Skip to main content

Legal

Bingo! Privacy Policy

Effective October 1, 2026. Published September 23, 2026 so you can read it before it applies.

Questions or a privacy request? privacy@bingopetcare.app

Effective date: October 1, 2026 Published: September 23, 2026 Last updated: October 9, 2026

This policy was published on September 23, 2026 and takes effect on October 1, 2026. It is being made available in advance so that you can read it before it applies.

The short version

This box summarizes the policy. It does not replace it. If this box and the full policy differ, the full policy controls.

  • We collect what we need to arrange safe pet care. That includes account and contact details, Pet profiles and care instructions, service locations, payment records, and, for Bingo Sitters, identity, insurance, and payment-account connection information. Background checks for Bingo Sitters have not started yet (Section 2.4).
  • Bingo has two roles. For the Bingo marketplace and your own Bingo account, Bingo decides how your information is used. For records a Business Subscriber keeps about its own clients and staff, Bingo handles that information on the Business’s behalf and follows the Business’s instructions.
  • Precise location is recorded only during active care. We also keep an approximate town-level point to match nearby caregivers (Section 5.6). It is recorded between clock-in and clock-out, with a visible indicator. Walks (by any caregiver) are tracked continuously from clock-in to clock-out. All other visits save the location only at key moments: clock-in, clock-out, care buttons such as potty break, water, food, photo, or note, and when the caregiver opens Bingo. They are tracked continuously only if the pet care business has opted in to continuous tracking for its visits, the Provider (the business or the independent Bingo Sitter) has turned on the visit map for that type of service (for example grooming or drop-ins), or the caregiver turns on “Go live.” Location is required at clock-in and clock-out for walks and for independent Bingo Sitters’ own visits. Bingo compares the clock-in and clock-out locations. On a pet care business’s visits, large differences are flagged for review by that business and are not shown to the Client. On an independent Bingo Sitter’s own visits, location is shared only with the Client for that visit (and Family members the visit is shared with) and the Sitter, and the comparison is shown to the Client; Bingo staff do not view it, except when a Bingo administrator opens a specific visit for a safety incident, a dispute, or a legal request, which is logged. If the caregiver’s phone is locked or Bingo is closed during continuous tracking, location pauses, and the pause is shown. The Client for that visit sees the route or points, the care markers, and any pauses on a map; where the caregiver was not live-tracked, the path is marked as approximate. Location is never sold and never used for advertising.
  • Private details stay private until care is confirmed. Exact addresses, entry instructions, lockbox and alarm codes, contact details, and private medical information are shared only with people who need them to give care: staff of your own Business who have access to your account, your preferred caregivers, and caregivers assigned to a confirmed visit (entry details only on the visit day). Caregivers looking at a request before it is confirmed see only your town and an approximate map location. Every view of entry details through the visit screen is logged (Section 6.1).
  • We do not sell personal information for money. We use Google Analytics, and only after you accept it. We do not currently use advertising pixels or tags (such as Google Ads or Meta). If we add them, they will load only after you accept them, and some state laws may call that “selling” or “sharing.” You can opt out through “Your Privacy Choices,” and we honor Global Privacy Control (GPC) signals.
  • AI helps, but people decide. AI never makes final safety, deactivation, medical, or legal decisions on its own, Our AI features, including the Bingo Assistant, which uses only your own account records, run through Base44, the platform Bingo is built on, and through Anthropic, Google, and OpenAI (Section 4.3).
  • We may use some information to improve Bingo’s own AI. Bingo does not train its own AI models today. If we do, we may use limited Platform information to train and improve Bingo’s own models for matching, safety, fraud detection, and support. We never use a Business Subscriber’s records, home access codes, payment details, government ID numbers, background-check reports, or veterinary and medical details for that. See Section 4.3.
  • You have privacy rights wherever you live in the US. You can ask to know, access, correct, delete, or port your information, and opt out of certain uses. Use our form at https://bingopetcare.org/privacy-request or email privacy@bingopetcare.app.
  • Bingo is for adults. You must be at least 18 (or the age of majority where you live) to hold an account.

1. Who this policy covers and Bingo’s two roles

This Privacy Policy explains how Bingo! LLC (“Bingo,” “we,” “us,” or “our”) collects, uses, shares, and protects personal information through our websites at https://bingopetcare.org and https://bingopetcare.app, any Bingo mobile applications, and related services (together, the “Platform”).

It covers everyone who uses or interacts with the Platform, including Clients, Household Members, Bingo Sitters, Business Subscribers and their Business Personnel, Veterinarian Users, and visitors to our website. Capitalized terms not defined here have the meanings given in our Terms of Service once it is published; until then, they have their ordinary meaning as used on the Platform.

Bingo operates only in the United States. The Platform is intended for US residents and for Pet Care Services performed at US service locations.

1.1 Information about you: when Bingo is in charge

For most information, Bingo decides why and how the information is used. Privacy laws call this role a “controller” or a “business.” This includes:

  • your own Bingo account, profile, and login;
  • your Family profile, Pets, and service locations, as a Client;
  • Bingo marketplace Requests and Bookings, including the Bingo Route, payment records, reviews, and messages;
  • Bingo Sitter onboarding, verification, proof of insurance, background checks (once they begin), payment-account connection status, and subscription billing;
  • Business Subscribers’ own account and billing information (the information about the Business as Bingo’s customer);
  • website visits, device information, and analytics data (and advertising data, if we add advertising tools in the future);
  • contractor agreements between Businesses and Bingo Sitters signed on the Platform, concern reports between them, and our enforcement of those agreements (Section 2.6);
  • referral programs, plan discounts, and promo codes (Section 12.5);
  • conversations with the Booking Assistant (Section 4.3); and
  • communications with Bingo support.

This Privacy Policy governs all of that information.

1.2 Information about a Business’s customers and staff: when Bingo works for the Business

Business Subscribers use the Platform as their business software. When a Business Subscriber enters or manages records about its own clients, its own Business Personnel, and its own operations, the Business decides how that information is used. In that role, Bingo acts as the Business’s service provider (sometimes called a “processor”). Examples include:

  • a Business’s client list, client notes, pricing, and schedules;
  • appointments the Business books, assigns, and performs for its own clients;
  • a Business’s internal staff records, timekeeping, clock-in and clock-out records, and payroll calculations; and
  • private team conversations inside a Business’s workspace.

For this information:

  • The Business Subscriber’s own privacy notice applies, not this policy’s descriptions of Bingo’s purposes. If you are a client or employee of a Business that uses Bingo, please read that Business’s privacy notice and contact the Business directly with privacy requests about the Business’s records.
  • Bingo processes the information only to provide the Platform to the Business, under the Data Processing Addendum attached to our Business Subscription Agreement. We do not sell it, do not use it for our own advertising, do not use it to train Bingo’s AI models (Section 4.3.1), and do not combine it with other data except as that Addendum and the law allow.
  • We will forward requests. If you send Bingo a privacy request about records a Business controls, we will tell you that and, where appropriate, pass the request to the Business or help the Business respond.

Many people have both kinds of information. For example, a Client who is also a client of a Business Subscriber has a personal Bingo account (covered by this policy) and a client record inside that Business’s workspace (controlled by the Business). Clients own and control their individual Bingo accounts, Pets, Family profiles, and service locations. A Business Subscriber cannot delete, transfer, or take control of a Client’s personal Bingo account. If a Business leaves Bingo, its clients keep their Bingo accounts and may keep using Bingo, keep working with the Business outside Bingo, or both.

This policy works together with our Terms of Service, Independent Sitter Agreement, Business Subscription Agreement and Data Processing Addendum, and Emergency Veterinary Care Authorization. Some of these documents, including the Terms of Service, are not yet published. Until each one is, this Privacy Policy stands on its own, and we will link each document here when it is published.


2. Information we collect

2.1 What “personal information” means here

“Personal information” means information that identifies, relates to, or can reasonably be linked to a particular person or household. It does not include information that has been de-identified or aggregated so that it can no longer reasonably be linked to anyone.

Pet information. Information about an animal is not, on its own, personal information. But a Pet profile is linked to the people who own or care for that Pet, including their household, address, schedule, and payment account. So we treat Pet information that is linked to a person as personal information and protect it the same way.

