Privacy Policy

Last updated: 2026-09-07

This Privacy Policy explains how where.care collects, uses, and shares information about you when you use our Service.

1. What we collect

• Account data: name, email, password hash, role (family / professional / admin).
• Professional profile: display name, bio, hourly rate, zip, languages, services offered, availability schedule.
• Verification data: Checkr background-check outcome, and for RN/LPN professionals the license number and state you submit for manual review. We do not store raw SSN.
• Quote + messaging: quote details, messages exchanged between families and caregivers, delivery/read state.
• Usage + logs: standard request logs (IP, user agent, timestamp, path) retained for 30 days for abuse investigation.

2. How we use it

• Running the marketplace (search, compare, quote, messaging, reviews)
• Email + SMS notifications about quote activity (via Resend + Twilio)
• Fraud and abuse prevention
• Aggregate analytics (no individual-level tracking in v1)

3. Who sees what

A professional's public-safe profile (name, role, rate, city+state, bio, rating, services) is indexable by search engines. Zip, lat/lng, email, and phone are never shown publicly. Families see caregiver contact details only after submitting a quote.

4. Third parties

We share data with service providers who help us run the platform:

• Cloudflare — hosting, DNS, edge caching
• Checkr — background check verification
• State nursing boards / NCSBN e-Notify — RN/LPN license review when we have an account; otherwise our team reviews the license you submitted
• Resend — transactional email delivery
• Twilio — transactional SMS delivery
• Better Auth — session + account management

We do not sell your data. We do not use your data to train third- party AI models.

5. Your rights

You can request access to your data, correction, or deletion by emailing privacy@where.care. We aim to respond within 30 days. California residents have additional rights under the CCPA; EU residents under the GDPR.

6. Retention

Account data is retained while your account is active + 90 days after deletion for audit. Verification records are retained per Checkr's terms and our own license-review records. Messages are retained for 2 years.

7. Children

where.care is not for use by anyone under 18. We do not knowingly collect data from minors.

8. Contact

Privacy questions: privacy@where.care.