Privacy notice
Care World · Chronix Health Group Ltd
Effective 7 November 2026 · Version 1.3. Version 1.3 adds one paragraph about usage statistics and its row in the retention table; the words of version 1.2 (3 November 2026), which replaced the cookie table with a link to the cookie notice, are otherwise unchanged. Care World's own privacy notice. Until now Care World pointed to the Kithra privacy notice (v1.19), which described Care World in one section. This notice covers Care World and only Care World. It names what Care World holds today, Care World's own contact addresses, and Care World's cookies. The Care World Library has its own notice at library.careworld.app/privacy.
In short
We are Chronix Health Group Ltd. We run Care World, where families find carers and carers are found, and we are responsible for what Care World holds.
We do not sell information and we do not use it for advertising. Care World's records are stored in the United Kingdom.
You can see it, correct it, take a copy, or have it deleted. Ask us and we answer within a month.
Who we are
Chronix Health Group Ltd, the controller for information held in Care World.
Registered in England and Wales, company number 16663224
Registered office: 11-13 Upper High Street, Epsom, Surrey, KT17 4QY, United Kingdom
Help with Care World: support@careworld.app
We have no Data Protection Officer. We have assessed whether the law requires one and it does not at present; our Director leads on privacy. Write to privacy@chronixhealthgroup.com about anything in this notice.
Your Chronix Health Group account (your name, email address and sign-in) is one account shared across every Chronix Health Group product you join. What you do in Care World stays in Care World and is not shared with another product unless this notice says so.
What we hold, and why
| What | Why | Lawful basis |
|---|---|---|
| Your account: name, email address, password, sign-in records, the terms you accepted | To run your account | Contract |
| A carer's profile and availability | So families can find you | Contract |
| A family's job posts, and the person who needs care: the name you choose to show, whether they are an adult or a child, and how they are related to you | So carers can see what help is wanted | Contract |
| Messages, contact requests, bookings and what was agreed | So families and carers can arrange care with each other | Contract |
| Right-to-work checks, references and check results | To check a carer may work before an introduction | Legal obligation; legitimate interests (keeping families safe) |
| Blocks, reports, appeals and safety alerts | To keep people safe and act on concerns | Legitimate interests; legal obligation where a child or adult may be at risk |
| What people search for, carers you save, which profiles are viewed | To show results and make finding a carer work | Legitimate interests |
| A carer's own business records (invoices, expenses, mileage, clients) | Tools a carer chooses to use for their own work | Contract |
| Visits to our pages, counted without identifying you | To run and improve the site | Legitimate interests |
Usage statistics: to improve the service, we record which pages are opened and which buttons are pressed, with the type of device (phone, tablet or computer). These records are anonymous: they hold no name, email address or account, and nothing is stored on your device to make them. We never use them for advertising. You can turn them off at any time with "Usage statistics: off" at the foot of any page. We keep them for 12 months.
Where we rely on legitimate interests, we have weighed ours against yours, and you can ask to see that assessment.
A job post or a search can say something about the person who needs care, such as the kind of help they need. We use it only to match families with carers, keep it only as long as the table below says, and never use it to decide anything about anyone.
A carer's profile
If you offer care, you make a profile. It holds your headline, how you describe yourself, the area you cover and how far you will travel, whether you have a car, the languages you speak, the support you do and do not offer, your experience, your rates and the kind of work you want, your availability, and the handle you choose. You decide whether to publish it, and separately whether people without an account can find it. A published profile is meant to be read by families looking for care. You can unpublish it or change any part of it at any time.
We show your profile with an illustrated picture or your initials. We do not hold profile photographs in Care World.
We show families a carer's track record on Care World (for example, bookings completed). We do not hold ratings or reviews.
Checking that a carer may work
Before a family and a carer are introduced, we check the carer may work in the UK. A carer gives us a share code and date of birth, and a person at Care World checks them on GOV.UK. We hold the code and the date of birth only while the check is being made, then delete them. We keep the result, the date, who made the check, and a copy of the result, as the law requires us to show the check was made.
We do not make a criminal-record (DBS) check today. If we start, we will say so here first, and we would only hold that information under the extra conditions the law sets for records of criminal convictions and offences: Article 10 of the UK GDPR and Schedule 1 of the Data Protection Act 2018.
A check result from another Chronix Health Group product
Some checks are made in another of our products. When that happens, that product tells Care World a scrambled (hashed) form of the carer's email address, which kind of check it was, whether it passed, and the date. Nothing else crosses. No document, no detail of the result, and nothing about anyone's health. We show families that the check was done and when.
