Privacy Policy

MeddStaff ("MeddStaff", "we", "our", or "us") provides a healthcare staffing platform that connects healthcare professionals with healthcare facilities for temporary, recurring, and on-demand staffing opportunities.

This Privacy Policy explains how we collect, use, disclose, store, and protect personal information when you use our website, mobile applications, and related services (collectively, the "Services").

Information may include name, email address, mobile number, professional qualifications, licensing information, profile information, uploaded verification documents, a verification selfie, healthcare facility information, account activity, booking history, attendance records, device information, IP address, and platform usage information.

Verification selfie and face data. During verification, healthcare professionals take a live selfie in the MeddStaff app. The app checks on the device that a single face is in view and that it blinks, to confirm a real person is present. The camera frames used for this check are processed only on the device; they are never uploaded or stored. Only the final photo is uploaded.

Our verification team compares the selfie with the photo on your medical council registration to confirm your identity. The same photo becomes your profile photo, which healthcare facilities see on your applications and bookings until you change it. We do not use the selfie or any face data for automated facial recognition, advertising, or marketing, and we do not sell it or share it with third parties for those purposes. The selfie is kept with your verification record while your account exists. When you delete your account, the selfie and your other uploaded documents are permanently deleted 30 days later; until then, signing in to the account again cancels the deletion and restores it.

MeddStaff uses two distinct kinds of location information. Precise location, meaning device GPS coordinates, is collected only while a booking is active and is used solely to verify attendance at the assigned healthcare facility. Approximate location is derived from the home address you enter on your profile and is used to show you shifts near you. We do not collect precise location to recommend shifts, and we do not use location information for advertising or sell it to third parties.

Precise location information is collected only when necessary for active shift operations. When a healthcare professional accepts a booking and the shift becomes active, MeddStaff may collect and process location information to verify attendance, confirm presence at the assigned healthcare facility, maintain accountability during active shifts, prevent fraud or misuse, resolve attendance-related disputes, and support compliance and recordkeeping requirements.

Location tracking associated with shift verification is limited to active bookings and is not used for continuous monitoring outside an ongoing shift. Upon completion of an active booking, location collection for shift monitoring purposes ceases, except where limited retention is necessary for operational, legal, compliance, or dispute-resolution purposes.

Location while the app is in the background or closed. During an active shift, from check-in to check-out, the MeddStaff app keeps working when it is in the background or closed so it can tell when you leave or return to the healthcare facility. This needs the "Always" location permission. On iPhone, the app uses the operating system's region monitoring around the facility (the facility itself and a wider area around it) and its significant location change service; your position is recorded only when iOS reports that you crossed one of those boundaries or moved a significant distance, and when you open the app. On Android, the app runs a foreground service, shown by an ongoing notification, and records your position about every 10 minutes. If you do not check out, tracking stops on its own 2 hours after the shift's scheduled end, or when overtime you confirmed ends. Nothing is recorded before check-in or after the shift.

While a shift is active, our servers also send the app a silent background check. The app answers with whether location permission is still on and whether your device considers you inside the facility area (a yes or no). This answer contains no coordinates. It lets us count your time on site correctly when your phone cannot reach us for a while, for example on a poor hospital Wi-Fi connection; time when your phone could not reach us is never deducted from your hours.

The healthcare facility for the booking is told when you leave or return to its premises during the shift, and when your phone stops responding or can no longer report your location. You are notified when you leave. You can see each of these records in the app and dispute any of them.

If your check-in position shows that the facility's map location is wrong, we use your check-in position as the centre of the facility area for that shift only, and ask our team to check the facility's location. That position is cleared when the shift ends.

Shift location records, including the location recorded when a healthcare professional checks in, are visible to the healthcare facility for that booking. We keep the recorded positions for 90 days and then delete them; the attendance record itself (check-in and check-out times, and whether a check-in was confirmed on site) stays with the booking.

Checking in to a shift needs your location once, at the moment you scan in, whether from the app or from your browser. Checking out never needs it. An account can be deleted once any shift in progress has ended.

We use personal information to create and manage accounts, verify credentials, facilitate staffing and bookings, enable communication, provide support, improve services, maintain security, prevent fraud, and comply with legal obligations.

We may share information between platform participants, with trusted service providers, where required by law, or in connection with a business transaction such as a merger or acquisition.

Service providers we use include Google Firebase Cloud Messaging, which delivers app notifications and the background checks described in section 2 (it receives a device token and the notification content, not your location records), and OpenStreetMap, whose map tiles draw the map of your shift's recorded positions in the app. Loading that map sends requests for the map area being shown, together with your IP address, to the OpenStreetMap Foundation's tile servers.

We retain personal information only as long as necessary for operational, legal, compliance, security, and dispute-resolution purposes. Information that is no longer required is deleted, anonymized, or securely destroyed.

Users may request access, correction, or deletion of their personal information through available platform tools or by contacting us at Team@meddstaff.com. Certain information may be retained where required for legal compliance, completed transaction records, fraud prevention, security, or dispute resolution.

You can delete your account yourself from the app or the web dashboard. Your account and personal information are deleted 30 days after you ask. Signing in to the account again during those 30 days cancels the deletion and restores it. We email you when you ask, if the account is restored, and when the deletion is complete.

After the 30 days we keep only a limited record: counts of completed shifts, no-shows and cancellations, upheld complaints, whether the account was suspended, and scrambled (one-way hashed) copies of your email, phone number and medical registration number. We keep it so that a suspended account cannot simply sign up again and healthcare facilities stay safe. It cannot be used to contact you, and it is deleted after 2 years (5 years if the account was suspended or banned).

We implement reasonable administrative, technical, and organizational safeguards designed to protect personal information from unauthorized access, disclosure, alteration, misuse, or destruction.

The Services are intended for adults and authorized healthcare personnel. We do not knowingly collect personal information from individuals under the age of 18.

Personal information may be processed, stored, or transferred in locations where MeddStaff or its service providers operate, subject to applicable legal safeguards.

We may update this Privacy Policy from time to time. Updated versions will be posted through the Services and become effective upon publication unless otherwise stated.

MeddStaff

Email: Team@meddstaff.com

Address: F-12ND FLOOR P.NO.76, HEERAPURA, SHALIMAR BAGH VISTAR, JAIPUR