
Privacy Policy
This Privacy Policy (“Policy”) governs the manner in which Kurbsy, LLC (“Kurbsy,” “we,” “our,” or “us”) collects, uses, discloses, and secures personal information (“Information”) from users of our services, including but not limited to our website, mobile application, and transportation and concierge services (“Services”).
This Policy is legally binding. By accessing or using our Services, you accept and agree to the terms of this Policy. If you do not agree with our practices, your sole remedy is to refrain from using our Services.
1. Scope and Applicability
This Policy applies to all data collected through:
-
Our website and mobile applications
-
Booking portals, intake forms, and customer communications
-
Interactions with clients, caregivers, medical professionals, and referring organizations
-
Our services, including ride coordination and accommodations for individuals with special access needs
This Policy does not apply to third-party platforms not owned or controlled by Kurbsy. We are not responsible for the privacy practices of third-party websites or applications.
2. Information We Collect
We collect Information strictly for the purpose of operating our Services safely, lawfully, and efficiently. This may include:
A. Personally Identifiable Information (PII)
-
Full name
-
Email address
-
Phone number
-
Residential or pickup address
-
Payment method details (collected via secure, PCI-compliant processors)
-
Emergency contact information
B. Protected Health Information (PHI) (where applicable)
-
Medical or mobility-related disclosures voluntarily provided to ensure proper accommodation
-
Details required for coordination with healthcare providers, with explicit consent
C. Technical & Device Information
-
IP address, browser type, device ID, operating system
-
Mobile app behavior, location data (with user permission)
-
Session activity for fraud prevention, diagnostics, and service optimization
D. Usage Data
-
Booking history
-
Communication preferences
-
Accessibility or support needs
-
Feedback or complaints submitted
3. Legal Basis for Processing
We process your data under the following lawful bases:
-
Contractual necessity: to provide you with the service you requested
-
Legal compliance: to fulfill obligations under transportation, safety, insurance, and HIPAA regulations
-
Legitimate interest: for fraud prevention, service improvement, and business continuity
-
Consent: for any non-essential data processing or marketing activities
4. HIPAA Compliance
Kurbsy handles all health-related information in strict compliance with the Health Insurance Portability and Accountability Act (HIPAA). This means:
-
PHI is collected only with your express consent or that of an authorized representative.
-
Access to PHI is restricted to trained personnel on a “minimum necessary” basis.
-
All PHI is encrypted in transit and at rest, stored in HIPAA-compliant environments.
-
We do not use or disclose PHI for marketing or third-party purposes without explicit authorization.
We maintain Business Associate Agreements (BAAs) with any vendors who may interact with PHI on our behalf.
5. Children’s Privacy (COPPA Compliance)
Our services are not intended for children under 13. We do not knowingly collect personal data from minors without verifiable parental or guardian consent. Any such data will be immediately deleted upon discovery.
6. Data Security and Retention
We use administrative, physical, and technical safeguards to protect your Information, including:
-
SSL encryption
-
Two-factor authentication for staff
-
Access controls and audit logs
-
Regular vulnerability testing and data security reviews
We retain data only for as long as legally required or operationally necessary. Sensitive personal and health data is subject to a minimum retention period required under applicable law (e.g., HIPAA and state transportation records), after which it is securely deleted.
7. Information Sharing
We do not sell your personal information.
We may share limited Information only under the following conditions:
-
With trusted service providers under strict confidentiality agreements (e.g., dispatch software, payment processors)
-
To comply with law enforcement, court orders, or legal obligations
-
To protect the health, safety, or legal rights of users, employees, or the public
-
With express authorization for care coordination (e.g., with a family caregiver or healthcare provider)
All third-party partners are contractually bound to data protection obligations that meet or exceed this Policy.
8. User Rights
You have the right to:
-
Access and correct your Information
-
Request deletion, where legally permissible
-
Object to non-essential processing
-
Receive a copy of your Information in a portable format
-
Withdraw consent at any time (this may limit our ability to deliver service)
Submit your request by emailing [Insert Legal Contact Email] or writing to the address listed below. We will verify your identity before processing such requests.
9. Mobile App-Specific Terms
Use of the Kurbsy mobile app may involve:
-
Real-time location tracking (enabled only during active trips or with permission)
-
Push notifications (opt-in) for ride status, safety alerts, or service updates
-
Device permissions: You may grant or revoke access to location, contacts, or camera at any time via your device settings
App data is processed in accordance with this Privacy Policy and is never sold or exploited.
10. Data Breach Notification
In the event of a data breach affecting your Information, we will notify you without unreasonable delay, as required by applicable law. We will provide details of the incident, what was affected, and steps taken to secure your data.
11. Policy Revisions and Discretionary Updates
Kurbsy reserves the right, in its sole discretion, to update, modify, or revise this Privacy Policy at any time, with or without prior notice, to reflect changes in our practices, legal obligations, or operational needs.
We encourage users to review this Policy periodically. Your continued use of our Services after any modifications are posted constitutes your binding acceptance of the revised terms.
12. Contact Information
Questions or concerns? Want to file a data request or report a violation?
Contact us:
Kurbsy, LLC
Attn: Privacy Compliance Officer
Email: info@experience-kurbsy.com
Phone: 240.623.7804
Mailing Address: 909 Rose Avenue Suite 500 North Bethesda, MD 20852
Website: www.gokurbsy.com