VI Workforce — Privacy Policy
Last updated: June 24, 2026
VI ("we", "us", "our") provides a workforce management platform for security, healthcare, skilled trades, and warehouse staffing. This policy explains what personal information we collect from workers, employers, and admins who use the VI mobile app and Web Portal, why we collect it, and how it's used.
What we collect
From workers (job seekers and employees)
- Account info: name, email, phone number, date of birth, address, postal code, immigration status in Canada.
- Verification documents: front and back of government ID, a selfie for face verification.
- Professional credentials: licence numbers, expiry dates, photographs of certificates (Security Guard Licence, First Aid, RN registration, etc.).
- Shift activity: clock-in / clock-out timestamps, GPS coordinates at clock-in and clock-out, GPS pings every two minutes while you are clocked in, geofence alerts, paused time, total worked hours.
- Files you choose to upload to your personal vault.
From employers (clients)
- Business name, contact name, email, phone, address, sector.
From admins
- Name, email, phone for the VI staff account.
Automatically
- Device platform (iOS / Android) and app version.
- Crash logs (Firebase Crashlytics) without personally identifying content.
Why we collect it
- Identity verification. Government ID, selfie, and phone OTP confirm workers are who they say they are.
- Certification compliance. Provincial licensing bodies require us to validate licences before placing workers on shifts.
- Shift integrity. Geofenced clock-in and continuous GPS pings during shifts confirm workers are physically on site when they are paid. Employers see only attendance, not real-time location.
- Payroll. Verified timesheets drive the wages paid out to workers and invoiced to employers.
- Communications. Email and SMS to confirm sign-ups, send shift notifications, password resets, and admin / employer support replies.
Who we share it with
- Employers see only the workers VI has assigned to them, those workers' certifications, clock-in / clock-out times, and total hours. They do not see workers' raw GPS traces, ID photos, selfies, or files outside the clock-in selfie tied to a shift they assigned.
- Subprocessors: Google Firebase (auth, file storage, push notifications), Supabase (database), Google Apps Script (Google Sheets mirror for admin oversight), Google Maps Platform (geocoding and map rendering).
- Government / law enforcement: only when required by a Canadian court order or law.
We do not sell personal information. We do not track you across other apps or websites for advertising. We do not use App Tracking Transparency to share an IDFA.
Where we store it
- Postgres (Supabase) hosted in Canada (ca-central-1) for workers, shifts, clock events, certifications, employer records.
- Firebase Storage (us-central1) for selfies, IDs, certificates, and worker files. Encrypted in transit (HTTPS) and at rest by Google.
- Google Sheets owned by VI for admin-side spreadsheet audits.
How long we keep it
- Worker profiles: as long as the account is active, plus 7 years after deletion for tax / payroll compliance (Canada Revenue Agency requirement).
- Clock event GPS pings: 18 months, then deleted.
- ID photos / selfies: 7 years (audit compliance), then deleted.
- Backups: 30-day rolling.
Your rights
- Access and correct. Request a copy of your data by emailing vishal@visecurity.ca or contact@101healthcare.ca.
- Delete. Open Edit profile → Delete my account in the VI app. Account deletion is permanent and immediate. Your worker row is scrubbed of PII within 24 hours; raw backups roll off within 30 days. Some records (timesheets, tax history) are retained per Canadian payroll regulations.
- Withhold consent. You may revoke location permission, camera access, or notifications at any time in iOS / Android Settings. The clock-in feature will stop working but the rest of the app continues.
Background location
While you are clocked in to a shift, VI uses background location ("Always") to confirm you remain on site. If you leave the geofence around the worksite (set per shift by the employer, typically 500 m), your shift is paused and your admin is notified. Background location stops the moment you clock out. We never read your location when no shift is active.
Children
VI is intended for users aged 18+. We do not knowingly collect data from anyone under 18.
Changes
If we materially change this policy we will email registered users at least 14 days in advance.
Contact