Privacy Policy

Locumo · Last updated 3 July 2026

Locumo (“we”, “us”, the “app”) is a tool that helps locum practitioners track shifts, manage practices, and create invoices. This policy explains what information we collect, how we use it, who we share it with, and the choices and rights you have. We only collect what we need to run the app for you — we do not sell your data and we do not use it for advertising.

Information we collect

We collect only the information you provide or create while using Locumo:

• Account details — your email address and a password. Your password is never stored in plain text; it is protected using industry-standard salted hashing (scrypt).
• Your work records — shifts (dates, times, pay, mileage and notes), the practices you work at (names, addresses, contact emails and rates), and the invoices you create.
• Your profile & invoice settings — details you enter for your invoices, such as your name, billing address, phone number, contact email, payment/bank details, invoice numbering, and your home address or postcode.
• Location text you enter — your home postcode/address and practice addresses, which are used only to estimate driving mileage. Locumo does not access your device’s GPS or track your location.

We do not use third-party analytics, tracking, or advertising SDKs, and we do not collect device identifiers for tracking.

How we use your information

• To provide the core features of the app — storing your shifts, practices and invoices and syncing them across your devices.
• To create the invoices, summaries and exports you request.
• To estimate driving mileage between your home and a practice, when you ask for it.
• To authenticate you and keep your account secure.
• To send account-related emails you request, such as a password-reset link.

Service providers we share data with

We use a small number of trusted providers to operate the app. They process your data only to provide their service to us, under their own privacy and security terms:

• Vercel — application hosting.
• Turso — secure database storage for your account and records.
• Resend — sending transactional emails (e.g. password resets).
• OpenRouteService — converting the addresses you enter into approximate driving distances for mileage. Only the address text needed for that calculation is sent.

When you share an invoice or an export from the app, you choose the recipient and the method (for example email or your device’s share sheet). That sharing is initiated by you.

Data retention

We keep your information for as long as your account is active. You can delete individual shifts, practices and invoices at any time. When you delete your account, all of your data — your profile, settings, shifts, practices and invoices — is permanently removed from our database.

Deleting your account

You can permanently delete your account and all associated data directly in the app: go to Settings → Delete account, confirm with your password, and your account and data will be erased. This action cannot be undone.

Security

Data is transmitted over encrypted connections (HTTPS) and stored on secured, access-controlled infrastructure. Passwords are stored only as salted hashes. While no system can be guaranteed perfectly secure, we take reasonable measures to protect your information.

Your rights

Depending on where you live (including under UK/EU GDPR), you may have the right to access, correct, export, or delete your personal data, and to object to or restrict certain processing. You can exercise most of these directly in the app, or contact us using the details below.

Children

Locumo is intended for working professionals and is not directed to children. We do not knowingly collect personal information from children.

Changes to this policy

We may update this policy from time to time. When we do, we will revise the “Last updated” date at the top of this page.

Contact us

If you have any questions about this policy or your data, contact us at kumell@teleop.co.uk.