Privacy Policy

Effective date: October 1, 2026 Last updated: September 2026

Note: This Policy was prepared based on WellBay's current platform design and operations. We recommend a final review by licensed counsel before treating this as a fully executed legal document, particularly regarding California privacy law and background-check compliance, which are reviewed periodically as regulations evolve.

1. Scope of This Policy

This Privacy Policy explains how WellBay, LLC ("WellBay," "we," "us") collects, uses, discloses, and protects personal information in connection with the WellBay mobile applications, website, and related services (together, the "Platform"). It applies to:

Clients (Individuals) who register to request caregiving services
Corporate/Entity Clients and the individual representatives who register and act on their behalf
Caregivers who register to offer caregiving services
Visitors to the WellBay website who have not created an account

This Policy is incorporated by reference into the WellBay Client Terms & Conditions and the WellBay Caregiver Terms & Conditions.

2. Information We Collect

2.1 Information You Provide Directly

Account & Profile Information: name, email address, phone number, password, physical/business address, profile photo.

Caregiver-Specific Information: bio, years of experience, hourly rate, service area, service specialties, languages spoken, certifications, government-issued ID, CPR/First Aid certification, TB test results, and background check results obtained through our designated consumer reporting agency.

Client-Specific Information: service receiver details (e.g., relationship to the Client, care needs described when creating a service request), emergency contact information (optional), and, for Corporate Clients, organization name, business address, and website.

Payment Information: WellBay does not directly store full payment card or bank account numbers. Payment and payout information is collected and processed by our payment processor, Stripe (including Stripe Connect for Caregiver payouts), subject to Stripe's own privacy practices.

Communications: messages sent through the Platform between Clients and Caregivers, and communications with WellBay Support (including Complaint, Suggestion, and Thank You submissions).

2.2 Information Collected Automatically

Device information (device type, operating system, unique device identifiers)
Location information (used to match Clients with nearby available Caregivers and to support check-in/check-out logging)
Usage data (app interactions, booking history, log data, crash reports)
Cookies and similar technologies on the WellBay website (see Section 10)

2.3 Information From Third Parties

Background check results from our designated consumer reporting agency
Payment and payout status from Stripe
Address suggestions from the Google Places Autocomplete API
Identity verification results, if a third-party verification vendor is used

3. How We Use Information

We use personal information to:

Create and manage accounts, and verify Caregiver eligibility
Facilitate discovery, matching, booking, and check-in/check-out between Clients and Caregivers
Process payments and Caregiver payouts through Stripe
Provide customer support and resolve complaints or disputes
Send booking, payment, document-expiration, and account-related notifications
Monitor and improve platform safety, quality, and performance
Comply with legal obligations, including tax reporting and responding to lawful requests from authorities
Detect and prevent fraud, abuse, and violations of our Terms

We do not use Client- or Caregiver-provided care details for advertising purposes, and we do not sell personal information to third parties for their own marketing use.

Between Clients and Caregivers: when a Booking is made, we share the information reasonably necessary for the two parties to complete the service.

Service Providers: we share information with vendors who perform services on our behalf, including Stripe (payments/payouts), our background-check provider, Google (address autocomplete), cloud hosting providers, and customer support tooling providers, each bound by contractual confidentiality and data-use restrictions.

Corporate Client Representatives: when a Corporate Client books care on behalf of an individual, the individual's relevant care information is visible to the Corporate Client's authorized representative and to the assigned Caregiver.

Legal & Safety: we may disclose information when required by law, to respond to legal process, or when we believe in good faith that disclosure is necessary to protect the safety of a Client, Caregiver, or the public.

Business Transfers: information may be transferred in connection with a merger, acquisition, financing, or sale of assets, subject to standard confidentiality protections.

We do not share Caregiver background check results with Clients directly; Clients see only the Caregiver's approval status and public profile.

5. Healthcare Corporate Clients

Certain Corporate Client types — including hospitals, dialysis centers, rehabilitation centers, assisted living/nursing facilities, and home health/hospice agencies — may be HIPAA Covered Entities. If such an organization intends to share a patient's Protected Health Information (PHI) with WellBay in the course of requesting caregiving services, that organization must execute a separate Business Associate Agreement with WellBay before doing so. Until a Business Associate Agreement is in place, healthcare Corporate Clients should not submit PHI through the Platform's service-request fields; general care preferences and scheduling information not constituting PHI may still be submitted normally. Organizations seeking to establish a Business Associate Agreement should contact legal@wellbay.us.

