HouseCall TT is a technology platform operated by Medivanta Supplies Ltd., not a medical device. It does not diagnose, treat, cure, or prevent any medical condition. All medical services are delivered by independent healthcare professionals registered with the Trinidad and Tobago Medical Board. In a medical emergency, call 990 / 811 immediately — do not use this app.
1 Who We Are
Medivanta Supplies Ltd. ("Medivanta", "we", "us") operates the HouseCall TT mobile application and website. We are a company incorporated in Trinidad and Tobago providing an on-demand platform that connects patients with licensed physicians for home visit services.
This Privacy Policy is issued in compliance with the Data Protection Act, Chapter 22:04 of Trinidad and Tobago (2011) and applicable best practices including Google Play Store requirements. It applies to all users — patients, doctors, and website visitors.
By creating a HouseCall account or using our services, you acknowledge this Policy and consent to collection and use of your personal information as described herein.
2 Data We Collect
Account & Profile Data
| Data Type | Examples | Source |
|---|---|---|
| Full legal name | First and last name as on your ID | Registration form |
| Display name | Name shown to other users | Registration form |
| Email address | yourname@example.com | Registration form |
| Phone number | Mobile contact number | Registration form |
| Password | Stored as one-way bcrypt hash — never readable | Registration form |
| Island | Trinidad or Tobago | Registration form |
Location Data (Precise)
When a patient requests a house call, or a doctor accepts a case, we collect precise GPS coordinates to facilitate matching and navigation. This includes visit address and real-time position during an active request. We do not collect background location when the app is not in active use.
Payment Information (Doctors only)
HouseCall TT does not collect or process patient payments. Patients settle directly with their doctor after the visit. Doctor platform subscriptions ($15/month) are sold and billed in-app through the app store on your device — Google Play (Google LLC) on Android or the Apple App Store (Apple Inc.) on iOS — which act as the merchant of record and handle all payment processing. We never receive or store card numbers, CVV codes, or full card details. From the store we retain only a non-financial purchase/transaction token and order identifier, plus the subscription plan, renewal date, and status, used solely to grant and maintain your access.
Doctor Verification Documents (Doctors only)
- Medical Board registration certificate and registration number
- Government-issued photo ID (national ID or passport)
- Recent selfie photograph
- Supporting credentials (optional)
- Specialty and licence expiry date
These documents are used solely to verify your medical credentials and identity. They are accessed only by authorised HouseCall verification personnel, are not stored on our servers once your verification has been reviewed, and are never shown to patients, shared with third parties, sold, or used for advertising. Only the outcome of the review (approved or declined) and basic verification details — such as your Medical Board number and licence expiry — are retained with your doctor account.
Health & Medical Information
When submitting a request, patients may provide a brief description of symptoms or reason for the visit. This is treated as sensitive personal information under the T&T Data Protection Act — see Section 8.
Device & Technical Data
- Device type, OS version, app version
- Android device identifier
- Firebase Cloud Messaging (FCM) push notification token
- IP address and approximate network location
- App usage logs (actions, timestamps, error logs) — used solely for debugging
3 How We Collect It
- Directly from you — account registration, service requests, document uploads
- Automatically — device identifiers, IP address, app logs, GPS during active use
- From third-party services — subscription purchase and status data from Google Play and the Apple App Store; notification tokens from Google Firebase
4 How We Use Your Data
| Purpose | Data Used |
|---|---|
| Account creation & management | Name, email, phone, password hash |
| Doctor credential verification | Medical Board number, ID documents, selfie |
| Match patients with doctors | Patient location, doctor location, availability, specialty |
| Facilitate home visits | Address, case description, doctor profile, real-time GPS |
| Process doctor subscriptions | App-store purchase/transaction token, order ID, subscription status (doctors only) |
| Push notifications | FCM token — case updates, verification results |
| Fraud prevention & safety | Account data, usage logs, IP address |
| Service improvement | Anonymised, aggregated usage data and error logs |
| Legal compliance | Any data required by applicable law or court order |
We do not use your data for advertising, marketing profiling, or sale to data brokers. We do not serve third-party advertisements in the HouseCall app.
5 Legal Basis for Processing
Under the T&T Data Protection Act, 2011, our bases for processing are:
- Consent — your primary basis, provided when you create an account. Explicit written consent is obtained separately for sensitive data (health information, identity documents).
- Contractual necessity — processing required to deliver the service you requested.
- Legal obligation — where T&T law requires data retention (e.g. financial records).
- Legitimate interests — limited processing for fraud prevention and platform security, where these interests do not override your rights.
You may withdraw consent at any time by contacting medivantasuppliesltd@gmail.com. Withdrawal does not affect prior lawful processing, and may limit your ability to use certain features.
