Privacy policy
What we store, and what we never share.
Last updated September 23, 2026
We collect what it takes to match a licensed caregiver with a visit and pay them. That's your identity and credentials, your availability, your home address for mileage, the visits you take, and one location fix when you check in.
We never track where you go. We don't sell personal information. Patient information is handled under our HIPAA notice.
What we collect
| What | Why | From |
|---|---|---|
| Phone number | Sign-in by text code; visit alerts | Caregivers |
| Name, email, home address, credential class | Your profile; mileage is priced from your home | Caregivers |
| License numbers and registry results | Verifying you can do the work you accept | Caregivers, state registries |
| Background check consent and result | Required before working in homes (FCRA) | Caregivers, Checkr |
| Availability rules, vacation dates | Only offering you visits that fit | Caregivers |
| One location fix at check-in | So the agency can see you were at the address | Your phone, only when you tap check-in |
| Visits taken, pay, mileage, notes | Paying you; your tax documents; the agency's record of the visit | Generated by use |
| Bank or card details for payouts | Paying you | Held by Stripe, not Rayva |
| Agency identity, license, address, contact | Registering and verifying the agency | Agencies, NPI and state registries |
| Agency payment method | Weekly charges | Held by Stripe, not Rayva |
| Device and usage events | Keeping the app working; fixing crashes | Your device |
| Waitlist email and ZIP | Telling you when Rayva opens near you | getrayva.com |
Location, specifically
- Setting up your profile: once, to fill in your home address, if you choose to.
- Arriving at a visit: if you turn on the arrival reminder, your phone watches the address of a visit you've accepted from an hour before it starts until it ends, and asks whether to check in when you get there. This runs on your phone. Rayva doesn't receive it.
- Checking in: the one fix taken when you tap "I've arrived" is stored with that visit, with the distance from the visit address. That is the only location Rayva keeps.
- Nothing is recorded between visits. You can turn the reminder off in your phone's settings at any time; checking in stays a button.
Who we share with
- Agencies see the caregiver who accepted their visit: name, credential class, phone and email so they can reach you, check-in time and whether you were at the address, and your visit notes once the visit is complete.
- Caregivers see the agency's name and contact, the visit address, and the patient information the agency shared for that visit.
- Service providers that process data for us, under contract: Stripe (payments and payouts), Checkr (background checks), Auth0 (agency sign-in), Twilio (text messages), Resend (email), Klaviyo (waitlist email), Mapbox (addresses and distances), Expo (app updates and push notifications), Sentry (crash reports), Neon and Vercel (hosting), Google Analytics (website only).
- Registries we query to verify a license or an agency: state nursing and nurse-aide registries, Nursys, and the NPI registry.
- When the law requires it, or to protect a patient, caregiver or agency from harm.
We do not sell personal information and do not share it for advertising.
How long we keep it
- Your account for as long as it's open, and then what tax and payment law requires (generally seven years for financial records).
- Patient information on a caregiver's phone is removed seven days after the visit. On our servers it's kept for the agency's record and removed when the agency's account closes.
- Background check reports are kept as long as FCRA requires and no longer.
Your choices
- Edit your profile, availability and notification preferences in the app.
- Delete your account in the app (caregivers) or close it in Settings (agencies). We'll confirm what we keep and why.
- Ask us for a copy of your information, or to correct it, at hello@getrayva.com. We answer within 30 days.
- Text messages: reply STOP to stop. You'll still be able to sign in by email.
Security
Data is encrypted in transit and at rest. Patient information is additionally encrypted with keys separate from the database and unlocks on a caregiver's phone only with Face ID or a passcode. Access by Rayva staff is logged. If we learn of a breach affecting you, we'll tell you without unreasonable delay.
Children
Rayva is for adults. We don't knowingly collect information from anyone under 18.
Changes
We'll email account holders before a change that matters, with at least 14 days' notice.
See also: Terms of service · Privacy policy · HIPAA notice. Questions: hello@getrayva.com.