2.2 Categories at a glance

The table below lists the categories we collect across the Platform. Categories marked Sensitive receive extra protection, described in Section 8. Not every category applies to every person; Section 2.3 explains what we collect by role.

CategoryExamplesSensitive?
IdentifiersName, username, account ID, date of birth (to confirm age), IP address, device and browser identifiersNo (see note on account credentials)
Contact informationEmail address, phone number, mailing addressNo
Addresses and service locationsHome and service addresses, gate and parking notes, boarding addressesNo, but exact addresses are shared only after secure acceptance
Access credentialsAccount username and password (stored as a secure hash); home access information such as gate and door codes, key location, lockbox and alarm codes, and entry instructions (protected by access controls, stored encrypted, and released only as described in Section 6.1)Sensitive
Payment informationCard type, last 4 digits, expiration date, billing ZIP code, processor tokens, transaction history. Full card and bank numbers are handled by the payment processor, not stored by BingoPayment records are protected as financial information
Tax informationCollected only where Bingo must report earnings. Bingo pays Providers for care from its own payment-processor account, so where the law requires Bingo to report a Provider’s earnings to the IRS, Bingo collects a W-9 through its tax partner, TaxBandits, before payouts and issues the required tax forms. Bingo does not store Social Security numbers. Business Subscribers collect their own workers’ tax information themselvesNot applicable
Background-check informationNot yet collected; background checks have not started (Section 2.4). When they start: screening status, completion date, eligibility result, and legally permitted report information covering criminal history, the sex-offender registry, identity verification, and, for anyone offering pet transportation, a driving record. Our background-check vendor, Checkr, collects full Social Security numbers; Bingo never receives themSensitive
Insurance documentsProof of coverage, certificates, policy numbers, coverage dates, add-onsNo, but access is restricted
Driver and vehicle documentsDriver’s license, auto insurance showing business use, vehicle registration, local permits (for transportation services)Sensitive (driver’s license is a government identifier)
Licenses and permitsBoarding and daycare licenses, zoning approvals, business licensesNo
Precise geolocationGPS route and location points during active services, clock-in and clock-out locationsSensitive
TimekeepingClock-in and clock-out times, service duration, arrival and departure timesNo, but linked to location data
Photos and videosProfile photos, Pet photos and videos, report-card media, care documentation (including home-interior photos, which stay private)No, except where they reveal sensitive details
MessagesIn-app messages between Users, team conversations, messages with Bingo supportSensitive (contents of communications between Users)
Reviews and private feedbackReviews (shown to signed-in Users with the reviewer’s name), professional responses, private factual feedback from ProvidersNo
Pet care informationSpecies, breed, age, weight, feeding, medications, medical conditions, allergies, behavior and bite history, handling instructions, veterinary contacts, emergency vet spending limitProtected as private care information
Monitoring disclosuresCameras, video doorbells, and audio devices at a service location, their general locations, and what they recordNo
Emergency and authorization recordsEmergency contacts, who is authorized to make medical decisions for a Pet, vet-care authorizations, contact attemptsNo, but access is restricted
Device and usage dataBrowser and device type, operating system, app version, pages and screens viewed, clicks, crash and error logs, referring pagesNo
Cookies and similar technologiesCookie IDs, Google Analytics data, Bingo’s page-view counts, and our app platform’s analytics session ID (all only after you accept analytics), and your consent choice (see Section 7)No
InferencesService preferences, likely matches, reliability and responsiveness indicators, fraud and safety risk signalsNo
Health information you choose to shareFor example, a disability you tell us about to request an accommodation, or a household allergy relevant to careSensitive
Information about minors under 16Name and contact details of a Household Member under 16 listed as a contactSensitive in California
Contractor agreement and signature recordsThe details each side fills in, typed electronic signatures, signing times, the Bingo Sitter’s IP address, a digital fingerprint of the signed text, the generated PDF, and concern reports between a Business and its contracted SitterNo, but access is restricted
AI assistant conversationsWhat you type to the Booking Assistant and its repliesNo, except where you include sensitive details
Referral and discount recordsReferral codes, who referred whom, referral credit balances, plan discounts and promo codes appliedNo

What we do not collect. We do not collect biometric identifiers (such as fingerprints, face geometry, or voiceprints), and we do not use facial recognition. Ordinary photos are not used to identify anyone biometrically.

2.3 What we collect by role

Clients and Families

  • Account and profile: name, email, phone, password, date of birth or age confirmation, profile photo.
  • Family profile: household name, Household Members you add, and which Family members may book or authorize care.
  • Service locations: each address where care happens, plus access notes, parking, and building details. You may have more than one. From the city, state, and ZIP code of a saved address, Bingo also keeps an approximate town-level point for nearby matching (Section 5.6).
  • Home access information: lockbox codes, alarm codes, key arrangements, and entry instructions. They are protected by access controls, stored encrypted, and shown only to the people described in Section 6.1.
  • Monitoring disclosures: the cameras, doorbells, and audio devices at each service location, as our Terms of Service require.
  • Pet profiles: everything described under “Pets” below.
  • Discount eligibility proof (optional): if you ask Bingo to verify a military, senior, or first-responder discount, the document you upload (such as a military ID, DD-214, state ID, or other official document), the discount type, and the result. The document is stored privately and seen only by you and authorized Bingo staff who review it (admins and moderators). We tell you the result, and the reason if we cannot verify it.
  • Booking information: services, dates, times, durations, add-ons, preferred and excluded Providers, meet-and-greet records, price approvals, cancellations, and rescheduling, plus your saved preference for how flexible you are when a caregiver’s standard visit length differs from what you picked.
  • Payment information: payment method details handled by the payment processor for your Booking, plus the limited records Bingo keeps (last 4 digits, card type, expiration, tokens, transactions, tips, refunds).
  • Emergency information: emergency contacts, emergency vet spending limits, and emergency veterinary authorizations. These are authorization records only. If a Pet needs emergency care, the clinic bills you directly. Bingo does not charge your payment method for veterinary costs and does not pay clinics, so we hold no record of what a clinic charged you.
  • Content and communications: messages, reviews, photos and documents you upload (including vaccination records our AI tools read to fill in your Pet’s profile), conversations with the Booking Assistant, and support requests.

Household Members and emergency contacts

A Client may list other people on a Family profile or as emergency contacts. For these people we collect only what the Client provides, usually name, relationship, phone, email, and whether that person may authorize care. A Household Member under 18 may be listed as a contact only, has no login, and must be added by a parent or legal guardian (see Section 14).

If you add someone else’s information, you confirm that you have their permission, or are otherwise legally allowed, to give it to us and that you have told them about this policy.

Pets

Pet profiles may include species, breed, age, sex, weight, photos, microchip number, feeding and walking instructions, medications, medical conditions, allergies, behavior, triggers, bite, attack, aggression, or escape history, handling instructions, veterinary clinic details, vaccination records, uploaded documents, care history, and report cards.

A Pet has one primary Family and may also be linked to other Families (a Shared Pet). Only the primary Family can change the Pet’s profile, apart from the caregiver updates described below. Other linked Families can see the shared profile and can add notes to the Bookings they make for the Pet, but they cannot change the profile itself. Each Family designates a main account holder who makes decisions for that Family. Each Family’s own household details, service locations, payment methods, and Bookings stay separate. Sharing a Pet profile does not merge Family accounts and does not, by itself, give another Family medical authority over the Pet.

Your preferred caregivers can keep your profiles up to date. If you choose an independent Bingo Sitter or a Business as a preferred caregiver, that Sitter, or that Business’s owners, managers, and team members the Business has given this permission, may update your Family profile and your Pets’ profiles. Other Business employees cannot. Some things only you can change: your service addresses and your emergency contacts. You can always make changes yourself, and we keep a record of changes made to your Family and Pet profiles. A caregiver’s access ends when they are no longer one of your preferred caregivers. Your Pet’s grooming and training profiles work the same way for groomers and trainers: they can be updated by a groomer (or trainer) on your preferred groomers (or trainers) list, by one who has an upcoming or in-progress grooming (or training) appointment with that Pet, and by the owners and managers of that groomer’s (or trainer’s) business. Other caregivers can see these profiles but cannot change them. When a grooming visit is completed, it is saved to your Pet’s grooming history with its date, groomer, services and add-ons, price, notes, and the report card’s before and after photos.