References, and what we hold about the person giving one
A carer can ask people who know their work to give a reference. The carer gives us that person's name, email address, organisation and how they know the carer.
If you have been asked for a reference: we got your details from the carer, not from you. We use them to ask you for the reference, and for nothing else. We send the request by email, with up to three reminders over about ten days. When you reply, we keep your answer and the internet address (IP address) your reply came from, so we can show the reference was given once and by whom.
You can tell us to stop, or ask us to delete what we hold about you, at any time: email privacy@chronixhealthgroup.com. You do not have to give a reference, and you do not need an account.
Messages between a family and a carer
A family and a carer can message each other through Care World. We hold those messages so both people can read them, and so we can act if one reports the other. Until a family has made a booking with a carer, phone numbers, email addresses and social media handles in messages are hidden on screen; the message itself is kept as it was written.
If either person blocks the other, we keep a record of that. A block applies across the whole service, and the person blocked is not told.
Safety
If a booking's SOS button is pressed, we record that it was pressed, by whom and for which booking, and we tell the other people who share the family's Care World account, in the app and by email, as each of them has chosen in their settings. Care World is not an emergency service: in an emergency call 999. Reports of a concern about someone's safety are kept apart from everything else and only for as long as the concern requires.
The organisations that run Care World for us
| Who | What they do | Where |
|---|---|---|
| Supabase | Database: where Care World's records are kept | United Kingdom |
| Vercel | Runs the website and app | United Kingdom |
| Cloudflare | Protects against attack | Global, UK-first |
| Resend | Sends our emails | United States |
| Anthropic | Provides the model behind Chronicus, our assistant. It receives only what you type for Chronicus. It is not used to train the model | United States |
| OpenFreeMap | Serves the map tiles your browser shows, so it sees your internet address | European Union |
| postcodes.io | Turns the first half of a postcode into a place on the map. It receives that half-postcode and nothing else | United Kingdom |
Where a service above sits outside the UK, it handles only what it needs (an email address to send an email) under the UK's approved transfer terms, the International Data Transfer Agreement or the UK Addendum. If we change this list we will tell you before it takes effect.
Chronicus
Chronicus is an AI assistant in Care World. It reads only what you type for it. It can help you write a job post or a profile, answer how Care World works, and pass a problem or a concern to a person. It drafts and suggests. Nothing is sent, changed or posted until you confirm it, and we do not make decisions about you by machine alone.
Security
Information is encrypted in transit and at rest, and access is closed by default. A carer's bank details, if you store them for your own invoices, are encrypted again before we store them.
To stop our sign-up form being misused, we keep a scrambled copy of an email address for up to 15 minutes.
How long we keep it
| Your account | While it is open. After you close it, it is hidden at once and deleted after 30 days |
|---|---|
| A sign-up you never confirmed | 30 days after you signed up |
| Your carer profile | While your account is open, then deleted with it |
| Messages | 12 months from the last message in the conversation |
| What people search for | 90 days |
| Carers you save, and which profiles were viewed | While the account is open; who viewed a profile is removed when the viewer's account is deleted |
| Notifications and the record that we sent them | 60 days after they are read or sent |
| Sign-in and audit records | 12 months |
| Visits to our pages | 12 months |
| Usage statistics | 12 months. They hold no identifier |
| Support messages, problem reports and complaints | 6 months |
| Payments | 6 years, as tax law requires |
| The record that we checked a carer, and the references given about them | Kept after the account closes, as the record that a check was made: 2 years after the carer's profile stops being listed |
| Reports about someone's safety | As long as the concern requires |
Your rights
You can see what we hold, correct it, take a copy in a portable form, have it deleted, restrict how we use it, object to us using it, and withdraw consent where we relied on it.
Ask from your account, or email privacy@chronixhealthgroup.com. We answer within one month.
If you are unhappy, tell us. You can also complain to the Information Commissioner's Office: ico.org.uk, 0303 123 1113, or Wycliffe House, Water Lane, Wilmslow, Cheshire, SK9 5AF.
Children
Care World is used by adults arranging or giving care. A family may post a job for care for a child. We record that the care is for a child, the name the family chooses to show and how they are related, and we do not hold a child's photograph or address. We do not profile children or use their information to advertise.
Changes
If we change how we use your information we will tell you before it takes effect.
Cookies
Care World · Chronix Health Group Ltd
Every cookie we use, what it does and how long it lasts, is listed in our cookie notice at careworld.app/cookies.
All of these are needed to run Care World. We use no advertising cookies, no analytics cookies, and nothing that tracks you across other sites.
You can block or delete cookies in your browser settings. Doing so will stop you signing in.