CareTime (Android) — Privacy Policy
Effective date: 2026-05-22. Version 1.0.
This is a plain-language privacy policy describing what CareTime actually does with data. It is not a formal lawyer-reviewed document yet — a fully legal-reviewed policy will replace this text before public Play Store release. The factual statements below are accurate to the first release build and match the in-app privacy disclosures.
Summary in one sentence
CareTime stores everything you enter on your phone, and uploads nothing — not to us, not to your billing provider, not to any third party — unless you explicitly tap Generate & Share on a PDF.
What we collect
Nothing leaves your device. CareTime has no backend, no analytics, no crash reporters, and no third-party SDKs. The app developer (SpaceTrucker2196) has no servers, no database of users, and no way to see what’s in your CareTime install.
The data CareTime captures and stores locally on your Android device:
- Care recipient information you type in (name, role label, per-recipient timesheet code).
- Care activities you log: start time, end time, optional notes, the activity tapped, and which recipient the time is attributed to.
- Location at clock-in and clock-out, only if you grant Location permission. One fix per tap; no background tracking. Used for EVV (electronic visit verification) so visits can be verified later. If you don’t grant Location, CareTime still works — the segments just don’t get location data.
- Participant signatures you collect through the app, stored as an image alongside the segment.
- Optional PINs (4-digit participant PIN, 4–6-digit app-lock PIN). Both are hashed with PBKDF2-HMAC-SHA256 (210,000 iterations) before storage. The original numbers cannot be recovered.
- A SHA-256 audit log of every segment lifecycle event (start, stop, edit, etc.) so the record is tamper-evident.
- Settings you configure: employee + supervisor name and phone for the PDF header, pay period anchor, shift-block gap, billing provider name and submission contact line, default service code.
All of the above is stored inside the app’s private storage on this device (Android sandbox; no other app can read it without root).
What we don’t collect
- No account. You don’t sign up. There’s no “sign in” button.
- No analytics. We don’t know how often you open the app, what buttons you tap, or whether you finished onboarding.
- No crash reports. The app does not phone home when something goes wrong.
- No advertising identifiers. Google’s Advertising ID is never requested.
- No tracking across other apps or websites.
- No Health Connect, sensor, or photo-library access.
- No background location. Permission is foreground-only.
- No microphone access. (Dictation in notes happens via the Android keyboard, which the OS handles — CareTime never sees the raw audio.)
- No automatic uploads to any billing provider, Sandata, HHAeXchange, CareBridge, AuthentiCare, or any state EVV system. Submissions to those systems happen out-of-app via your existing flow with your billing provider.
When data leaves the device
The only paths data takes off your device are user-initiated:
- PDF Share. When you tap Generate & Share on a timesheet, EVV report, or plan-adherence report, Android’s standard share sheet decides where the PDF goes. CareTime doesn’t pick a destination — you do. The PDF contains the data you’d expect (recipient name, care segments, times, signatures, etc.).
- Android Auto Backup. Google’s standard backup service backs up CareTime’s data to your private Google account when the device is idle, charging, and on Wi-Fi (if you’ve enabled backups in Android Settings → System → Backup). This is encrypted in transit and at rest, scoped to your Google account, and is the operating system doing this, not CareTime — CareTime itself never uploads anything to a cloud. The benefit: if you lose or replace your phone, your CareTime data restores with the rest of your apps. You can see what’s included in the backup and request an on-demand backup from the in-app Settings → Backup screen.
- CareTime Pro purchases. If you subscribe to CareTime Pro, the purchase happens inside Google Play. Google handles your payment details under its own privacy policy; CareTime never sees them. The app only asks Google Play, on your device, whether a Pro subscription is active. That answer is not sent to us or anyone else. The free tier’s PDF count is kept on your device only.
Children
CareTime is not directed at children under 13. The expected user is an adult caregiver. The app does not request a date of birth or any information sufficient to identify a person as a child.
Health information
CareTime stores notes about care provided to your recipient(s). In the United States, this information may be considered Protected Health Information (PHI) under HIPAA, depending on your role and your billing provider’s status as a covered entity. CareTime is designed to minimise the risk of inadvertent PHI exposure by:
- Storing all data locally on your device.
- Never transmitting any data to any third party.
- Hashing PINs before storage.
- Sandboxing the app per Android standards.
- Optional app lock (PIN + biometrics + auto-lock).
We do not sign Business Associate Agreements; CareTime is sold as a personal-use caregiving tool to caregivers, not to billing providers or covered entities. If you are subject to HIPAA obligations through your employer / billing provider, consult your compliance officer before using CareTime for record-keeping.
Cookies, beacons, web tracking
The CareTime Android app does not embed a web view that loads remote content. The only web request it can make is to open a support contact link in your default browser when you tap Settings → Support / report a bug — that flow opens your browser, not an in-app webview, and CareTime sends no data with the URL.
Changes to this policy
If we change what CareTime does with data, we’ll update this page and bump the version number above. Play Store will require us to re-confirm the Data Safety disclosures for the next release.
Contact
This policy is hosted at spacetrucker2196.github.io/CareTime-Android/privacy.
To ask a question about this policy or about how CareTime EVV handles data, email support@river.io. We respond within a few business days.