Privacy policy

Everyone who signs in

• Your mobile number. It is how you sign in, and how CareBee and the other person on a booking reach you.
• Your name, and your email address if you give one.
• An ID that CareBee gives your account, such as CBC-7K2M9Q, for you to quote when you contact us.
• When you agreed to the terms of use and this policy, and which version of them.
• Anything you report to CareBee about a visit, and each time you press the emergency button on one.

Parents

• Each child you add: their name, their date of birth, their gender if you give it, and anything you write in their notes, such as allergies, medicines and routines.
• The addresses a caregiver should come to, and where each is on the map if you mark it.
• Each booking: the kind of care, the time, its price, your instructions for the visit, and what happened to it afterwards. Each has an ID of its own, such as CBID-9FQ2M7K.
• The stars you give a finished visit, if you rate it, and anything you write with them.

Caregivers

• Your date of birth, your gender, the languages you speak, the kinds of care you offer, the areas you work in, your years of experience, and anything you write about yourself.
• The name and mobile number of someone to call in an emergency.
• Your current and permanent addresses, and where your current address is on the map.
• The outcome of CareBee's checks: your interview, government ID, address proof, background check, training and skill assessment, with the date each was passed, and whether your application is approved. Staff can add their own notes to an application.
• A copy of your identity document and of a proof of address, if you send them from your application. Sending a new one replaces the old one.
• Where you are paid: the bank account or UPI ID you give, the name it is in, and your PAN if you give it. Only you and CareBee staff see these. They are used to pay you and for nothing else.
• Where your phone is, while you are on the way to a visit with its page open and have allowed the site to know. Only the latest position is kept, and it is removed when the visit starts.
• The visits you take, and when you accepted, set off, arrived and finished.
• The average of the stars parents have given your visits, and how many gave them.

Kept automatically

• For each device you sign in on: its internet (IP) address, and when it was last used.
• For each request the site handles: what was asked for, when, and the IP address it came from. What you type into a form is not written to these logs.

• To sign you in.
• To arrange visits and carry them out.
• To tell you what is happening to a booking or to an application.
• To decide whether a caregiver can work with CareBee.
• To tell which caregiver is nearest to a visit, from the positions marked on the map.
• To keep a record of who did what, so a problem with a visit can be looked into.
• To stop misuse, by limiting how many requests one IP address can make and how many login codes one number can ask for.

It is not used for advertising. No advertising or analytics company is sent anything by this site. The one thing your browser fetches from anywhere else is the map, described below.

Caregivers looking at open requests

They see only the kind of care, the time, the area and pincode, each child's age and gender, the booking's ID, and how far it is from where they live. They are told the distance, not the place. Nothing in an open request says which family it is from.

The caregiver who takes your booking

They see the full address, your name and mobile number, your instructions for the visit, and each child's name, date of birth, gender and notes. They do not see what you pay, or the start code, which only you can give them. If you marked your home on the map, they can open that spot in a maps app to find their way. A caregiver who is no longer on the booking can no longer open it.

They do not see what you said about a visit. A caregiver is shown the average of all their ratings, and how many there are, never who gave which.

The parent whose booking a caregiver takes

They see the caregiver's name, mobile number, years of experience and languages, and the average of the ratings other parents have given them. They do not see the caregiver's date of birth, addresses, where they live on the map, emergency contact, documents or the detail of CareBee's checks.

While the caregiver is on the way and sharing their location, CareBee staff can see where they last were. The parent is told that the caregiver is on the way, and is not shown where they are.

A report one person makes about a visit is not shown to the other. Only CareBee staff read it.

A parent who is booking

Before booking, a parent is offered up to two caregivers who could come at that time, to ask for if they wish: ones who have come to them before, or otherwise the best rated and nearest. Of each they see the name, years of experience, average rating, whether and when that caregiver came to them before, and how far away the caregiver is. They are told the distance, not where the caregiver lives, and are not given a phone number until that caregiver has taken their booking.

CareBee staff

Staff can see all of the above, in order to run the service: to send caregivers, to sort out problems with visits and to review applications. Each change staff make to a caregiver's application is recorded, with who made it and when.

The company that takes payments

When you pay for a visit, the payment is taken by Razorpay, an Indian payment company, in its own box on the page. Your card, bank or UPI details are typed into that box and go to Razorpay, never to CareBee, which does not see or keep them. CareBee tells Razorpay how much is to be paid and your name, and keeps Razorpay's reference for the payment, so that money can be sent back to where it came from. Razorpay handles what it learns under its own privacy policy.

The services that draw the maps

When you search for your building on an address form, the search, and the map the building is then shown on, come from one mapping company: Mappls (MapmyIndia), an Indian mapping company, or Google Maps, from Google, whichever CareBee uses at the time. Your browser fetches them directly from that company. In doing so it learns your internet (IP) address, what you type into the search, the place you choose and which part of the map you look at, and it is asked which street and neighbourhood the place is in. It is not told who you are, nor your flat number or anything else you type into the form. If you press “Use where I am now”, your browser asks you first, and the position goes to that company for the same purpose. Each company handles what it learns under its own privacy policy.

To tell how far a caregiver is from a visit by road, CareBee's own servers ask Mappls the distance between two points on the map: the home to be visited, and where the caregiver would set out from. Mappls is given the two points and nothing else: no name, no phone number, and nothing that says whose homes they are.

Where that map cannot be shown, a plain map is drawn from OpenStreetMap's images, which your browser fetches directly from OpenStreetMap. It learns your internet (IP) address and which part of the map you looked at. It is not told who you are or what you marked. If you press “Use my location” on that map, your browser asks you first, and the position goes only to CareBee.

A caregiver who opens your home in a maps app for directions gives that app the position.

The company that sends our text messages

MSG91 delivers the one-time passwords (OTPs) for signing in, and the news about a booking that should not wait for you to open the app: that a caregiver is confirmed or has set off, that a booking was cancelled, or, for a caregiver, that a visit is on offer. It is given your mobile number and what the message says. For an OTP that is the OTP. For news about a booking it is the time of the visit, the kind of care, the neighbourhood and the caregiver's name.

It also sends a few messages that are not about one booking: that CareBee has started taking bookings, or has opened in your neighbourhood, at most once a week and only between 10 am and 9 pm; and, if CareBee staff move your account to another mobile number at your request, a message to the old number saying so, with the last four digits of the new one, so that you hear of it if you did not ask.

It is never given a street address, anything about a child, or anybody else's phone number.

Notifications on your phone

The CareBee app shows the same news as notifications on your phone, through Firebase Cloud Messaging, a service of Google. Google is given the app's address on your phone and what the notification says: the same words as a text message would hold, and for a caregiver offered a visit, how far away it is and what it pays. Notifications stop when you sign out, or turn them off in your phone's settings.

Checking that a person is signing in

Each OTP is a paid text message, so CareBee checks that a person, and not a program, asks for one. On this site the check is Cloudflare Turnstile, from Cloudflare, which most people never see: Cloudflare learns your internet (IP) address and what your browser tells it about itself and about how the page was used. In the app the check is Firebase App Check, from Google, which confirms the request comes from CareBee's own app on a real phone. Neither is told your mobile number or who you are.

Error reports

When something goes wrong on this site, in the app or on CareBee's servers, a report of the error goes to Sentry, a service that collects them so they can be put right. It holds what failed and where in the code, the page's address, and the kind of browser or phone. It is not sent your name, what you typed, or your cookies, and a mobile number is taken out of a report before it is sent.

When you sign in, this site sets two cookies, cb_access and cb_refresh. Their only job is to keep you signed in. Scripts on a page cannot read them, and they are removed when you sign out.

There are no other cookies, and nothing is stored for advertising or tracking.

Your details are stored on the servers CareBee runs this site on, and in backups of its database, which are kept so that it can be restored after a failure. The backups are encrypted, kept on those servers and in a second place apart from them, and deleted after 30 days.

• An OTP works for a few minutes, and only once.
• A device stays signed in for up to 30 days after you last used it.
• Your children and addresses are kept until you change or remove them. A booking keeps its own copy of the address and of the children's details as they were when you booked, so removing them later does not change a visit already booked, or the record of one already made.
• Bookings, and the record of what happened on each, are kept. A booking is also the caregiver's record of the visit.
• Reports about a visit, and what CareBee staff did about each, are kept with the booking.
• A caregiver's documents are kept, in the same database as everything else, for as long as they have an account.
• Everything else is kept for as long as you have an account.

• See and correct your name and email on your profile page, and your children and addresses on theirs. Caregivers can change the details of their application at any time.
• Remove a child or an address yourself.
• Sign out, which removes the cookies from that device.
• Delete your account yourself, in the app or on this website under Profile, or at /delete-account without signing in. It is deleted at once. If CareBee is still finishing something for you (paying a caregiver what they are owed, a refund on its way, or the days after a visit when it can be reported on), the account is closed at once and deleted when that is done.
• What is kept is the record of each visit and payment, with no name or address on it, because the tax office can ask for it and it is the other person's record too.
• For anything you cannot do yourself, contact CareBee: to change your mobile number, or to get a copy of what is held about you.

CareBee is used by adults. A child's details are given by their parent or guardian, and are read only by that parent, by CareBee staff, and by the caregiver on a booking for that child.

When this policy changes, the date at the top of the page changes with it.