In an emergency, the chain of authority is unchanged. The Family that made the Booking, and that Family’s emergency contacts, come first. Only if they cannot be reached may a Provider turn to a linked Family member the owner expressly authorized to make medical decisions for that Pet. We keep a record of who changes Pet information and of who authorized emergency care.

Bingo Sitters

In addition to account information, we collect:

  • Identity and eligibility: legal name, date of birth, address, and identity verification information.
  • Background-check information (planned, not yet collected): today, independent Bingo Sitters must have current, admin-approved pet care insurance before they can accept requests. Bingo plans to add background checks before the public marketplace opens, run by Checkr, a consumer reporting agency, and we will update this policy before screening starts. When it starts, we will receive your authorization, screening status, completion date, eligibility result, and legally permitted report information. A check covers criminal history, the sex-offender registry, identity verification, and, if you offer pet transportation, a driving record. Checkr collects your full Social Security number directly; Bingo never receives or stores your full Social Security number. A background check does not show attentiveness, kindness, communication, experience, or pet-handling skill.
  • Household adults, if you board Pets in your home: once screening begins, every adult 18 or older living in your home will also need to pass a background check. Each of them gives their own separate written disclosure and authorization to Checkr under the federal Fair Credit Reporting Act. Bingo receives only the screening status and permitted results for those adults, never their Social Security numbers.
  • Insurance: proof of your required coverage, certificates, add-ons, and coverage dates.
  • Transportation documents (if you offer pet transportation): driver’s license, auto insurance, vehicle registration, and permits.
  • Home boarding and daycare documents (if you offer them): licenses, permits, zoning approvals, the approved boarding address, disclosures about people and animals living there, containment details, and your emergency and evacuation plan.
  • Payment account and subscription: Clients pay Bingo for the care they book, plus any tip, and the payment goes into Bingo's own payment-processor account. Bingo pays you for care you provide by ACH, usually weekly; a visit becomes payable to you once the client's payment clears. Before launch on January 4, 2027, only Sileo Pet Services clients and test accounts can book through Bingo!. Where the law requires Bingo to report your earnings, Bingo collects your W-9 through its tax partner, TaxBandits, before payouts and issues the required tax forms; Bingo does not store Social Security numbers. Bingo keeps the transaction records needed to show your Bookings, plus the billing records for your Bingo subscription and for the $1 card check we make (and refund) when you add a card for a plan. If you also work for a Business Subscriber, that Business collects its own tax paperwork from you; Bingo does not receive it.
  • Profile and business information: business name, service descriptions, rates, cancellation policy, service area, availability, qualifications, training completions, and photos. From your service area's city, state, and ZIP code, Bingo also keeps an approximate town-level point for nearby matching (Section 5.6).
  • Service records: Booking history, clock-in and clock-out records, GPS during active services (Section 5), report cards, and incident reports.
  • Performance and safety records: reviews, private feedback, response history, cancellations after acceptance, and account actions and appeals.

Business Personnel

Business Personnel are the owners, managers, employees, business-affiliated contractors, subcontractors, and trainees of a Business Subscriber. For Business Personnel we collect:

  • Account information (controlled by Bingo): name, email, phone, password, and the roles and permissions a person holds.
  • Workspace records (controlled by the Business; see Section 1.2): the information the Business enters or generates about you, such as your role, pay rates, schedules, appointment assignments, clock-in and clock-out records, GPS during active services, work-time records, payroll calculations, training assignments, documents the Business requires, and team messages.

Bingo does not run background checks on Business Personnel. Bingo plans to screen Bingo Sitters before marketplace work begins (Section 2.4), but screening Business Personnel is the Business Subscriber’s responsibility. Each Business is also responsible for giving its own workforce any privacy notice the law requires, and for collecting its own workers’ tax paperwork.

Veterinarian Users

Veterinarian features are not yet available to the public. When they are, for Veterinarian Users we collect account and contact information, practice or clinic details, license information we ask you to provide for verification, and records of which Pet information owners have shared with you. See Section 16.

Website and app visitors

When you visit our website or open our apps, even without an account, we collect the device and usage data needed to run the site and keep it secure. On our public website at bingopetcare.org, Cloudflare Web Analytics counts visits without cookies and without identifying you; in our apps, and only if you accept analytics cookies, Google Analytics collects usage data, as described in Section 7. If you contact us, join a waitlist, or submit a form, we collect what you provide. For the early-access waitlist that is your email, first name, what describes you (pet parent, pet-care business owner, or someone who would like to become a Bingo! sitter), your ZIP code, and how you found us (for example, a link we shared on Instagram, Facebook, or by email). Until Bingo! opens for bookings on January 4, 2027, independent sitters and pet-care businesses join this waitlist instead of applying, and if you create a Bingo! account before then (and you are not a client of our pilot business), we add your account email and first name to the waitlist so we can tell you when booking opens. If you send a Contact Us message, we keep your name, email, and message. We use this to answer you and to tell you when Bingo! is available near you. To join the waitlist through our form you tick a box asking us to email you launch updates and tips; you can unsubscribe at any time. If you were added to the waitlist only because you created an account, we send you launch updates only if you ask for them. Only Bingo! platform administrators can see this list, and if you later create a Bingo! account with the same email, we note that on your waitlist entry.

2.4 Who is screened, and who is not

Bingo Sitter screening has not started yet. The Bingo marketplace is not open at launch, and Bingo has not run any background checks. Today, independent Bingo Sitters must have current, admin-approved pet care insurance before they can accept requests. Bingo plans to add background checks before the public marketplace opens, run by Checkr, a consumer reporting agency, with the Sitter’s own written authorization under the federal Fair Credit Reporting Act. We plan to re-run checks every 12 months and, for a Sitter who boards Pets in their own home, to screen every adult 18 or older living there, each with their own separate authorization. Full Social Security numbers will go to Checkr directly and will never be received or stored by Bingo. Because this adds a new service provider and a new legal process, we will update this policy, and give the notice Section 18 requires, before any screening starts.

Business Personnel are not screened by Bingo. A Business Subscriber’s owners, managers, employees, contractors and trainees are screened by that Business, if at all. That is the Business’s responsibility, not ours, and we make no representation about it.

A screening is not a character assessment. A background check does not show attentiveness, kindness, communication, experience, or skill with animals, and it does not predict how someone will behave in your home. Meeting a Provider and satisfying yourself that they suit your household and your Pet remains worth doing.

2.5 Signing in with Google

You can create your Bingo account, and sign in, using Sign in with Google. Using it is optional; you can also use an email address and password.

What Google gives us. When you choose Sign in with Google, Google sends us only your basic profile information: your name, your email address, your profile picture if you have one, and the Google account identifier that tells us it is the same account next time you sign in.

What we never receive. We do not ask for, and Google does not give us, access to your Gmail, Google Contacts, Google Calendar, Google Drive, Google Photos, or any other Google service. Signing in with Google does not let us read, send, or change anything in your Google account. The only exception is the separate, optional Google Calendar Sync for caregivers, which you turn on yourself (Section 2.7).

What we do with it. We use this information only to create your Bingo account, identify you when you sign in, keep your account secure, and contact you about your account and your Bookings. It is treated exactly like the account information described elsewhere in this policy.

What we do not do with it. Information we receive from Google is never sold or shared, never used for advertising or to build advertising audiences, and never used to train Bingo’s AI models (Section 4.3.1). We do not transfer it to anyone other than the service providers in Section 6.3 who help us operate the Platform, or where Section 6.4 requires disclosure.

How long we keep it. For the life of your account, under the schedule in Section 9.

How to disconnect. You can revoke Bingo’s access at any time in your Google Account under Security → Your connections to third-party apps & services. Revoking access stops future Google sign-ins; it does not by itself delete your Bingo account, and you can still sign in with an email address and password. To delete your account, see Section 11.