6 Who We Share Your Data With
We do not sell your personal data. Sharing occurs only with the following, and only to the extent necessary:
| Recipient | Country | Purpose |
|---|---|---|
| Google LLC (Google Play Billing) | United States | Doctor subscription billing on Android — no card data is collected or shared with us |
| Apple Inc. (App Store billing) | United States | Doctor subscription billing on iOS — no card data is collected or shared with us |
| Google LLC (Firebase) | United States | Push notifications and crash reporting |
| Railway (hosting) | United States | Backend infrastructure and database hosting |
| Google Maps Platform | United States | Location services and mapping |
| HouseCall administrators | Trinidad & Tobago | Doctor credential review and platform moderation |
| Law enforcement / courts | As required | Legal compliance only, pursuant to valid legal process |
Accepting doctors can see a patient's name, contact details, address, and case description. Patients can see a doctor's name, credentials, rating, and real-time location during an active visit.
7 International Data Transfers
Some service providers process data outside Trinidad and Tobago, primarily in the United States. The T&T Data Protection Act permits such transfers only where the recipient jurisdiction provides comparable safeguards, or with your consent.
By creating an account, you explicitly consent to transfer of your personal data to the United States for the purposes described. You are informed that data protection laws in the United States may differ from those in Trinidad and Tobago.
Google (Play billing & Firebase), Apple (App Store billing), and Railway are established global platforms with recognised data protection practices. We have reviewed their data processing terms as part of our compliance obligations.
8 Health Information & Sensitive Data
Health-related information receives heightened protection. Specifically:
- Explicit consent required at the time of each request, before any health information is collected.
- Minimum necessary data only — we collect only what is needed to facilitate matching you with an appropriate doctor.
- No advertising use — health data is never transferred to advertising platforms, analytics companies, or data brokers.
- Doctor's professional obligations — the attending doctor is bound by their own professional confidentiality obligations under T&T law, independent of this Policy.
- Platform scope — HouseCall is a matching and logistics platform. Clinical notes and medical records are the attending doctor's professional responsibility; the platform is not a medical records system.
Identity verification documents submitted by doctors are also sensitive data — access-restricted, encrypted at rest, and used solely for verification.
9 Data Retention
| Data Type | Retention Period |
|---|---|
| Account & profile data | Life of account + 3 years after closure |
| Subscription records (doctors) | 7 years (T&T financial regulations) |
| Precise GPS location | Session-only; not retained after visit completion |
| Case records | 3 years from date of visit |
| Doctor verification documents | Document files are reviewed for verification, then deleted — not stored on our servers. Only the verification outcome (approved/declined) and basic details are kept with the doctor account. |
| App usage logs | 90 days (rolling) |
| Deleted accounts | 30-day deletion queue, then permanently destroyed (except legal holds) |
10 Account & Data Deletion
You may delete your account and associated data at any time using any of the methods below:
- In-app: Dashboard → Delete Account — immediate, self-service
- On the web: housecalltt.com/account/delete — sign in with your email and password and confirm
- By email: medivantasuppliesltd@gmail.com with subject "Account Deletion Request" and your registered email
On receiving a valid request we will: acknowledge within 5 business days; deactivate the account immediately; permanently delete personal data within 30 days; and confirm deletion in writing. Data required for legal compliance (e.g. payment records) will be isolated and access-restricted for the statutory period, then destroyed.
11 Security
- Encryption in transit — all data between the app and our servers uses TLS
- Encryption at rest — database records and stored files are encrypted at rest
- Password hashing — passwords are hashed with bcrypt; they cannot be recovered by anyone, including HouseCall staff
- Access controls — staff access is need-to-know only; all administrative access is authenticated and audit-logged
- Payment security — no card data ever touches our servers; all payment processing is handled by Google Play and the Apple App Store on their PCI-DSS-certified billing infrastructure
- Vulnerability management — security patches applied promptly; access patterns monitored for anomalies
If you believe your account has been compromised, contact medivantasuppliesltd@gmail.com immediately.
12 Your Rights Under the T&T Data Protection Act
Right to be Informed
You have the right to know what data we collect, why, and how — which this Policy fulfils.
Right of Access
Request a copy of all personal data we hold about you. We respond within 30 days.
Right to Rectification
Request correction of any inaccurate or incomplete personal data we hold.
Right to Erasure
Request deletion of data that was unlawfully obtained or is no longer necessary. See Section 10.
Right to Object
Object to processing of your data, particularly for non-essential purposes.
Right to Challenge
Challenge our compliance. If unsatisfied, escalate to the Office of the Information Commissioner of T&T.
To escalate a complaint: Office of the Information Commissioner of Trinidad and Tobago — tic.gov.tt
13 Children
HouseCall is intended for users aged 18 and older. We do not knowingly collect data from anyone under 18. If you believe a minor has submitted data, contact medivantasuppliesltd@gmail.com and we will delete it promptly.
14 Device Identifiers & Notifications
The app collects your Android device identifier and Firebase Cloud Messaging token to deliver real-time case updates and verification notifications. These identifiers are not used for advertising or cross-app tracking. Push notifications can be managed through your device notification settings at any time.
We do not use cookies in the mobile app. Our website may use basic session cookies for navigation; no analytics or advertising cookies are placed.
15 Changes to This Policy
When we make material changes we will update the Effective Date above, send an in-app notice to active users, and require fresh consent where changes affect how we process sensitive data. Continued use after changes are published constitutes acceptance of the updated Policy.
16 Contact Us
For all privacy matters, rights requests, or concerns about how we handle your data: