HouseCall TT is a technology platform operated by Medivanta Supplies Ltd., not a medical device. It does not diagnose, treat, cure, or prevent any medical condition. Care is delivered by independent doctors and physical therapists, each reviewed through the verification process for their profession. In a medical emergency, call 990 / 811 immediately — do not use this app.
1 Who We Are
Medivanta Supplies Ltd. ("Medivanta", "we", "us") operates the HouseCall TT mobile application and website. We are a company incorporated in Trinidad and Tobago providing an on-demand platform that connects patients with doctors and physical therapists for medical home visits and scheduled rehabilitation sessions.
This Privacy Policy is issued in compliance with the Data Protection Act, Chapter 22:04 of Trinidad and Tobago (2011) and applicable best practices including Google Play Store and Apple App Store requirements. It applies to all users — patients, doctors, physical therapists, and website visitors.
By creating a HouseCall account or using our services, you acknowledge this Policy and consent to collection and use of your personal information as described herein.
2 Data We Collect
Account & Profile Data
| Data Type | Examples | Source |
|---|---|---|
| Full legal name | First and last name as on your ID | Registration form |
| Display name | Name shown to other users | Registration form |
| Email address | yourname@example.com | Registration form |
| Phone number | Mobile contact number | Registration form |
| Password | Stored as one-way bcrypt hash — never readable | Registration form |
| Island | Trinidad or Tobago | Registration form |
| Messages | In-app chat between a patient and their care professional, including the after-visit summary the care professional sends as a message | Typed in-app by you or your care professional |
Location Data (Precise)
When a patient requests a house call, or a care professional accepts a case, we collect precise GPS coordinates to facilitate matching and navigation. This includes visit address and real-time position during an active request. We do not collect background location when the app is not in active use.
When a care professional turns on Lifeline (our optional professional-safety timer) for a visit, the care professional's device also shares its precise live location for the duration of that visit, so the platform can show the patient a live ETA and, if a safety alert is raised, give the care professional's safety contacts a last-known location. This is described in Section 9, and its retention differs from ordinary matching location — see Section 10.
Payment Information (Doctors and Physical Therapists)
HouseCall TT does not collect or process patient payments. Patients settle directly with their professional after the visit. Professional platform subscriptions (US$15/month) are sold and billed in-app through the app store on your device — Google Play (Google LLC) on Android or the Apple App Store (Apple Inc.) on iOS — which act as the merchant of record and handle all payment processing. We never receive or store card numbers, CVV codes, or full card details. From the store we retain only a non-financial purchase/transaction token and order identifier, plus the subscription plan, renewal date, and status, used solely to grant and maintain your access.
Professional Verification Documents
- Doctors: Medical Board registration certificate and registration number
- Physical therapists: a photo of their licensing card, instead of a Medical Board number
- Government-issued photo ID (national ID or passport)
- Recent selfie photograph
- Supporting credentials (optional)
- Specialty and licence expiry date
These documents are used solely to verify your professional credentials and identity. When you submit them they are transmitted as email attachments through our email delivery provider (listed in Section 6) to our verification mailbox, where they are accessed only by authorised HouseCall verification personnel; the files themselves are not stored on our servers. They are not shared any further — never shown to patients, never passed to any other third party, never sold, and never used for advertising. Only the outcome of the review (approved or declined) and basic verification details — such as your profession, Medical Board number (doctors only), document types, and licence expiry — are retained with your professional account.
Professional Safety Contacts
A care professional using Lifeline may enrol one or more safety contacts — for each, a name and an email address and/or mobile number. These are the people the platform notifies, by email, if the care professional misses a safety check-in during a visit. Each contact must confirm through a one-time link before they are ever used, and can decline or revoke at any time. See Section 9.
Clinical Records
For each completed visit, the attending care professional creates a clinical record — a visit summary and, where relevant, prescribed medicines and recorded vitals. For a patient who is seen more than once, these build a continuing care history. Clinical records are hosted on the HouseCall platform and treated as sensitive personal information — see Section 8.
Physical therapy requests may include an affected area, mobility needs, and rehabilitation goals. A physical therapist's session record may include functional assessment, goals, treatment, home exercises, progress, and a follow-up plan. These are health information and use the same access controls as other visit records. Medication information relates to care provided within the attending professional's scope of practice.
Health & Medical Information
When submitting a request, patients may provide a brief description of symptoms or reason for the visit. This is treated as sensitive personal information under the T&T Data Protection Act — see Section 8.
Device & Technical Data
- Device type, OS version, app version
- Device identifier — the Android device identifier on Android; Apple's app-scoped identifierForVendor on iOS
- Push notification token — a Firebase Cloud Messaging (FCM) registration token; on iOS, Firebase derives it from your Apple Push Notification service (APNs) device token, which exists only if you enable notifications
- IP address and approximate network location
- App usage logs (actions, timestamps, error logs) — used solely for debugging
3 How We Collect It
- Directly from you — account registration, service requests, document uploads
- Automatically — device identifiers, IP address, app logs, GPS during active use
- From third-party services — subscription purchase and status data from Google Play and the Apple App Store; notification tokens from Google Firebase (on iOS, derived from an Apple Push Notification service token)
4 How We Use Your Data
| Purpose | Data Used |
|---|---|
| Account creation & management | Name, email, phone, password hash |
| Professional credential verification | Profession, Medical Board number (doctors) or licensing-card photo (physical therapists), ID documents, selfie |
| Match patients with their chosen profession | Requested profession, patient and professional location, availability, specialty |
| Facilitate home visits | Address, case description, care professional profile, real-time GPS |
| Deliver the visit (in-app messaging) | Messages between patient and care professional, including the after-visit summary |
| Process professional subscriptions | App-store purchase/transaction token, order ID, subscription status (professionals only) |
| Push notifications | FCM token (delivered through APNs on iOS) — case updates, verification results |
| Fraud prevention & safety | Account data, usage logs, IP address |
| Service improvement | Anonymised, aggregated usage data and error logs |
| Legal compliance | Any data required by applicable law or court order |
We do not use your data for advertising, marketing profiling, or sale to data brokers. We do not serve third-party advertisements in the HouseCall app.
5 Legal Basis for Processing
Under the T&T Data Protection Act, 2011, our bases for processing are:
- Consent — your primary basis, provided when you create an account. Explicit written consent is obtained separately for sensitive data (health information, identity documents).
- Contractual necessity — processing required to deliver the service you requested.
- Legal obligation — where T&T law requires data retention (e.g. financial records).
- Legitimate interests — limited processing for fraud prevention and platform security, where these interests do not override your rights.
You may withdraw consent at any time by contacting support@housecalltt.com. Withdrawal does not affect prior lawful processing, and may limit your ability to use certain features.
6 Who We Share Your Data With
We do not sell your personal data. Sharing occurs only with the following, and only to the extent necessary:
| Recipient | Country | Purpose |
|---|---|---|
| Google LLC (Google Play Billing) | United States | Doctor subscription billing on Android — no card data is collected or shared with us |
| Apple Inc. (App Store billing) | United States | Doctor subscription billing on iOS — no card data is collected or shared with us |
| Google LLC (Firebase) | United States | Push notifications (relayed to Apple APNs for iOS devices) and crash reporting |
| Railway (hosting) | United States | Backend infrastructure and database hosting |
| Google Maps Platform | United States | Location services and mapping |
| Email delivery provider | United States | Sending account email (verification, password reset) and professional-safety (Lifeline) alerts by email to a care professional's chosen emergency contacts |
| HouseCall administrators | Trinidad & Tobago | Doctor credential review, platform moderation, and safety-incident follow-up |
| Law enforcement / courts | As required | Legal compliance only, pursuant to valid legal process |
Every third party that receives your data — Google (Firebase and Play billing), Apple (App Store billing), Brevo (our email delivery provider), and Railway (hosting) — is bound by its data processing terms to protect that data to at least the standard described in this Policy, and may use it only to provide its service to us.
Accepting care professionals can see a patient's name, contact details, address, and case description. Patients can see a care professional's name, credentials, rating, and real-time location during an active visit.
7 International Data Transfers
Some service providers process data outside Trinidad and Tobago, primarily in the United States. The T&T Data Protection Act permits such transfers only where the recipient jurisdiction provides comparable safeguards, or with your consent.
By creating an account, you explicitly consent to transfer of your personal data to the United States for the purposes described. You are informed that data protection laws in the United States may differ from those in Trinidad and Tobago.
Google (Play billing & Firebase), Apple (App Store billing), Railway, and our email delivery provider are established global platforms with recognised data protection practices. We have reviewed their data processing terms as part of our compliance obligations.
8 Health Information & Sensitive Data
Health-related information receives heightened protection. Specifically:
- Explicit consent required at the time of each request, before any health information is collected.
- Minimum necessary data only — we collect only what is needed to facilitate matching you with an appropriate care professional.
- No advertising use — health data is never transferred to advertising platforms, analytics companies, or data brokers.
- Doctor's professional obligations — the attending care professional is bound by their own professional confidentiality obligations under T&T law, independent of this Policy.
- Platform-hosted clinical records — HouseCall hosts the clinical record a care professional creates for a visit (the visit summary, any prescribed medicines and recorded vitals, and, for a returning patient, their continuing care history). These records are stored on our infrastructure, encrypted at rest, and visible only to the patient and the care professional(s) who treat them. The attending care professional remains professionally responsible for the clinical content, and their own confidentiality obligations under T&T law apply independently of this Policy.
Identity verification documents submitted by doctors and physical therapists are also sensitive data. They are transmitted as email attachments through our email delivery provider to authorised HouseCall verification personnel, are used solely for verification, and are not stored on our servers.
9 Professional Safety & Lifeline
Lifeline is an optional safety feature for the care professionals who make house calls. When a care professional turns it on for a visit, the platform runs a check-in timer; if the care professional misses a check-in and cannot be reached, the platform notifies the safety contacts the care professional enrolled beforehand and shares the care professional's last known location so someone can check on them. It is a professional-safety tool only and carries no patient health information.
Live location during a visit
While Lifeline is active, the care professional's device streams its precise location to the platform. This powers the patient's live ETA and, if a safety alert is raised, gives an alerted contact the care professional's last-known position. This continuous location track is short-lived: it is kept only for the duration of the visit and for up to 24 hours after the session ends, then automatically purged. If a safety alert is actually sent, the single location captured at the moment of each alert is preserved in the safety-incident record (retention in Section 10).
Safety contacts
A care professional chooses their own safety contacts and provides each contact's name and an email address and/or mobile number. Every contact must opt in through a one-time confirmation link before they can be used, and may decline or revoke at any time. Contacts are notified by email — only when a safety alert fires for a visit they are protecting, plus the one-time opt-in message and a stand-down ("all clear") message. They are never messaged for marketing.
Safety-incident records
When a Lifeline alert runs, the platform keeps an audit record of what was sent, to whom, and when, together with the location snapshot(s) described above, so that a safety incident can be reconstructed by us and, where appropriate, by the care professional and the authorities.
Lifeline notifies the contacts a care professional chooses. It is not a substitute for the emergency services and does not contact 999, 990, or 811 for anyone.
10 Data Retention
| Data Type | Retention Period |
|---|---|
| Account & profile data | Life of account + 3 years after closure |
| Subscription records (professionals) | 7 years (T&T financial regulations) |
| Precise GPS — matching & navigation | Session-only; not retained after the request or visit ends |
| Lifeline live-location track (professionals) | Kept only during the visit and up to 24 hours after the session resolves, then automatically purged |
| Case records | 3 years from date of visit |
| Messages (patient–care professional chat, including after-visit summaries) | Retained with the case record (3 years from date of visit); a patient's message threads are deleted immediately when the patient deletes their account |
| Clinical records (visit summaries, medicines, vitals, care history) | 3 years from date of visit; retained with the care professional's professional filing even if the account is later closed |
| Doctor safety contacts | Kept until the care professional removes the contact or closes their account |
| Lifeline safety-incident records | 12 months — extended under a legal hold where the incident involved a duress alarm or an alert that went unacknowledged |
| Professional verification documents | Document files are reviewed for verification, then deleted — not stored on our servers. Only the verification outcome (approved/declined) and basic details are kept with the care professional account. |
| App usage logs | 90 days (rolling) |
| Deleted accounts | No deletion queue. A patient's personal data is destroyed immediately on confirmation. A care professional's identity is removed immediately; the clinical and legal records they created are retained de-identified for the periods above. See Section 11. |
11 Account & Data Deletion
You may delete your account and associated data at any time using any of the methods below:
- In-app: Dashboard → Delete Account — immediate, self-service
- On the web: housecalltt.com/account/delete — sign in with your email and password and confirm
- By email: support@housecalltt.com with subject "Account Deletion Request" and your registered email
Deletion takes effect immediately — there is no waiting period and no deletion queue. You confirm with your password, and an account with a visit still in progress must complete or cancel it first. What is deleted depends on the type of account:
- Patients: your account, contact details, push-notification registrations, and your message threads with care professionals (including any after-visit summaries sent to you) are permanently deleted at once. Your past visit requests are stripped of your name, phone number, address, symptoms, rehabilitation intake, and pre-visit profile; only the de-identified request remains, because the attending care professional's visit record refers to it.
