What is COVIDdetect?
COVIDdetect is a COVID-19 testing program that empowers organizations and families to take control of their health and safety. Do-it-yourself (“DIY”) testing is a staple of this program.
COVIDdetect is a powerful medical surveillance program that can mitigate the risk of COVID-19 for the following applications:
- At Work
- At Home
- At Play
- At School
The COVIDdetect App helps users through testing setup, sample collection and with the entering and viewing of test results.
Our Employees’ and Vendors’ Responsibilities
Each and every one of our employees and vendors are responsible for maintaining the confidentiality of all personal information and data to which they have access.
We keep our employees and vendors informed of our policies and procedures for protecting personal information and reinforce the importance of complying with them. Additionally, we provide privacy training to our employees as well as additional on-the-job training of confidential information. All employees are required, as a condition of employment, to abide by these policies and procedures. Our vendors are also required to enter into agreements with us that bind them to confidentiality and applicable privacy laws.
What Is Personal Information
Personal Information is information that identifies you and relates specifically to you. It includes but is not limited to your name and address, phone number, email address, health information such as your COVID-19 test results and payment information where applicable.
Collecting Users’ Personal Information and Data
We obtain personal information and data about users directly from them and their mobile device through our App. We collect personal information and data in the form of users’:
- First and last names;
- Email addresses;
- Phone numbers;
- Mailing addresses;
- Employee IDs (where applicable);
- Payment information such as credit card and debit card numbers (where applicable);
- COVID-19 Test results;
- Device information such as type of phone (Google, iPhone etc);
- Device Camera (to access and upload pictures into the App);
- Device IP addresses (for requests between user’s device and our system).
We collect this information and data for the purposes of facilitating and servicing the at-home (“DIY”) COVID testing as well as communicating test results to users.
Payment information is only collected where the user will be paying for the testing themselves. In some circumstances a user’s employer or event organizer may pay for the testing and therefore the user will not be required to provide us with payment information.
Our COVIDdetect App may collect a user’s device information to measure the number of visits, average time spent on the App, phone type and version, etc. DriverCheck uses this information to monitor the use of our App to improve its content and usefulness.
Please note the COVIDdetect App DOES NOT collect the following information:
- A user’s device location data
- A user’s device videos
- A user’s device files
- A user’s device contacts
- A user’s device photos, unless specifically uploaded to the app with the user’s consent
Using Personal Information and Data
We use the personal information and data we collect about users to provide users with the services offered in our COVIDdetect App, such as testing instructions, test result viewing, as well as to facilitate COVID testing itself. This includes using names, addresses and payment information where applicable for the completion of testing.
We will also use users’ personal information and data, such as email and phone number, to communicate with users of the App for the purposes of updating users on their test results and next steps should they test positive for COVID. We will also use users’ information and data for updating the users’ account should they need to change passwords or usernames etc.
We may also use user personal information and data in the following ways:
- To establish and manage user accounts within the App;
- To ensure that content from our App is presented in the most effective manner for users and the users’ mobile device;
- To administer our Services and for internal operations, including troubleshooting, data analysis, research and statistical purposes;
- To meet our legal obligations.
Only those DriverCheck employees who require user personal information to complete their job tasks will have access.
*Please note we DO NOT use user information or data for advertising purposes.
Disclosing and Sharing Users’ Personal Information and Data
In addition to the COVIDdetect App collecting and using users’ personal information and data, the App will disclose and share user information and data with Google LLC and/or Apple Inc. whose platforms our mobile app are based. Disclosure of user information and data to either Google or Apple is wholly dependent upon which operating system the users’ mobile device is on, Google Android or Apple iOS. We also disclose user information such as test results to the individual user and where applicable the user’s employer, event organizer or conference organizer to which they will be attending. Users are asked within the App to provide their explicit consent to such release of information and we will only do so with their consent or where we have a legal obligation to do so. Where applicable, users’ payment information will be collected by, disclosed to and used by Intuit Quickbooks for the purpose of payment processing.
For more privacy information on our payment processor, Intuit Quickbooks, please visit: https://www.intuit.com/privacy/protect-your-privacy/
Aside from the disclosures described above, we have a strict policy of not releasing users’ information and data. However, there may be instances in which we have a legal obligation, such as a subpoena or court order.
*DriverCheck does not sell any user information collected through the COVIDdetect app.
