Privacy Policy

Who we are

TravelCare+ is a free tool for travel healthcare workers, run by A.J. Skidmore, a sole proprietor doing business as TravelCare+. For questions or requests about your data, email info@travelcareplus.com or use our feedback form and choose "Something else." Include an email so we can reply.

If you don't make an account

What you enter (offers, credentials, trips and settings) is saved in your browser on your device. It is not sent to us. Clearing your browser data, or using Settings → Delete everything, removes it.

Share links put the shared offer inside the link itself (after the # sign). That part of a link is not sent to our servers when someone opens it.

If you make an account

• Sign-in: your email and password are handled by Firebase Authentication (Google). We never see your password.
• Email check: we ask you to verify your email. Until you do, your data stays on your device and isn't saved to your account.
• 2-step sign-in (optional): if you turn it on, Firebase Authentication stores the secret that your authenticator app uses. We don't see or store your codes.
• Saved data: your profile and tax inputs, offers, credentials (name, state and dates only), trips and checklist progress are stored in Google Cloud Firestore in the United States, so you can use them on other devices. Only you can read them.
• Signing out removes the copy on that device. Deleting your account (Account → Delete account) permanently deletes everything stored with your account.

Ask (our question tool)

When you use Ask, your question and recent follow-ups are sent to Anthropic, the company that makes the Claude AI model, to write an answer. Anthropic may search official websites on our behalf. We do not store your questions or answers. Anthropic processes them under its commercial terms, which do not allow using them to train its models, and may keep them for a short time for safety and abuse monitoring. Please don't include personal details in questions.

Scan a card

If you scan a license or certification, the photo or PDF is shrunk on your device (which removes hidden location and camera data), then sent to our server and to Anthropic to read it. We keep only the credential name, issuing board, state and dates, and only if you choose to save them. The file is never saved by us: it exists only in memory while it's being read. We never keep license or certificate numbers, names, birth dates or addresses from a scan.

Feedback

If you send feedback, we store your message, the type, any rating, the page you were on, whether you were signed in, and your email if you give one. We email a copy to our team inbox. Feedback is deleted after one year.

Security and abuse prevention

• We use Firebase App Check with Google reCAPTCHA Enterprise to tell real visitors from bots. reCAPTCHA collects device and browser information, which Google uses under its own privacy policy.
• To stop abuse we count requests. Counts are stored with a scrambled (hashed) version of your IP address, never the address itself, and are deleted automatically within about 40 days.
• Our hosting provider (Google Cloud) keeps standard server logs, which include IP addresses and browser type, for security and troubleshooting.
• All connections use HTTPS. Account data is encrypted at rest by Google.

Cookies and tracking

We don't use advertising cookies. We use your browser's storage to make the app work (your data, sign-in, and settings such as whether you've seen the feedback prompt).

Google Analytics (only if you allow it)

We ask before turning on Google Analytics. If you tap "Allow," Google Analytics sets cookies and counts visits: the page name (for example /learn or /offers/:id, never what you typed, your questions or shared offers), your browser and device type, and your approximate location (city level). Google signals and ad personalization are off, and we never send your name, email or account id. You can change your choice any time in Settings. Google handles this data under its own privacy policy.

Owner dashboard: to run the app we look at counts (how many accounts, how many were active, how many questions were asked each day). We can look up an account by email to help with support or block abuse. We can't see the contents of your offers, credentials or trips.

Health information

We don't ask for health information and don't want it. Please don't enter vaccine records, test results or other health details in notes, questions, scans or feedback. If you do, we don't use it for any purpose other than providing the feature you used, and you can delete it at any time.

Who we share data with

Only the service providers that run the app, and only to run it:

• Google (Firebase, Cloud hosting, reCAPTCHA) — hosting, sign-in, storage, bot protection.
• Google Analytics — visit counts, only if you allow it.
• Anthropic — answering Ask questions and reading scans.
• Resend — delivering feedback emails to our inbox.

We may disclose information if required by law. We never sell personal information.

Your choices and rights

• Export: Settings → Export downloads everything on your device as a file.
• Correct: edit anything in the app.
• Delete: Settings → Delete everything (device) and Account → Delete account (everything we store).
• For any other request, contact us through the feedback form. We'll respond within 45 days.

Children

TravelCare+ is for adults working in healthcare. It isn't meant for anyone under 18.

Changes

If we change this policy, we'll update the date above. If a change affects how we use data you've already given us, we'll ask first.

See also our Terms of Use.