Privacy Policy

Bobby, Inc. (“Bobby,” “we,” “us”) respects your privacy. This Privacy Policy explains what personal information we collect, how we use and share it, and the choices and rights you have. It applies to the Bobby app, website, and related services (the “Platform”).

1. Who this policy covers

This policy applies to Customers, Providers, and website visitors. Some sections apply only to residents of certain jurisdictions (for example, the EU/UK and California), as noted below.

2. Information we collect

You provide directly

• Waitlist (pre-launch): before Bobby launches, the only information we collect is what you enter to join the launch list, your email address and, optionally, whether you are a customer or provider and the service or borough you are interested in. We use it only to let you know when Bobby opens. We do not sell it.
• Account & profile: name, email, phone number, password, profile photo, and, for Providers, verification documents and licensing details.
• Provider screening: for Providers, results of identity verification and, where applicable, background checks. These may be performed by third-party screening partners acting as consumer reporting agencies, and are collected and used in accordance with applicable law, including the federal Fair Credit Reporting Act (FCRA) and applicable state background-check and fair-chance laws. Where required, screening is conducted only with your disclosure and authorization.
• Bookings: service details, addresses, scheduling, notes, and messages exchanged in-app.
• Payments: payment identifiers and tokens held by Stripe. We do not store full card numbers or CVV.
• Support & safety: reports, ratings, reviews, and communications with us.

Collected automatically

• Location: precise or approximate location where needed to deliver a service (for example, matching a ride or tracking a trip).
• Device & usage: device type, app version, IP address, identifiers, and how you interact with the Platform.
• Cookies: on our website, as described in our Cookie Policy.

3. How we use your information

• match Customers with Providers and enable bookings;
• process payments, payouts, tips, and refunds;
• provide real-time tracking, trip-sharing, chat, and support;
• verify identity, prevent fraud, and keep the community safe;
• improve the Platform and personalize your experience;
• send service and, with consent where required, marketing messages;
• comply with legal, tax, and regulatory obligations.

We do not sell your personal information.

4. Legal bases (EU/UK users)

Where the GDPR or UK GDPR applies, we process personal data to perform our contract with you (bookings and payments), for our legitimate interests (safety, fraud prevention, improving the Platform), to comply with legal obligations, and with your consent (for example, certain marketing or sensitive data). You may withdraw consent at any time.

5. How we share information

We share only what is necessary:

• With the other party to a booking, the Provider or Customer, to deliver and coordinate the service (for example, a first name, approximate location, and contact for the trip).
• With service providers such as Stripe (payments), cloud hosting, mapping/routing, and communications vendors, under confidentiality obligations.
• For legal and safety reasons when required by law or to protect users, the public, or Bobby's rights.
• In a business transfer such as a merger or acquisition, subject to this policy.

6. Location & sensitive data

Location data is used to provide the service you request and is not shared beyond what a booking requires. Some services (for example, elderly care) may involve health-related notes. We treat such data as highly sensitive: it is access-restricted, encrypted where stored, retained for the shortest viable period, and never sold. We ask for your consent where required before processing sensitive data.

7. Data retention

We keep personal data only as long as needed for the purposes above or as required by law. Each category has a defined retention period and is pruned on a schedule. Financial and transaction records required by law are retained (in anonymized form where possible) even after account deletion.

8. Your rights & choices

Depending on where you live, you may have the right to access, correct, delete, port, or restrict your personal data, to object to certain processing, and to opt out of marketing. California residents have rights under the CCPA/CPRA, including the right to know, delete, correct, and opt out of “sharing” for cross-context advertising (which Bobby does not do). You can exercise most rights directly in the app. Account deletion runs through a grace period and then removes or anonymizes your data, keeping only legally required records. To make a request, use the contact method Bobby will publish at launch. We will not discriminate against you for exercising your rights.

9. Security

We use encryption in transit and encrypt sensitive fields at rest, restrict access on a least-privilege basis, and monitor for abuse. No system is perfectly secure, but we work to protect your data and will notify you and regulators of breaches as required by law.

10. Children

The Platform is not directed to children under 18, and we do not knowingly collect their personal data. If you believe a child has provided us data, contact us and we will delete it.

11. Changes & contact

We may update this policy; material changes will be notified in the app or by email and reflected in the “Last updated” date. For privacy questions or requests, use the contact method Bobby will publish at launch. Bobby, Inc. operates across all five boroughs of New York City. Privacy requests and written notices may be mailed to Bobby, Inc., 211 Madison Ave #26b, New York, NY 10016.