This Privacy Policy explains how BCODE NEXUS, which operates the CareBridge platform, collects, uses, shares, and protects your personal information. CareBridge is a caregiving marketplace connecting clients with independent caregivers in Ghana. This policy covers the CareBridge website and the CareBridge client and caregiver mobile apps.
CareBridge is operated by BCODE NEXUS for care delivered in Ghana. BCODE NEXUS is registered in Ghana under Business Registration No. BN040200826. BCODE LLC (Worcester, Massachusetts, USA) is the US affiliate and supports clients booking from the United States.
When you create an account, we collect your name, email address, phone number, Ghana digital address, and city. Registration in the mobile apps also asks for your date of birth, and we verify your phone number by sending a one-time code by SMS. Caregivers also provide their Ghana Card number, professional credentials, government-issued ID, a selfie taken holding that ID, Tax Identification Number (TIN), and a profile photo. Clients may add a profile photo and may be asked to upload a government-issued ID for verification.
Caregivers provide a professional bio, years of experience, hourly rate, services offered, and caregiver type. Clients provide an address, city, and emergency contact details.
To arrange care, the booking user enters information about the person receiving care (the "care recipient"). The care recipient may be the booking user or a third party, such as a family member, who does not have a CareBridge account. This includes health information. We collect:
This information is provided by the booking user and the caregiver and is not independently verified. A care recipient's health details are shown to a caregiver once that caregiver's booking for the care recipient has been accepted. Wellness check-ins recorded by the caregiver are shared with the client who booked the care, so that the family can follow how the care recipient is doing. We use health information only to deliver care. It is never used for advertising, analytics, or tracking. The rights of care recipients who do not hold an account are described in Section 4.
We collect booking dates, times, duration, service type, location, and any notes you provide to the caregiver. We also record booking status changes, cancellations, and reviews.
Payments are processed by Paystack. Card details and mobile money PINs are entered on Paystack's own payment page and go directly to Paystack; they never reach our servers. We store Paystack transaction references, payment amounts, and refund records for accounting purposes. For caregivers, we store the payout account you give us (account type, provider, account name, and bank account or mobile money number) so that payouts can be sent through Paystack.
We store in-app chat messages between clients and caregivers, support ticket conversations, and notification history.
Both mobile apps ask for access to your camera and photo library. The apps use the camera or photo library only when you choose to add a photo, and only the photo you take or select is uploaded.
We use your device's location in the situations below. The app or browser asks for your permission first. You can refuse or withdraw permission in your device settings, but the features that depend on it may then not work.
When you enter or search for an address, or place a pin on a map, we send the address text or coordinates to Google's geocoding service to convert between addresses and coordinates. Maps in the mobile apps load map images from CARTO, and maps on the website load from Google Maps; these providers receive your IP address and the map area being viewed.
No background location. The apps do not collect your location in the background or while the app is closed. Location is read only while the app is open and in use.
When you sign in to either mobile app, the app asks for permission to send you notifications. If you allow it, the app obtains a device push token from Google's Firebase Cloud Messaging service (on iPhone this also involves Apple's push notification service) and sends that token, together with whether your device is iOS or Android, to our servers, where it is stored against your account. The token is registered again when the app restarts while you are signed in, or when Firebase issues a new one.
When you sign out, the app asks our servers to delete the token. We also delete tokens that Firebase reports as no longer valid.
We use the token to send you notifications about bookings, job applications, payments, messages, reviews, and verification results. The title and text of each notification, which may include a short preview of a chat message, pass through Google and, on iPhone, Apple in order to reach your device. You can turn notifications off at any time in your device settings.
The CareBridge website does not currently register client or caregiver browsers for push notifications.
Website: When you use the website, our servers receive your IP address, your browser type, the pages you request, and timestamps. Certain actions are recorded in an activity log together with the IP address and browser type used. We record the time of your last sign-in.
Mobile apps: The apps communicate with the same servers, which receive your IP address, the requests the app makes, and timestamps. We record the time of your last sign-in and when your sign-in token was last used and, if you allow notifications, whether your device is iOS or Android. The apps keep your sign-in token and a copy of your basic account details in your device's secure storage so that you stay signed in, and keep your light or dark theme preference on the device. The mobile apps do not contain advertising or analytics software. Firebase is used only for push notifications, as described above.