2.6 Contractor agreements between Businesses and Bingo Sitters

A Business Subscriber and an independent Bingo Sitter can sign a contractor agreement on the Platform. For each agreement we store the details each side fills in, each side’s typed electronic signature and the time it was signed, the Bingo Sitter’s IP address at signing, a digital fingerprint of the signed text (so any later change can be detected), and a PDF copy. We email both sides at each step. Either side can use Report a concern about the other; Bingo moderators review those reports, and moderators’ internal notes are not shown to either side.

Non-solicitation. Where an agreement includes a non-solicitation term, Bingo uses visit history to enforce it. For Clients the Sitter cared for through that Business in the past 12 months, the Sitter is kept below the Business in those Clients’ preferred-caregiver lists, and those Clients cannot book the Sitter directly during the agreement and the period after it that the Business chose.

2.7 Google Calendar Sync (optional, for caregivers)

Caregivers can choose to connect their own Google Calendar in settings. When connected, Bingo adds the caregiver’s upcoming confirmed appointments to that calendar, including the service, the Client’s name, the Pets’ names, and the town (never the full street address or entry details). Once copied, those calendar events are held by Google under the caregiver’s Google account and Google’s privacy policy, and Bingo cannot delete them. Caregivers can disconnect at any time in settings or in their Google Account. Clients: if your caregiver uses this feature, your name, Pets’ names, and town will appear in that caregiver’s Google Calendar.


3. Where we get information

We collect personal information from these sources:

  • You. When you create an account, fill in a profile, book or accept care, upload documents or photos, send messages, leave reviews, pay, contact support, or respond to surveys.
  • Other Users. For example:
    • a Client adds a Household Member or an emergency contact;
    • a Client or Family links a Shared Pet;
    • a Provider submits a report card, photos, clock-in records, or private feedback about a Booking;
    • a Client leaves a review of a Provider;
    • a Business Subscriber adds its clients, Business Personnel, and schedules to its workspace; and
    • a Business and a Bingo Sitter sign a contractor agreement or file a concern report (Section 2.6); and
    • once veterinarian features launch, a Veterinarian User receives records an owner chooses to share.
  • Sign in with Google. If you choose to sign in with Google, Google sends us your name, email address, profile picture, and Google account identifier, and nothing else (Section 2.5).
  • Vendors and partners. For example:
    • once screening begins, our background-check vendor (a consumer reporting agency) will send us screening status and permitted results;
    • insurers may confirm a Bingo Sitter’s coverage status when we verify a certificate of insurance;
    • payment processors send transaction, refund, chargeback, and fraud signals, and the status of a Provider’s connected payment account;
    • our email service sends delivery status; and
    • Google Analytics, if you accept analytics cookies, provides aggregated measurement data.
  • Automatic collection. Through your device, browser, and app when you use the Platform, including device and usage data, cookies and similar technologies, and, only during active services, GPS location (Section 5).
  • Public sources. Where relevant to safety or verification, such as public license or permit lookups for a Sitter’s boarding license.

4. How we use information

4.1 Our purposes

We use personal information to:

  1. Provide the Platform. Create and manage accounts, Family profiles, Pet profiles, and service locations; let people with more than one role reach the right dashboards.
  2. Arrange and deliver Pet Care Services. Handle Requests and Bookings; run the Bingo Route; share care instructions with the assigned Appointment Team; release entry details to the people described in Section 6.1; record clock-in, clock-out, and GPS during active services; deliver report cards; suggest a meet-and-greet when one may help; and show Clients who do not yet have caregivers a typical local price range for Bingo’s standard services (Section 4.5).
  3. Support payments. Let Clients pay Bingo for the care they book, plus any tip, into Bingo’s own payment-processor account, including charges, retries, backup payment methods, tips, refunds, and chargebacks; pay Providers for care they provide by ACH, usually weekly, with a visit becoming payable once the client’s payment clears; and bill Bingo Sitters and Business Subscribers for their subscriptions, including keeping the payment method added when a plan starts so the subscription can be charged when a monthly plan's free trial ends or, for a yearly plan, right away (we make a $1 check on that card when it is added and refund it). Before launch on January 4, 2027, only Sileo Pet Services clients and test accounts can book through Bingo!.
  4. Meet tax and accounting obligations. Keep financial records of Bingo’s own sales, such as subscriptions and training, and of the client-care payments Bingo processes and the ACH payouts Bingo pays Providers. Where the law requires Bingo to report a Provider’s earnings, Bingo collects a W-9 through its tax partner, TaxBandits, before payouts and issues the required tax forms. Bingo does not store Social Security numbers. Business Subscribers handle their own workers’ tax paperwork.
  5. Verify and screen. Confirm identity, age, insurance, licenses, permits, and vehicle documents; once screening begins, run background checks on Bingo Sitters with their authorization and follow FCRA procedures (Section 2.4). We do not screen Business Personnel.
  6. Keep people and animals safe. Handle emergencies, contact emergency contacts and veterinarians, record emergency veterinary authorizations, investigate incidents, enforce our safety rules, and preserve evidence. Bingo may review messages for safety and to enforce the Terms.
  7. Communicate with you. Send confirmations, updates, reminders, arrival and completion notices, payment receipts, security alerts, and support replies. With your separate consent, send marketing.
  8. Provide support. Answer questions and resolve disputes. Support runs by email and in-app messaging. Bingo does not offer telephone support and does not record calls.
  9. Moderate content. Publish and moderate reviews and responses, handle reports, and support appeals.
  10. Prevent fraud and misuse. Detect fake accounts, payment fraud, off-platform circumvention of Bookings, and security threats, and enforce the non-solicitation terms of contractor agreements (Section 2.6).
  11. Improve and fix the Platform. Monitor performance, diagnose errors (including through our App Health system), test features, and develop new ones, including by training and improving Bingo’s own AI models within the limits in Section 4.3.
  12. Measure and advertise. Understand how people find and use Bingo and measure our advertising, as described in Section 7.
  13. Comply with law and enforce our terms. Respond to lawful requests, meet legal obligations, and enforce our Terms of Service and other agreements.
  14. Create aggregated and de-identified data (Section 4.4).

We collect and use personal information only as reasonably necessary and proportionate to these purposes, and we collect sensitive information only where it is needed for the service you request or where the law requires it.

4.2 The Bingo Route and matching

The Bingo Route is Bingo’s feature that suggests and routes Requests to eligible Providers. To do that, it uses information such as:

  • the Client’s preferred and excluded Providers, and past Bookings with a Provider;
  • the service, dates, times, and general service area;
  • Pet species, number of Pets, and relevant behavioral or medical care needs;
  • meet-and-greet requirements;
  • a Provider’s service area, travel distance, stated availability, existing Bookings, qualifications, rates, rating, insurance and document status, and response history; and
  • whether marketplace routing is allowed for the Request (the public marketplace is not open; nearby matching is used instead); and
  • for a Bingo Sitter under a contractor agreement with a Business, whether that agreement’s non-solicitation terms apply to the Client (Section 2.6).

The Bingo Route affects which Providers see which Requests and in what order. Declining a Request or letting it expire without a response never counts as a reliability strike. Only no-shows and late cancellations do.

How a Bingo Route request is offered. (1) If you own a Business account with active staff, your request goes to your own Business first. (2) Next, it goes to your preferred caregivers, #1 to #5, one at a time in your ranked order. Each has a set time to respond: 24 hours (48 hours for a Business), or 2 hours if the visit is within 48 hours. (3) If none accept, Bingo offers it, one at a time, to caregivers within about 15 miles of the care address who offer that Bingo service, nearest first, then by rating. We call this nearby matching. (4) If no one accepts, we cancel the request, tell you, and you are not charged. If you have no preferred caregivers yet, your request starts at nearby matching. Booking a specific caregiver directly does not use these steps.

Bingo’s standard services. Bingo sets a list of standard services. Caregivers choose which ones they offer, at their own prices. Services a caregiver creates themselves appear only when you book that caregiver directly, not through the Bingo Route.

Price at acceptance. When a caregiver accepts through the Bingo Route, their own price for that service applies. If that price wasn’t shown when you booked, you’ll be asked to approve it before the booking is confirmed.

