Privacy Policy — ECH Connect

Last updated: 24 September 2026 · Applies to the Android application ECH Connect (com.cgn.echconnect)

1. Who we are

ECH Connect is published by East Coast Hospitals ("we", "us"). It is an internal workforce application. Access requires a login issued by East Coast Hospitals; there is no public sign-up and the app cannot be used without an account provided by your organisation.

For any privacy question, contact support@eastcoasthospital.com.

2. What we collect

We collect only what the app needs to do its job. We do not use advertising SDKs, analytics SDKs, or third-party tracking of any kind.

Data	Why we collect it	Required?
Name, email address, phone number, user ID	To create and operate your account and identify you within your organisation	Yes
Precise location, including in the background	To record attendance check-in and check-out, and to verify field activity during an active shift	Yes, for field roles
Photographs (camera and photo library)	To capture KYC identity documents and referral images	Yes, where a referral or KYC record requires it
Files and documents you choose to attach	To attach supporting material to a referral or activity record	No — optional
Referral and activity records	To manage patient referrals and field activity on behalf of your organisation	Yes
Commission and billing history	To display the referral fees and settlement status associated with your account	Yes

What we do not collect

• No advertising identifier and no device advertising profile.
• No contacts, calendar, SMS, call logs, or browsing history.
• No audio or video recording.
• No payment card numbers or banking credentials. No payment is taken inside the app.
• No analytics or behavioural profiling.

3. Location data in detail

• Background location collection starts only when you check in for a shift and stops when you check out. It does not run outside an active shift.
• A persistent notification is displayed the entire time tracking is running, so it is never silent.
• You are shown an in-app explanation and asked for permission before the Android permission prompt appears. You may decline, and you may revoke the permission at any time in Android Settings.
• Each recorded point consists of latitude, longitude, an approximate street address, and a timestamp, associated with your user account.

4. How we use your information

• To operate the referral, attendance, leave, camp and activity features of the app.
• To let your organisation verify field attendance and coverage during working hours.
• To calculate and display referral fees, commissions and settlement status.
• To send you announcements from your organisation.

We do not use your information for advertising, marketing profiling, or automated decision-making that produces legal effects.

5. Sharing

We do not sell your data, and we do not share it with third parties for their own purposes. Information you enter is transmitted to East Coast Hospitals' own backend systems and is visible to authorised East Coast Hospitals staff and administrators according to your role.

We may disclose information where required by law, or to protect the rights and safety of patients, staff or the public.

6. Where data is stored and how it is protected

• Data is transmitted to our servers over HTTPS/TLS at all times. The app performs no unencrypted network communication.
• Backend systems are hosted on Amazon Web Services in the Asia Pacific (Mumbai) region.
• Authentication tokens are held on your device in the operating system's encrypted secure storage, and are excluded from device backups.
• Access to records is restricted by role within your organisation.

7. How long we keep it

Referral, attendance and activity records are retained for as long as your organisation requires them for operational, accounting and regulatory purposes, and are then deleted or anonymised. Account data is retained while your account is active.

8. Your rights and how to delete your data

You may request access to, correction of, or deletion of your personal data.

The app does not currently provide an in-app account-deletion control. To request deletion, email support@eastcoasthospital.com from the address registered to your account, with the subject line "Data deletion request". Full instructions are on the data deletion page.

We will acknowledge your request within 7 working days and action it within 30 days. Records your organisation is legally obliged to retain (for example accounting records) may be kept for the required period and deleted afterwards.

9. Children

ECH Connect is a workplace tool intended for adults aged 18 and over. It is not directed at children and we do not knowingly collect data from anyone under 18.

10. Changes to this policy

If we change this policy we will update the date at the top of this page. Material changes will also be communicated through the app or by your organisation.

11. Contact

East Coast Hospitals
Email: support@eastcoasthospital.com