Effective date: October 17, 2026
This policy explains how American Hearts & Home LLC (A Heart SH) (“we,” “us,” “our”) collects, uses, shares, and protects information in the HeartsHQ mobile app (the “App”). We are a home care agency based in Georgia.
Who the App is for
HeartsHQ is a work app for our caregivers and employees. It is not a consumer app, and it is not meant for anyone under 18.
The short version
- We collect your location only when you clock in, clock out, and (optionally) save a visit signature. Never in the background, and never continuously.
- The App has no advertising, no analytics, and no third-party tracking tools.
- We do not sell your information.
- Sensitive tax, employment, and bank information is encrypted.
- Your data is hosted on Microsoft Azure in the United States.
Information we collect
Account information
Your name, your work email, and the password you create when you activate your account.
Location (clock-in, clock-out, and visit signatures)
The App takes one location reading when you clock in to a visit and one when you clock out. It may also take one optional reading when a visit signature is saved. The App never tracks your location in the background or continuously.
We use these readings for Electronic Visit Verification (EVV), which confirms that a visit happened at the right place and time. We do not use your location for marketing, and we never sell it.
Visit records
Shift times, completed tasks, visit notes, and incident reports. These records may contain client health information, which we protect as HIPAA requires.
Signatures
Signatures you or a client draw in the App, for example to confirm a visit or sign a form.
Documents and photos you upload
You can upload documents by choosing them from your phone’s files or photo library. The App only sees the files and photos you pick. The App does not use your camera.
Tax and employment forms
The App collects information for your W-4 (federal tax withholding), G-4 (Georgia tax withholding), and I-9 (employment eligibility) forms.
- For your Social Security number, the App collects only the last 4 digits. If your full number must be verified (for example, for I-9 Section 2 or E-Verify), our office does that outside the App.
- Other sensitive information on these forms is encrypted.
Direct deposit
The bank details you provide for direct deposit, such as your account and routing numbers. This information is encrypted.
Messages
Your in-app messages with our office, and agency announcements.
Device and technical information
- Install ID and app version: the App sends a random ID created when the App was installed, plus the App’s version number. This helps us tell devices apart and support you. It is not an advertising ID.
- IP address: like any online service, our server sees your device’s IP address when the App connects to it.
We do not collect your advertising ID.
Push notifications
If you allow notifications, the App receives a push notification token so we can send you alerts. Notifications are delivered through Expo’s push service and Google’s messaging services. Notifications do not contain client details.
No ads, no analytics, no tracking
The App does not include advertising, analytics, or third-party tracking software (SDKs). We do not use your information for advertising.
How we use information
We use this information to:
- verify visits (EVV);
- keep accurate care and billing records;
- run payroll, including tax withholding and direct deposit;
- complete required employment forms;
- onboard and support our caregivers and employees; and
- communicate with you.
How we share information
We do not sell your information. We share it only:
- with service providers that host or process it for us, including the push notification services described above;
- with state Medicaid programs and their EVV vendors, who receive EVV visit data (visit time, location, and service provided);
- with payroll and tax agencies; and
- when required by law.
Where your data is stored
HeartsHQ is hosted on Microsoft Azure, in data centers in the United States, under a Business Associate Agreement with Microsoft.
How we protect information
We use reasonable safeguards to protect your information. Sensitive tax, employment, and direct deposit information is encrypted. Access is limited to people who need it to do their jobs. No system is perfectly secure, but we work to protect your information.
How long we keep information
We keep information only as long as we need it to run the App and our services, or as long as the law requires.
Delete your data
You can delete your HeartsHQ account and related data in any of these ways:
- In the App, go to Settings > Delete my account.
- Email office@aheartsh.com from the work email linked to your account, with the subject line “HeartsHQ account deletion request.”
We will confirm the request comes from you and complete it within 30 days.
Some records must be kept by law even after your account is deleted. These include payroll records, tax records, I-9 forms, and EVV visit records. We keep these records for the period the law requires, and then delete them.
Children
The App is for our employees and is not meant for anyone under 18. We do not knowingly collect information from children. If you believe a child has given us information through the App, contact us and we will delete it.
Changes to this policy
If we update this policy, we will post the new version on this page and change the effective date above.
Contact us
American Hearts & Home LLC (A Heart SH)
- Email: office@aheartsh.com
- Phone: 470-305-1490
- Mail: P.O. Box 1821, Hiram, GA 30141
