Privacy Policy

How RehabCare collects, uses and protects information, including what happens when a patient connects a Google account.

Last updated 23 October 2026

1. Who we are

RehabCare is a home nursing management system used by a nursing service to schedule home visits, record clinical assessments, assign rehabilitation exercises and monitor patient pain between visits. The service operating this system is the data controller for the information held in it.

Questions about this policy can be sent to the support address shown on the Google consent screen.

2. What information we hold

• Account details. Name, email address, telephone number and home address, so that staff can identify and contact the right person.
• Clinical records. Visit notes, vital signs, complaints, assigned exercises and their completion status, recorded by a nurse or reported by the patient.
• Pain records. Pain scores, body location, questionnaire answers and any diary text a patient chooses to write.
• Reminders. Medication, exercise and appointment reminders, and whether each was sent.
• Security records. Sign in attempts and an activity log recording who changed what and when, kept so that access to health information can be accounted for.

3. Google account access

Connecting a Google account is optional. Nothing in the system requires it, and a patient who does not connect one loses no functionality other than calendar entries.

When a patient chooses to connect, we request a single permission, https://www.googleapis.com/auth/calendar.events. This permission allows RehabCare to create, update and remove calendar events that RehabCare itself created.

We use this permission for one purpose only: to place a patient's own care reminders into their own calendar, with alerts three days and one day beforehand.

We do not read existing calendar entries, and we do not access Gmail, Google Drive, Contacts, Photos or any other Google service. We never see or store a Google password. Sign in happens on Google's own pages.

We store an access token, a refresh token and the Google email address of the connected account, so that reminders can continue to be added without asking again. Disconnecting from the My Account page revokes those tokens with Google, deletes them from our database, and removes the events RehabCare created.

RehabCare's use of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.

4. How we use information

Information is used to deliver and coordinate nursing care: scheduling visits, recording what happened, assigning and following up exercises, monitoring reported pain, and sending reminders. Pain entries are scored automatically so that concerning reports are raised to the assigned nurse promptly. That scoring prompts a nurse to make contact and is not a medical diagnosis.

We do not sell information, use it for advertising, or transfer it to third parties for their own purposes.

5. Who can see what

• A patient sees only their own records.
• A nurse sees only the patients assigned to them.
• An administrator sees operational records needed to run the service.

Every request is checked against the signed in account, so changing an address in the browser does not grant access to another person's records.

6. How information is protected

• All traffic is encrypted in transit using HTTPS.
• Passwords are stored using the bcrypt hashing algorithm and are never recoverable in readable form.
• Database queries use prepared statements, so submitted text cannot alter a database command.
• Forms carry a one time token, preventing another site from acting on a signed in user's behalf.
• Sign in is locked temporarily after repeated failures, and sessions expire after a period of inactivity.
• Configuration files holding credentials are not reachable from a browser.

7. How long we keep it

Clinical and care records are retained while the person remains a patient of the service and afterwards for as long as required by applicable health record keeping obligations. Google tokens are held only while the connection is active and are deleted on disconnection. Security logs are retained for a limited period for accountability.

8. Your choices

• Connect or disconnect a Google account at any time from My Account.
• Access can also be withdrawn from within a Google account at myaccount.google.com/permissions.
• Ask the nursing service for a copy of your records, or for a correction to anything inaccurate.
• Update your own contact details and password from My Account.

9. Children

Accounts are created by the nursing service. Where a patient is a minor, the account is arranged with a parent or guardian.

10. Changes

If this policy changes, the revised version will be published on this page with a new date at the top.