Notifications. Caregivers offered a request are emailed. If no one accepts, we email you, and Bingo’s managers and administrators so they can help.

Your right to human review. If you are a Client or Provider and a Bingo Route decision affects your booking access, matching, eligibility, or assignment, you may ask for a person to review it. To ask, use the form at https://bingopetcare.org/privacy-request or email privacy@bingopetcare.app. The reviewer:

  • understands how the Bingo Route works and has authority to uphold or change the result;
  • will explain the main reasons specific to you; and
  • will not reveal source code, algorithms, scoring weights, internal thresholds, security or anti-fraud rules, or other Users’ information.

See Section 12.8 for California’s notice about automated decision-making technology.

4.3 How we use artificial intelligence

We use AI-assisted tools for:

  • App Health monitoring, technical diagnostics, and repair workflows;
  • fraud and safety detection;
  • matching and Bingo Route recommendations; and
  • helping our team work more efficiently, such as by summarizing support requests;
  • the Booking Assistant, an AI chat assistant in the booking flow. It works within your own account: it can read the records you can see, such as your Client profile, Pets, requests, appointments, invoices, and Business and caregiver profile information, to help you book. That can include your service address, entry details, and Pet care and medical notes. It cannot see other Clients’ records. It can add or update your Pet profiles and send a care request for you, but it cannot confirm appointments or change invoices, Business records, or caregiver profiles;
  • the Bingo Assistant, an AI chat assistant for Clients, Business Subscribers and their team, Bingo Sitters, and Bingo staff. Each person’s assistant works only within their own account. It can read the records you can see in the app, such as your appointments, booking requests, invoices and, for Clients, your Pets’ care details (including feeding, medication, allergy, and other medical notes). It never sees other accounts’ records. It answers questions and explains how to do things; any action it takes for you follows the approval settings you chose (Automatic or Ask me). If you choose “Use my location,” it uses your device’s approximate location (rounded to about 100 meters) to give you the local weather. Your location is not saved;
  • reading documents you upload, such as vaccination records, to fill in Pet and credential details for you to review; and
  • turning Pet journal text into spoken audio.
  • We do not currently use AI for symptom triage or to review invoices.

We set these limits:

  • AI alone never makes final safety, deactivation, medical, or legal decisions. A person with authority reviews those decisions. AI-suggested repairs to the Platform are reviewed before they are applied.
  • Who provides our AI. Document reading, journal audio, and the Booking Assistant run through Base44, the platform Bingo is built on, under Base44’s terms with the AI model providers it uses. The Bingo Assistant sends each question, with the account records needed to answer it, directly to one of these AI providers, picking the one best suited to the question: Anthropic (Claude), Google (Gemini), and OpenAI (ChatGPT). We use their business (API) services, under terms that do not allow them to use your information to train their models and that limit how long they keep it. We keep your Bingo Assistant conversations in your account so you can see them again; only you can read them in the app, and you can delete any conversation. We keep a record of which lookups and actions the assistant made for you (without the message text) for security and support.
  • What AI tools see. Document tools receive only the file you upload, and journal audio receives only the journal text. The Booking Assistant and the Bingo Assistant can see what you can see in your own account, as described above, and nothing from other accounts. Text in your records, such as a note someone wrote, is treated only as information and never as an instruction to the assistant.
  • Weather. To show forecasts for your visits and send weather alerts the evening before, we send the visit’s map coordinates (never names or addresses) to Open-Meteo and, as a backup, the US National Weather Service. You can turn off weather alerts in your notification settings.
  • We keep logs and human oversight of AI-assisted processes.

4.3.1 Training and improving Bingo’s own AI models

Bingo does not train its own AI models today. In the future, we may use personal information from the Platform to train and improve Bingo’s own AI models, including large language models. We do this only to make the Platform work better and more safely. Specifically, we may use it to:

  • improve matching and Bingo Route recommendations;
  • improve fraud, abuse, and safety detection;
  • improve support tools, such as summarizing and routing support requests;
  • improve App Health diagnostics and error detection; and
  • test and improve the quality and accuracy of features that use AI.

What we never use to train our models. We exclude:

  • Anything a Business Subscriber controls. Bingo holds a Business Subscriber’s client, staff, scheduling, and workspace records as that Business’s service provider, and the Data Processing Addendum does not permit Bingo to use those records for its own purposes, including training. We use business-controlled data only to provide the Platform to that Business.
  • Home access information, such as lockbox codes, alarm codes, and entry instructions.
  • Payment details, including card and bank account information and processor tokens.
  • Government identifiers, such as Social Security numbers, taxpayer identification numbers, and driver’s license numbers.
  • Background-check reports and the information in them.
  • Veterinary and medical details, including Pet medical records, medications, and health information you volunteer about yourself.

How we do it. Before information is used for training, we remove direct identifiers where practical and use the smallest amount of information that serves the purpose. We do not train models to identify individual people, and we do not design our models to reproduce your content to other Users. Training never changes the rule above: AI alone never makes a final safety, deactivation, medical, or legal decision.

Connecticut residents. Connecticut law requires us to tell you when personal data is used to train large language models. Bingo may use personal data, within the limits described in this Section 4.3.1, to train and improve large language models that Bingo develops or fine-tunes for the purposes listed above.

Your choices. You may ask us not to use your personal information to train Bingo’s models. Use the form at https://bingopetcare.org/privacy-request or email privacy@bingopetcare.app. Opting out does not affect your account, your bookings, or your access to the Platform, and we will still use AI to operate the Platform for you as described in the rest of this Section 4.3.

4.4 Aggregated and de-identified data

We may create aggregated or de-identified information for analytics, benchmarking, product development, safety research, capacity planning, and improving the Platform. We will not use it to identify, or in a way that reasonably permits identification of, any business, Client, Provider, employee, household, Pet owner, or service location, including through small samples. We maintain de-identified data in de-identified form, do not attempt to re-identify it, and require anyone we share it with to do the same.

4.5 Local price ranges

If you are a Client who does not yet have caregivers, we may show Bingo’s standard services with a typical local price range. To do that, we use your saved location, or the ZIP code, city, and state on your profile (never your street address), to find active Businesses and Bingo Sitters within about 15 miles for local price ranges and nearby matching (Section 5.6), and we show only the combined range and typical price. We never show which caregiver charges what, and if fewer than three caregivers are nearby we show no range.


5. Location and GPS

GPS location is sensitive, so we handle it with specific rules.

