not discriminate against you for exercising your rights
How to Exercise Your Rights
Contact us at caredeal@softwhale.be to submit a request.
Categories of Information Collected
We collect the following categories of personal information:
Identifiers (name, email, phone number)
Personal information (as defined in California Civil Code 1798.80)
Protected classification characteristics (age, gender)
Commercial information (transaction history)
Internet activity (app usage, interactions)
Geolocation data
Professional information (for caregivers)
Inferences (preferences, characteristics)
Healthcare Disclaimer
CareDeal is NOT a medical service provider and is NOT intended for medical emergencies.
Important Notices
Our App connects care seekers with caregivers but does not provide medical advice
Always consult qualified healthcare professionals for medical decisions
In case of medical emergency, call local emergency services immediately (112 in EU)
We do not verify medical credentials beyond what caregivers provide
Care arrangements are made directly between users
Health Data Processing
Health-related information you provide is processed with your explicit consent
We use this information solely to match you with appropriate caregivers
Health data is stored securely in compliance with GDPR Article 9
Limitation of Liability
We are not responsible for:
Quality of care provided by caregivers
Medical outcomes or health-related decisions
Caregiver qualifications beyond user-provided information
Consent
By using CareDeal, you consent to:
This Privacy Policy
Collection and processing of your personal data as described
Transfer of data to service providers
Processing of health-related data (where applicable)
You can withdraw consent at any time by:
Adjusting in-app settings
Contacting caredeal@softwhale.be
Deleting your account
Contact Information
If you have any questions or concerns about this Privacy Policy or our data practices, please contact us:
Email: caredeal@softwhale.be
