Last updated: 3 October 2026
Verioos Ltd ("we", "our", "us") is committed to protecting your privacy. This policy explains what data we collect, why we collect it, and what we do with it, across the VerioOS care management platform: our website, the web portals, and the VerioOS mobile app for Android and iOS.
Where a care provider uses VerioOS, they are usually the controller of the care records held in it, and we process those records on their behalf as a processor.
We may collect the following types of personal data:
The app is for people whose care provider uses VerioOS: care office staff, carers, family members and people receiving care. Accounts are created by the care provider; you cannot sign up in the app. The app is not intended for anyone under 18. It uses the same account and data as the web platform.
What the app does not do:
What the app stores on your device: a sign-in session cookie so you stay signed in, a copy of your basic profile (name, role, email), the person you support (family accounts), and which notifications you have already seen. Signing out deletes the session cookie; uninstalling the app removes everything it stored.
We use your data to:
When you use the AI Copilot on the web or in the app, your question, any file you attach, and the VerioOS information needed to answer it are sent to our AI provider, OpenAI, to generate a response. OpenAI acts as our sub-processor under contract. Your Copilot conversation history is stored in VerioOS so you can continue it, and you can clear it at any time by starting a new chat. Always check AI answers before acting on them: they support, and never replace, professional judgement.
We process personal data under the following lawful bases: contract (to deliver our services), legitimate interests (to operate a secure business), legal obligation, and consent (for marketing communications). Special category data (health and social care records) is processed under Article 9(2)(h): the provision of health and social care.
We never sell your personal data. We may share data with:
We retain personal data for as long as needed to deliver our services and comply with legal obligations. Account data is kept while your account is active. Care records are retained per regulatory guidance (typically 8 years after discharge for adults, or until the individual's 27th birthday for children).
Data is encrypted in transit and at rest; the app only communicates with our servers over HTTPS. We follow ISO 27001 and Cyber Essentials Plus standards. Access is controlled by role-based permissions and full audit trails, and two-step verification is available for accounts.
Your VerioOS account is created and managed by your care provider. To delete it and the personal data linked to it:
We will confirm within 30 days. Your sign-in, profile and personal settings are deleted. Care records that the law requires your care provider to keep (for example, notes about care you gave or received) are retained for the required period, then deleted.
You can ask for specific data to be deleted while keeping your VerioOS account:
We will confirm within 30 days. What is deleted: the personal data you name, such as profile details, contact details, uploaded files and photos, chat messages and AI Copilot history. What is kept: care records, medication records, visit and pay records and the audit trail that the law requires your care provider to keep. These are retained for the legal period (typically 8 years after discharge for adults, or until the individual's 27th birthday for children) and then deleted.
Under UK data protection law you have the right to: access your data, rectify inaccuracies, erase your data (subject to legal retention), restrict processing, data portability, and object to processing. To exercise any right, email sboniface@c2flexicare.co.uk. You can also complain to the Information Commissioner's Office (ico.org.uk).
We will update this page when the platform or app changes how it handles personal data, and change the date at the top.
For privacy enquiries, contact our Data Protection Officer at sboniface@c2flexicare.co.uk or write to: Verioos Ltd, Unit 5, Midshires Business Park, Smeaton Close, Aylesbury HP19 8HL.