5.1 When GPS runs

  • Only during an active service. Location is recorded only between the moment a Provider clocks in (or starts a GPS-supported service) and the moment they clock out (or complete the service).
  • Walks: always continuous. For every walk (including pack walks), by any Provider (an employee, a contractor working for a Business, or an independent Bingo Sitter), Bingo records the Provider’s location continuously (about every 15 to 30 seconds) from clock-in to clock-out. The Provider cannot turn this off during the walk, and must share their location to clock in and at clock-out.
  • All other visits: key moments. For every visit that is not a walk, including an independent Bingo Sitter’s own visits (not a visit sent to them by a Business) and every Business’s visits, Bingo records the Provider’s location only at key moments: at clock-in, at clock-out, each time the Provider taps a care button (pee, poop, water, food, photo, or note), and when the Provider opens or returns to the Bingo app (at most about once a minute). Bingo does not track the Provider in between and does not keep the Provider’s screen on, unless the Provider chooses to turn on “Go live,” which records their location continuously (and keeps the screen on) until they turn it off or clock out.
  • A Business may opt in to continuous tracking. A Business may choose continuous tracking from clock-in to clock-out for all of its visits. It is off unless the Business turns it on. When it is on, the Business’s staff are tracked continuously on every visit of that Business, their screen stays on during the visit, and they must share their location to clock in and at clock-out. A Bingo Sitter doing a visit for a Business follows that Business’s choice.
  • Location at clock-in and clock-out. On walks, on independent Bingo Sitters’ own visits, and on visits of a Business that has opted in to continuous tracking, the Provider must share their location to clock in, and Bingo asks for it again at clock-out; if it cannot be found at clock-out, the Provider can still end the visit, and Bingo records that no location was available. On other Business visits, Bingo asks for the location at clock-in and clock-out but does not block the visit without it; if it is missing, Bingo records that no location was available.
  • Clock-in and clock-out comparison. At clock-out, Bingo compares the Provider’s clock-out location with their clock-in location. If they are far apart (more than 200 meters, or more than the two locations’ combined GPS accuracy, whichever is larger), Bingo records the difference; who sees it depends on whose visit it is (below). If a location is missing, or either location is too imprecise (accuracy worse than 500 meters), Bingo marks the visit as “location couldn’t be verified” instead. Bingo also records how far each location was from the visit’s saved service location. Pack walks are not flagged, because pickup and drop-off can legitimately be in different places; Bingo records the distance only. On a Business’s visits, a large difference is flagged for review; flags are shown, and new ones are emailed, only to the owner and managers of that Business, and the Client does not see them. A flag is a prompt for a person to review, not a finding of wrongdoing: the reviewer marks it reviewed with a note, and Bingo takes no automatic action against the Provider because of it. On an independent Bingo Sitter’s own visits, the result is not a flag and is not reviewed by Bingo: it is shown only to the Client for that visit (and Family members the visit is shared with) and to the Sitter, as a factual note on the visit map and report card (for example, “Clock-out was 1.2 mi from where the visit started” or “Location couldn’t be verified at clock-out”) with the clock-in and clock-out points marked, and the Client is emailed a short notice when the two locations are far apart (not when a location simply couldn’t be verified). Bingo staff do not see it, except as described in Section 5.3.
  • Pauses. Bingo runs in the phone’s web browser, so it can record location only while Bingo is open on the Provider’s screen. If the phone is locked, Bingo is closed, or location is turned off, recording pauses, and it resumes automatically when the Provider returns to Bingo. Bingo records each pause (for example, “Location paused 2:14 to 2:31 PM”) and shows it on the map; a pause is never drawn as if it had been tracked. On walks and other visits that require it (see below), the Provider must allow location to clock in.
  • A visible indicator shows the Provider throughout a clocked-in visit, says when their location is being shared continuously, and reminds them that locking the phone pauses it.
  • No tracking otherwise. We do not track a Provider’s location because they are logged in, available, scheduled, or between Bookings.
  • Consent. Providers give permission for location tracking through their device’s location settings. A Provider can turn off device location, but walks, independent Bingo Sitters’ own visits, and visits of Businesses that have opted in to continuous tracking cannot be started without it.

5.2 How it works for each service

ServiceWhat we recordWhat the Client sees
WalksThe continuous route from clock-in to clock-out, the start and end points and times, the care markers the Provider adds (Section 5.3), and any pauses (Section 5.1)The route on a map, live while the walk is in progress, the care markers, and any pauses, shown with their times
Pet transportationPickup and drop-off points and times; the continuous route if the Business has opted in to continuous tracking or while the Provider has “Go live” on; otherwise the key-moment points (Section 5.1); and any pausesThose points and times with a connecting path (marked approximate unless live-tracked), and any pauses
Drop-in visitsArrival and departure times and locations, a check that the Provider was at the service location, and either the continuous location for the whole visit (if the Business has opted in to continuous tracking, or while the Provider has “Go live” on) or the key-moment points (clock-in, clock-out, care markers, and when the Provider opens Bingo during the visit); a comparison of the clock-in and clock-out locations (Section 5.1); and any pausesArrival, departure, location verification, and the location on a map: a live-tracked path with any pauses, or the key-moment points with an approximate connecting path (Section 5.3)
Overnight sittingArrival and departure, and either the continuous location from clock-in to clock-out (if the Business has opted in to continuous tracking, or while the Provider has “Go live” on) or the key-moment points (clock-in, clock-out, care markers, and when the Provider opens Bingo during the stay); a comparison of the clock-in and clock-out locations (Section 5.1); and any pausesArrival and departure and the location on a map: a live-tracked path with any pauses, or the key-moment points with an approximate connecting path (Section 5.3)
Boarding and daycareDrop-off and pick-up times and locations. If the Provider clocks in and out of the visit in Bingo, location is recorded between clock-in and clock-out under the same rules as drop-in visitsDrop-off and pick-up records, and any location recorded between clock-in and clock-out, as for drop-in visits

Mileage billing. Some services charge for miles driven beyond what the service includes (for example, pet transportation). For those visits we measure the distance from the Provider’s location points recorded during that visit. The Business owner, a manager, or the independent Bingo Sitter reviews the miles and can change or waive them before they are added to your invoice, and the invoice shows the miles and the rate. If a Provider drives your Pet to an emergency vet under your Emergency Veterinary Care Authorization, the Provider logs those miles and they are billed at the IRS standard mileage rate. We use this distance only for these charges.

5.3 Who sees location data

  • The Client for that Booking, and Family members the Booking is shared with, for that Booking only. They see, on a map, the location points recorded during the visit (Section 5.1) with a path connecting them in time order, together with the care markers the Provider adds where they happen: when the Pet peed, pooped, drank water, or ate, where a photo was taken, and short notes. Where the Provider’s location was shared continuously, the map shows the recorded route and marks every pause with its times (for example, “Location paused 2:14 to 2:31 PM”), so the Client can see when the Provider was not visible. Where the Provider was not live-tracked, the path between two points is an approximation (a straight line, or a likely walking route along streets and paths) and is drawn and labelled differently from a live-tracked route, so it should not be read as the exact way the Provider went. While the visit is in progress, the map updates about every 15 seconds and shows when it was last updated; while the Provider’s location is being shared continuously (Section 5.1), it shows their route live. After the visit, the same map and markers appear with the Booking’s report card. The path is shown in full, including near the Client’s own service location. For each caregiver the map shows only the name already shown on the Booking, never their phone number, email, or account details. Location can be recorded only while Bingo is open on the Provider’s screen, so a live-tracked route may have pauses (for example, while the screen is locked); each pause is shown with its times, and the map never presents a pause as a tracked route. For an independent Bingo Sitter’s own visit, the Client (and the Sitter) also see the clock-in and clock-out comparison described in Section 5.1.

  • The other Providers on the same Booking (for example, an additional caregiver or a trainee on a team visit), for that Booking only.

  • Authorized Bingo safety and support personnel, for a Business’s visits, for safety, incident, dispute, and support purposes. For an independent Bingo Sitter’s own visits, Bingo staff do not view location data (administrators, Bingo Managers, and moderators do not see the route, points, care-marker locations, pauses, or the clock-in and clock-out comparison). The only exception: a Bingo administrator may open the location data of one specific visit, for up to 24 hours, when it is needed for a safety incident, a dispute between the Client and the Sitter, or a legal request. The administrator must record the reason, and each access is written to our audit log and reported to our privacy team.

  • For Bookings performed by a Business Subscriber, the Business’s authorized personnel may see location and timekeeping records for that Business’s own staff, on that Business’s own Bookings, as the Business’s workspace permissions allow. This includes the visit map, with its route or points, care markers, and any pauses, and the clock-in and clock-out location comparison and any flag for those visits (Section 5.1). A Business never sees location data for another Business’s staff, for Bingo Sitters it has not booked, or for Bookings it did not arrange.

  • Insurers, investigators, and authorities only as described in Section 6.4 (for example, for an insurance claim, a legal requirement, or an emergency).

Other Clients, other Providers, and marketplace browsers never see a Provider’s live location.

5.4 What we never do with location data

We never sell precise location data and never use it for advertising. It is never sent to advertising platforms or used to build advertising audiences.

5.5 How long we keep it

We have decided to keep location data in two tiers, as shown below. Detailed route data is deleted automatically every day once it is more than 90 days old, unless an incident or legal hold applies. You can also ask us to delete location data sooner (Section 11). We keep location data in two tiers, because the detailed route and the fact that a visit happened serve different purposes and do not need the same lifespan.