**Please note the COVIDdetect App operates on the Google Android and Apple iOS platforms. As such users’ mobile device information submitted to the App will be transmitted to and shared with third parties that may be located in other countries, including the United States of America, in order to provide services to users, including downloading of the App itself and for fraud prevention. Information transmitted or stored by Google or Apple, are governed by their privacy policies respectively at https://policies.google.com/privacy?hl=en-CA&fg=1 and https://www.apple.com/ca/legal/privacy/
Accessing Users’ Personal Information
If a user wants to review or verify their personal information or find out to whom we have disclosed it, they can ask our Privacy & Compliance Coordinator. At that time, we will need specific information from the user to enable us to search for, and provide the user with the personal information we hold about them. We may also charge the user a nominal fee to do this, however we will advise the user of the fee in advance. The request must be made in writing.
There are a few instances where we will not be able to provide the personal information we hold about a user. Some of these instances include if it:
- contains references to other persons,
- is subject to solicitor-client, litigation or other privilege,
- contains our own proprietary information that is confidential to us,
- has already been destroyed due to legal requirements or because we no longer needed it for the purposes set out in this Policy,
- cannot be disclosed for legal reasons.
Contact information for the Privacy & Compliance Coordinator is set out below.
Keeping Users’ Personal Information Accurate
We are committed to maintaining the accuracy of users’ personal information for as long as it is being used for the purposes set out in this Policy, and users play an active role in keeping us up-to-date. Should a user discover, upon review of their personal information, that amendments are required, they should advise us. We will use our best efforts to advise any third parties to whom we have released the users’ personal information of any important amendments.
If we do not agree to make the amendments that a user requested, the user may challenge our decision. We will make a record of this challenge and, if necessary, disclose the challenge to third parties to whom the user’s personal information has been disclosed by us.
Deleting Users’ Personal Information and Data
User Device Privacy Control
We believe that users should have control over what information is provided to us.
Device Camera Access – the COVIDdetect App will require access to the user’s device camera so that the user can upload pictures for testing purposes. Users will be prompted by the App to allow access to their camera the first time they use the App. Users have the ability to completely turn off the COVIDdetect App’s access to their device’s camera. However, the app will not work properly if camera access isn’t enabled. The user also has the option to turn their device’s camera access on only when the App is in use, ensuring camera access is only used when necessary.
*Please remember our App does not collect device location data.
Safeguarding and Keeping Users’ Personal Information and Data Confidential
Users’ personal information and data are secure with DriverCheck. We have comprehensive security controls and procedures to protect against unauthorized use, alteration, duplication, destruction, disclosure, loss or theft of, or unauthorized access to personal information and data.
However, nothing done online through the Internet is totally secure 100% of the time. As such, should there be a breach of users’ information, we will notify the affected users in accordance with applicable Canadian privacy laws.
Additionally, our COVIDdetect App is run on the Google Android and Apple iOS platforms, each of which have teams to protect your information and provide security and integrity of the platform. You can find more information about Google’s and Apple’s security measures respectively at: https://safety.google/security-privacy/ and https://support.apple.com/en-ca/guide/security/sec35dd877d0/1/web/1
For information about Intuit Quickbooks security please visit the following website:
How Long We Keep Users’ Personal Information and Data
User information and data collected through the COVIDdetect App is stored with DriverCheck for as long as we are required to keep it in order to provide our Services to users in a seamless fashion or in compliance with applicable law. For example, we will retain user data in order to facilitate logins to accounts and in order to allow us to service user accounts.
Notwithstanding the foregoing, DriverCheck and its medical professionals are required to retain certain personal information as deemed necessary to comply with its general duty of care and its obligations established by its relevant governing bodies and in accordance with its record retention policy.
Users can withdraw their consent subject to legal or contractual restrictions to our use of their personal information, as long as:
- User gives us at least sixty (60) days written notice by completing the necessary form available.
- There are no legal requirements for user consent.
Withdrawal of consent may result in users being unable to use the COVIDdetect App and no longer being able to participate in DIY testing services. In the event testing is performed for the purposes of employment, the user should consult with their employer regarding any impact on their employment and/or ability to attend in person.
We take our responsibility to protect the confidentiality of user personal information and data very seriously.
For more information about our commitment to protect the privacy and confidentiality of user personal information and data, please contact our Privacy & Compliance Coordinator at firstname.lastname@example.org. If you feel that your questions or concerns have not been satisfactorily addressed, we want to hear from you. Please write to:
Privacy & Compliance Coordinator
P.O. Box 1186, 1 Manley Street