When you visit our website we record the page requested, the date and time, the website that referred you (the site's name only, not the full address), any campaign tags in the link you followed, your approximate country, and whether you used a phone, tablet or desktop. We derive the country from your IP address and the device type from your browser at the moment of the visit; we do not store your IP address or browser details with the visit record.
To count how many different people visit each day, we create an anonymous code from your IP address and browser combined with a random value that we replace every day and then delete. The code cannot be turned back into your IP address and cannot be used to recognise you from one day to the next. We do not set any cookie for this purpose.
We identify automated visitors such as search-engine crawlers and scripts so that we can separate them from visits by people. We do not block them on this basis.
Visit records are stored in our own database on our own server and are used only to understand how people find and use the website. We do not use any third-party analytics service and do not share visit records with anyone.
Approximate country is determined using the DB-IP Lite database (IP Geolocation by DB-IP, https://db-ip.com), which is stored on our server. We download an updated copy about once a month; no information about visitors is sent to DB-IP.
We share your information only as necessary to operate the platform:
We do not sell your personal information to third parties.
Under the Ghana Data Protection Act 2012 (Act 843), you have the right to:
To exercise any of these rights, contact us at management@bcodellc.com. We will respond within 30 days.
You can delete your account yourself, after confirming your password, from your profile settings on the CareBridge website, or in either mobile app under Profile → Privacy & Security → Delete my account. You can also ask us to delete it by emailing management@bcodellc.com. Deletion is permanent and the account cannot be restored, although you may register again later with the same email address.
When deletion has to wait. An account cannot be deleted while money or care is still outstanding. We will tell you the reason and you can delete the account once it is cleared:
What is deleted. When your account is deleted, we remove:
What is kept. The following is not deleted:
As described in Section 1, CareBridge stores personal and health information about care recipients that is entered by the booking user and by caregivers. Care recipients who do not have a CareBridge account retain the same data rights described above. To request access to, correction of, or deletion of your data, contact us at management@bcodellc.com with proof of identity. We will respond within 30 days.
We implement reasonable security measures to protect your personal information:
While we strive to protect your data, no method of electronic transmission or storage is 100% secure. If we become aware of a data breach that may affect you, we will notify you and the Ghana Data Protection Commission as required by law.
We keep your information for as long as your account exists and for as long as we need it to provide our services and comply with legal obligations. Apart from website visit records, we do not currently delete data automatically after a fixed period:
You can delete your account or ask us to delete your data at any time, as described in Section 4.
CareBridge is not intended for use by anyone under 18 years of age. We do not knowingly collect personal information from minors. If we learn that we have collected data from a minor, we will delete it promptly.
Parents and legal guardians may use CareBridge to book care services for their minor children. In these cases, the parent or guardian is responsible for providing and managing information about the child, and consents to its use as described in this policy.
CareBridge primarily serves users in Ghana. However, we welcome users from the diaspora (including the UK, US, Canada, and other countries) who wish to arrange care for family members in Ghana.
Your data is stored on a server operated by our hosting provider (Hostinger) and located in the United States (Boston, Massachusetts). Your data may be processed in the United States and in Ghana, and by the service providers listed in Section 3 in the countries where they operate. By using CareBridge, you consent to this transfer and processing of your data.
For users in the European Union or United Kingdom, we acknowledge the principles of the General Data Protection Regulation (GDPR). While CareBridge operates primarily under Ghana law, we endeavour to handle your data in accordance with GDPR principles as a matter of good practice. You may exercise your data rights as described in Section 4.
CareBridge uses the following types of cookies:
We do not use Google Analytics or any other third-party analytics or advertising tracker. Website traffic is measured only by the self-hosted system described in Section 1.
Our web pages load some scripts, styles, and fonts from content delivery networks (including jsDelivr), which receive your IP address when your browser requests them.
The mobile apps do not use cookies to keep you signed in; they use a sign-in token stored on your device, as described in Section 1. Payment pages are shown inside the apps in an embedded browser view, where Paystack may set its own cookies.
Most browsers allow you to control cookies through their settings. Disabling essential cookies may prevent you from using CareBridge.
We may update this Privacy Policy from time to time. When we make material changes, we will notify you via email and through an in-app notification at least 30 days before the changes take effect. The "Last updated" date at the top of this page reflects the most recent revision.
If you have questions about this Privacy Policy or wish to exercise your data rights, contact us:
You may also file a complaint with the Ghana Data Protection Commission at www.dataprotection.org.gh.