What it isHow long we keep itWhy
Detailed route data: the location points recorded while a Provider is clocked in to a visit other than care markers and arrival and departure points (the check-ins taken when the Provider opens Bingo, the continuous route recorded on continuously tracked visits or while “Go live” is on, and the records of pauses), and the path Bingo draws from them90 days after the serviceLong enough to show the Client the route, answer questions about the visit, and resolve a service dispute while it is fresh
Visit-verification records: arrival and departure points, the location check confirming the Provider was at the service location, the comparison of the clock-in and clock-out locations with any flag and review note, and clock-in and clock-out timestamps7 years after the serviceNeeded for insurance claims, payment and payroll disputes, incident investigations, and tax and accounting records

After 90 days, the detailed breadcrumbs are deleted or permanently de-identified, and the verification record remains. This keeps the proof that care was delivered without keeping seven years of precise movement tracks.

Care markers. The place and time of each care marker (pee, poop, water, food, photo, and note) are part of the Booking’s care record rather than the detailed route. The 90-day route deletion does not remove them; they are kept with the report card and other care documentation for the period in Section 9.

Holds override both tiers. When an incident, complaint, insurance claim, payment dispute, legal proceeding, safety investigation, or preservation request involves a Booking, the related location data (including the detailed route) is placed on hold before the 90 days run out, and kept until the matter and any retention obligations end.

5.6 Approximate area location

For Clients, independent Bingo Sitters and Businesses, Bingo keeps an approximate map point for the town or ZIP code, not the street address. We get it by sending only the city, state and ZIP code (taken from the address you saved) to OpenStreetMap. We use it to find caregivers within about 15 miles for nearby matching and to show local price ranges. We keep it while your account is open and delete it with your account.


6. How we share information

We share personal information only as described here.

6.1 With other Users, only as needed

  • Before a Request is accepted (nearby matching or marketplace). Providers who might take the work see only what they need to decide: the service type, dates and times, town and state and a map pin placed about a mile from the real location (not the exact address), approximate distance, Pet species, number of Pets, and general care or behavior flags. They do not see the exact address, map coordinates, entry instructions, lockbox or alarm codes, contact details, or private medical details.
  • After a visit is confirmed. Caregivers assigned to the confirmed visit, and the Client’s preferred caregivers, receive the information needed to provide safe care: the exact service address, Pet care and medical instructions, veterinary details, and monitoring disclosures.
  • Entry details (gate and door codes, key location, and the emergency contact’s phone number) are available only to: (a) the Client and family members linked to the Client’s account; (b) the owner and managers of the Client’s own Business, and Bingo administrators; (c) the Client’s preferred caregivers who are connected to the visit, at any time; and (d) other caregivers assigned to the visit, only once it is confirmed or in progress and only on the visit day(s). Caregivers see entry details through a secure visit screen that logs every view. Caregivers browsing or considering a request never see them. We do not put entry details in marketplace previews, emails, or report cards. Trainees and co-sitters see them only if they are assigned to the visit. Access and pickup instructions, and entry details saved for additional service locations, follow the same rules; other staff of the Client’s Business do not see them in the Client’s profile. Gate, door, lockbox and alarm codes, key locations and the access instructions for additional locations are stored encrypted. The Client, and the owner and managers of the Client’s Business, can see a list of everyone who viewed the entry details and when.
  • Emergency contact phone numbers follow the same rules as entry details, above.
  • Contact details. Clients and Providers communicate through in-app messaging, and Bingo sends email notifications. When you receive a new in-app message, Bingo may email you a notice that says who wrote and links to the app; it never includes the other person’s email address or phone number or the message itself, and you can turn these emails off in Settings. Bingo does not offer in-app or masked calling. We do not show a person’s real phone number or email address to other Users just because a Booking exists, except that a Client’s preferred caregivers, and staff of the Client’s own Business who have access to that Client, can see the Client’s contact details. We may disclose contact information when the law requires it or when expressly authorized in a documented emergency.
  • Caregiver profiles and reviews. Clients see limited caregiver profiles. For a Business’s staff: first name (managers: first name and last initial), photo, time with the company, and skills. For a Business owner: full name only when that Business is one of the Client’s preferred caregivers. For an independent Bingo Sitter: first name and last initial, business affiliation, and skills. Business profiles show the business name and its services. Reviews and Provider responses are visible to signed-in Users, together with the reviewer’s name. Private feedback from Providers is visible only to authorized Bingo personnel and Providers with a legitimate need.
  • Profile pages. Each Business and independent Bingo Sitter has a profile page that signed-in Users can open from search or from their preferred caregivers. A Business or Bingo Sitter may also turn on a public link (bingopetcare.app/book/…) so that anyone, including people without a Bingo account, can see the page. A profile page shows: the business name (for a Bingo Sitter, first name and last initial); the logo or profile photo; the photos and “about” text the Provider adds; city and state (a Business with a physical location may choose to show its street address); a Business’s phone number and website; social media links the Provider adds; skills and experience; whether approved insurance is on file; services and starting prices; discounts; the cancellation policy; which days are generally open or closed; the average star rating and number of reviews; and, for a Business, its team and the Bingo Sitters contracted with it, shown with the limited caregiver details described in the previous bullet (a viewer who does not have that Business as a preferred caregiver sees only staff first initials, no staff photos, and no owner name). Review text and reviewer names remain visible only to signed-in Users. Profile pages never show a Bingo Sitter’s phone number, email, or home or boarding address, any staff member’s contact details, or any Client information. A Provider can turn the public link off at any time.
  • Shared Pets. Linked Families see the shared Pet profile but not each other’s household details, locations, payment methods, or Bookings, unless a Family chooses to share them.
  • Veterinarian Users see only what an owner chooses to share (Section 16).
  • Provider social posts. A Provider may post photos of a Client’s Pet on social media only if the Client gives separate, optional permission, which the Client can limit or withdraw.

6.2 With Business Subscribers

  • If you are a client of a Business Subscriber, the Business sees the information in its workspace, including Bookings with that Business and information you share with it.
  • If a Business offers to send your Request to the Bingo marketplace, it does so only with your approval.
  • A Business does not get access to your Bookings with other Businesses or Bingo Sitters, your payment methods, your home access information outside its own Bookings, or other private parts of your personal Bingo account.
  • If you are Business Personnel, your Business sees the workspace records described in Section 2.3.
  • When a Business leaves Bingo, it may export its business-controlled records. Access credentials, payment details, and records unrelated to the Business are never included in that export.

6.3 With service providers

We use vendors to operate the Platform. They may use personal information only to provide services to Bingo, under written contracts that limit their use, require appropriate security, and prohibit selling the information. A current list of our vendors is at https://bingopetcare.org/subprocessors. That page names at least:

  • Cloudflare: hosting and delivering our public website at bingopetcare.org; the database for forms sent on that website (waitlist sign-ups, Contact Us messages, support tickets, and privacy requests); bot protection for those forms (Cloudflare Turnstile); forwarding notification emails about those forms to our own team; cookieless website analytics (Cloudflare Web Analytics); and network security and DNS for bingopetcare.org.
  • Base44: the platform our application runs on, including hosting, databases, storage, and backups. Base44 uses its own vendors, and the subprocessors page links to Base44’s published subprocessor directory rather than copying it, so you always see Base44’s current list.
  • PayCosmos (and its gateway, linked2pay): processing Clients’ payments for care, which go into Bingo’s own PayCosmos account, and processing payments made to Bingo, such as subscriptions and the $1 card check made (and refunded) when a card is added for a plan. Bingo pays Providers for care by ACH, usually weekly; a visit becomes payable once the client’s payment clears. Before launch on January 4, 2027, only Sileo Pet Services clients and test accounts can book through Bingo!. Full card numbers are entered with PayCosmos and never stored by Bingo.
  • Our payment processor’s ACH payout partner: sending ACH payouts to Providers. Providers give their bank details through the bank’s or payment processor’s secure portal; Bingo does not store bank account numbers.
  • TaxBandits: collecting W-9 forms and taxpayer information from Providers before payouts, and filing Forms 1099. Bingo does not store Social Security numbers.
  • Wix Payments (through Base44’s checkout): processing purchases of training resources. Card details are entered on that checkout page and are not stored by Bingo.
  • Checkr: planned for background checks on Bingo Sitters; not yet active (Section 2.4).
  • Base44’s email service: sending and delivering email.
  • Google: Sign in with Google (authentication, Section 2.5), plus Google Analytics (only after you accept it) and optional Google Calendar Sync for caregivers (Section 2.7).
  • OpenRouteService (operated by HeiGIT gGmbH in Germany; if enabled): drawing a likely walking path between a visit’s location points on the visit map. Bingo’s server sends OpenRouteService only the map coordinates of those points, never names, account details, addresses, or which visit or Booking they belong to.
  • Anthropic, Google, and OpenAI: answering Bingo Assistant questions, with the account records needed for the answer (Section 4.3).
  • Open-Meteo and the US National Weather Service: weather forecasts for visit locations, from map coordinates only.