6. Your Privacy Choices

You may access and update most profile information directly in the app
You may request account deletion through the in-app support/ticket system
You may disable non-essential push notifications in your device settings; certain transactional notifications cannot be disabled while your account is active
Caregivers cannot opt out of background-check-related processing while maintaining an active profile, as this is a condition of Platform participation

7. California Privacy Rights (CCPA/CPRA)

If you are a California resident, you have the right to:

Know what personal information we have collected about you and how it has been used and disclosed
Request deletion of your personal information, subject to certain exceptions (e.g., information we must retain for legal, tax, or safety compliance)
Correct inaccurate personal information
Opt out of the "sale" or "sharing" of your personal information (WellBay does not sell personal information as of the date of this Policy)
Limit the use of sensitive personal information, such as government ID or precise geolocation, to purposes necessary to provide the Platform's services
Not receive discriminatory treatment for exercising these rights

To exercise these rights, submit a request to privacy@wellbay.us or through the in-app Support section. We will verify your identity using the email or phone number associated with your account before fulfilling a request, and will respond within 45 days as required by California law (extendable by an additional 45 days where reasonably necessary, with notice to you).

8. Data Security

We use administrative, technical, and physical safeguards designed to protect personal information, including encryption in transit, access controls limiting internal access to sensitive documents (such as background check results and government ID) to authorized personnel, and secure handling of payment data through Stripe's PCI-compliant infrastructure. No system can be guaranteed 100% secure, and we encourage users to use strong, unique passwords and enable two-factor authentication where available.

9. Data Retention

We retain personal information only as long as necessary for the purposes described in this Policy:

Account and profile information: retained while your account is active, and deleted or anonymized within 30 days of a verified account deletion request, except where longer retention is required by law
Background check records: retained for the duration of a Caregiver's active status on the Platform, and for a minimum period thereafter consistent with our consumer reporting agency's applicable recordkeeping requirements
Payment and transaction records: retained for at least 7 years to meet U.S. federal and state tax recordkeeping requirements
Support communications and dispute records: retained for 3 years following resolution

10. Cookies & Tracking Technologies

The WellBay website uses cookies and similar technologies to operate the site securely, remember your preferences, and understand aggregate usage patterns. We use essential cookies (required for the site to function, such as session management) and analytics cookies (to understand how visitors use our site in aggregate). WellBay does not use cookies for cross-context behavioral advertising as of the date of this Policy. You can control or disable cookies through your browser settings; disabling essential cookies may affect site functionality.

11. Children's Privacy

The Platform is intended for users who are 18 years of age or older. WellBay does not knowingly collect personal information directly from children under 18. A parent or guardian may act as a Client on behalf of a minor service receiver, in which case the parent or guardian — not the minor — is the registered account holder and provides the relevant information.

12. Third-Party Links and Services

The Platform may contain links to third-party services, such as Stripe's own dashboards or policy pages. This Privacy Policy does not apply to third-party services, and we encourage you to review their privacy policies directly.

13. Background Check Information (FCRA)

If you apply to become a Caregiver, we will obtain a consumer report (background check) about you from our designated consumer reporting agency, as described in the standalone disclosure and authorization you provide during registration. This report is used only to evaluate your eligibility to provide Services on the Platform and is not shared with Clients in report form.

If information in your report may negatively affect your approval status, we will provide you a pre-adverse action notice, a copy of the report, and a summary of your rights under the Fair Credit Reporting Act, followed by a reasonable waiting period before any final adverse action. If a final adverse action is taken, we will provide a final adverse action notice including the consumer reporting agency's contact information and your right to dispute the accuracy of the report directly with that agency.

14. Changes to This Policy

We may update this Privacy Policy from time to time. Material changes will be communicated through the Platform or by email with reasonable advance notice.

15. Contact Us

Questions about this Privacy Policy, or requests to exercise your privacy rights, may be directed to support@wellbay.us. Organizations seeking to establish a Business Associate Agreement should contact support@wellbay.us.

Questions about this Privacy Policy?

Reach us at support@wellbay.us.