- Doctors and physical therapists: your identity is removed at once — name, email, phone number, Medical Board number, photo, bio, and location are blanked; your verification records, push-notification registrations, subscription records, and Lifeline safety contacts and settings are deleted; and the account can no longer sign in. The clinical and legal records you created while practising — visit records and notes, charts for patients without accounts, message threads with patients, patient reviews of you, and Lifeline safety-incident audit records — are retained de-identified, attributed to "Former provider", because they are the patient's care history and the professional's care record. A restricted copy of your identity is held by our operations team, separately from those records, solely so that they can be attributed to you where the law or a patient's care requires it.
For requests made by email we will acknowledge within 5 business days, carry out the deletion described above, and confirm in writing. Data required for legal compliance (e.g. payment records) will be isolated and access-restricted for the statutory period, then destroyed.
12 Security
- Encryption in transit — all data between the app and our servers uses TLS
- Encryption at rest — database records and stored files are encrypted at rest
- Password hashing — passwords are hashed with bcrypt; they cannot be recovered by anyone, including HouseCall staff
- Access controls — staff access is need-to-know only; all administrative access is authenticated and audit-logged
- Payment security — no card data ever touches our servers; all payment processing is handled by Google Play and the Apple App Store on their PCI-DSS-certified billing infrastructure
- Vulnerability management — security patches applied promptly; access patterns monitored for anomalies
If you believe your account has been compromised, contact support@housecalltt.com immediately.
13 Your Rights Under the T&T Data Protection Act
Right to be Informed
You have the right to know what data we collect, why, and how — which this Policy fulfils.
Right of Access
Request a copy of all personal data we hold about you. We respond within 30 days.
Right to Rectification
Request correction of any inaccurate or incomplete personal data we hold.
Right to Erasure
Request deletion of data that was unlawfully obtained or is no longer necessary. See Section 11.
Right to Object
Object to processing of your data, particularly for non-essential purposes.
Right to Challenge
Challenge our compliance. If unsatisfied, escalate to the Office of the Information Commissioner of T&T.
To escalate a complaint: Office of the Information Commissioner of Trinidad and Tobago — tic.gov.tt
14 Children
HouseCall is intended for users aged 18 and older. We do not knowingly collect data from anyone under 18. If you believe a minor has submitted data, contact support@housecalltt.com and we will delete it promptly.
15 Device Identifiers & Notifications
The app collects a device identifier — the Android device identifier on Android, or Apple's app-scoped identifierForVendor on iOS — and a Firebase Cloud Messaging (FCM) push token to deliver real-time case updates and verification notifications. On iOS, Firebase derives that token from your Apple Push Notification service (APNs) device token, which exists only if you enable notifications, and our notifications reach your device through APNs. These identifiers are not used for advertising or cross-app tracking. Push notifications can be managed through your device notification settings at any time.
We do not use cookies in the mobile app. Our website may use basic session cookies for navigation; no analytics or advertising cookies are placed.
16 Changes to This Policy
When we make material changes we will update the Effective Date above, send an in-app notice to active users, and require fresh consent where changes affect how we process sensitive data. Continued use after changes are published constitutes acceptance of the updated Policy.
17 Contact Us
For all privacy matters, rights requests, or concerns about how we handle your data: