Last updated: July 20, 2026
This Privacy Policy explains what information Safe collects, how it is used, and how payment information specifically is handled. It applies to everyone who uses Safe — families, facilities, and Providers.
Account information you provide directly: name, email, password (stored only as a salted PBKDF2 hash — Safe never stores your plaintext password), and role (family, provider, or facility).
Provider verification information: government-issued ID, license documents, background-check and drug-screening results, certifications, and training records, uploaded to secure storage and reviewed by Safe's verification team.
Booking information: care needs, schedule, service address, and any safety flags you choose to disclose (e.g. pets, stairs, allergies), shared only with the specific Provider or Requester involved in that booking.
Payment information: Safe does not collect or store your raw card number, CVC, or full bank account number. Card and bank details are entered directly into Stripe's secure, PCI-compliant form and stored by Stripe. Safe stores only Stripe-issued references (a Customer ID, a Payment Method ID, a Connect account ID) needed to process future charges, refunds, and payouts.
To operate the marketplace: matching Requesters with Providers, processing bookings, authorizing and capturing payments, issuing refunds, paying out Providers, verifying Provider credentials, and providing customer support. We also use aggregated, non-personal data to improve search ranking and platform features.
With Stripe — our payment processor and, for Providers, our payments infrastructure for identity verification and payout (Stripe Connect). Stripe's own privacy policy governs its handling of the data you enter directly into its forms.
Between matched users — a family and the Provider they book see the information relevant to fulfilling that specific booking (name, service address once confirmed, disclosed safety flags, messages). Your exact address is never shared until a booking is accepted by both sides.
With service providers we use to operate Safe (e.g. email delivery, hosting infrastructure), under contracts limiting their use of your data to providing that service.
Safe does not sell your personal information. We do not share verification documents (ID, background check, license) with anyone other than Safe's own verification process and as required by law.
Transaction records (amounts, dates, refund/payout status, and Stripe reference IDs) are retained for as long as needed for accounting, tax, dispute-resolution, and legal compliance purposes, even after an account is closed. Raw card data is never in Safe's possession to retain or delete — that lives with Stripe, governed by Stripe's own retention policies.
You can review and update your profile information at any time from your account settings. You can request deletion of your account; booking and payment records tied to completed transactions may be retained as described above even after deletion, as required for legal and accounting purposes.
Passwords are hashed (PBKDF2-SHA256, salted). Payment data is handled exclusively by Stripe's PCI-compliant infrastructure — Safe's servers never see or store raw card numbers. Webhook events from Stripe are cryptographically signature-verified before being trusted, and are processed idempotently to prevent duplicate charge/refund/payout effects from a redelivered event.
We may update this Privacy Policy from time to time. We will post the updated policy here with a new "Last updated" date.
Questions about this Privacy Policy or your data? Contact Safe support through your account.