We update that page when we add or change a vendor that handles personal information.

Mapping services. Some mapping features use public OpenStreetMap services, which are not under contract with Bingo and follow the OpenStreetMap Foundation’s own privacy policy. When you type an address, the text you type is sent to OpenStreetMap’s address service to suggest matches; when a map is shown, your browser loads map images from OpenStreetMap or from CARTO (a map-image service built on OpenStreetMap data), which sees your IP address but not which visit you are looking at (the visit map does not send any address to them); and some features (such as finding nearby animal hospitals, local price ranges, and nearby matching) send only a city, state, or ZIP code.

Vendor categoryWhat they doExamples of information involved
Payment processingCard and ACH processing (PayCosmos) for Clients’ care payments, which go into Bingo’s own account, and for payments to Bingo, such as subscriptions; Wix Payments, through Base44’s checkout, for training purchases; including charges, refunds, chargebacks, and fraud screening. Before launch on January 4, 2027, only Sileo Pet Services clients and test accounts can book through Bingo!.Payment details, transaction records, connected-account status
ACH payouts (our payment processor’s ACH payout partner)Sending ACH payouts to Providers. Bank details are collected through the bank’s or payment processor’s secure portal; Bingo does not store bank account numbersPayee name, bank account details (held by the bank or processor), payout amounts and dates
Tax forms (TaxBandits)Collecting W-9 forms before payouts and filing Forms 1099Name, business name, address, taxpayer ID (collected by TaxBandits; Bingo does not store Social Security numbers), payout totals
Background checks (Checkr)Planned, not yet active: consumer reporting agency that will screen Bingo Sitters and, for home boarding, the adults living in the homeIdentity details, SSN (collected directly by Checkr, never by Bingo), screening results
EmailEmail delivery through Base44’s email service. Bingo does not currently send text messages or push notifications and does not offer masked callingEmail addresses and the message content needed for delivery
Cloud hosting and infrastructure (Base44)Hosting, databases, storage, backupsAll Platform data, stored securely
AnalyticsGoogle Analytics on our website and app, only after you accept analytics cookies. We do not use session replayDevice and usage data, identifiers, error logs
AdvertisingNot currently used. If we add advertising tools, they will load only after you accept them (Section 7)Cookie and device identifiers, page views, permitted conversion events
Customer supportHelp desk and email ticketing. No telephone support, no call recordingContact details, support conversations
AI servicesBase44’s AI features, which power the Booking Assistant, reading uploaded documents and vaccination records, Pet journal audio, and AI-assisted diagnostics (see Section 4.3)The information needed for the task. The Booking Assistant can read what the signed-in User can see in their own account, which may include entry details and Pet care and medical notes; document tools receive the uploaded file. Never payment card numbers or background-check reports
Identity and securityLogin security and Sign in with GoogleIdentifiers, account credentials, verification results. From Google Sign-In: name, email address, profile picture, Google account identifier only (Section 2.5)
AI assistant (Anthropic, Google, OpenAI)Answering your Bingo Assistant questionsYour question and the records from your own account needed to answer it, which can include Pet care and medical notes
Weather (Open-Meteo, US National Weather Service)Visit forecasts and weather alertsMap coordinates only; no names, addresses, or Booking details
Mapping (OpenRouteService, if enabled)Suggesting a likely walking path between a visit’s location pointsMap coordinates of the visit’s location points only; no names, account details, addresses, or Booking details
Professional advisersLawyers, accountants, auditorsAs needed for their services
  • Legal reasons. To comply with law, subpoenas, court orders, or other valid legal process; to respond to lawful requests from government authorities; and to establish, exercise, or defend legal claims.
  • Safety and emergencies. To protect the life, health, or safety of a person or animal, we may share information with veterinarians and emergency veterinary facilities, a Pet’s emergency contacts, and, where appropriate, animal control, emergency services, or law enforcement. For a Shared Pet, we follow the authority rules in our Terms of Service and record who authorized care. Bingo does not process veterinary payments. The clinic bills the Pet’s owner directly, and the owner is responsible for the bill, so we do not send your payment details to a veterinary practice and we do not keep a record of what you paid a clinic. What we do keep is the authorization record: who authorized care, when, the spending limit, the clinic contacted, and the attempts made to reach you.
  • Insurance and claims. With insurers when a claim or incident is reported.
  • Enforcing our terms. To investigate and act on violations of our Terms of Service or other agreements, and to prevent fraud.
  • Business transfers. In connection with a merger, acquisition, financing, reorganization, bankruptcy, or sale of all or part of our business. The recipient must honor this Privacy Policy for the information it receives, and we will give notice as the law requires.
  • With your consent or at your direction, for example when you connect a third-party service or ask us to share records.

7. Advertising, analytics, and cookies

7.1 What we use

We use:

  • Cloudflare Web Analytics, on our public website at bingopetcare.org. It does not set cookies, does not use your browser’s storage, and does not identify you or follow you to other sites. It records page views, the site that sent you to us, your browser and device type, your country, and how quickly pages load, and we see this only as totals.
  • Counts of website form submissions, kept on our own servers: for example, how many waitlist sign-ups came from a link we shared on Instagram. These counts never include your name, email address, IP address, or anything you typed.
  • Google Analytics, in our apps, to understand traffic and how people use the Platform, only after you accept analytics cookies.
  • Bingo’s own page-view counts, only after you accept analytics cookies. When you are signed in, we record which pages of the app are viewed: the page address with record numbers and other identifiers removed (for example, “/AppointmentDetails/:id”, never the specific appointment), the type of account viewing it (such as Client, Business Owner, Employee, or Bingo Sitter), and when it was viewed. We do not attach your name, email address, account ID, or IP address to these records, we do not keep the rest of the web address (such as search terms or filters), and we look at them only as totals, such as how many times a page was viewed in a month. We use them to understand how the Platform is used and to improve it. We do not sell them.
  • Our app platform’s built-in analytics (Base44, the platform Bingo is built on), only after you accept analytics cookies. It records when the app is opened, how long a visit lasts, and which page addresses are open, linked to your account and to a random session ID kept in your browser, and gives Bingo usage statistics.
  • We do not currently use advertising pixels, tags, or SDKs (such as Google Ads or Meta). If we add them in the future, they will follow the rules in this Section and load only after you accept advertising cookies.

Apart from the cookieless website measurement described above, nothing but strictly necessary technology runs until you accept it. Analytics and advertising technologies that use cookies or similar identifiers, including Google Analytics and any advertising tags we may add in the future, are off by default and do not load at all until you accept them in our consent banner. We apply this the same way everywhere in the United States, no matter which state you live in. Hiding a banner is not the same as turning tracking off, so we do not do that. Where Google’s tools are used, we run them in Google Consent Mode, so Google is told your choice and the tags stay off until you say yes.

Analytics tools run on our public website, in our apps, and in logged-in areas of the Platform, and in logged-in areas they are configured not to capture form contents or sensitive information.

If we add advertising pixels, they will be much more limited. They would fire on only two events:

  • “Account created”, and
  • “First booking completed.”

They would run only on our public marketing site and on one neutral confirmation page, and they never run inside the signed-in app. This is deliberate: page addresses inside the app can contain Client, Pet, or Booking identifiers, and we do not want those reaching an advertising platform. The two events would carry no Pet health information, no price or payment information, no address, and no Client details: only the fact that the event happened.

7.2 What advertising and analytics tools never receive

We do not send any of the following to advertising platforms:

  • private messages;
  • home access information, such as lockbox codes, alarm codes, or entry instructions;
  • full addresses or service locations;
  • payment details;
  • Social Security numbers or other government ID numbers;
  • veterinary records or Pet medical information;
  • background-check information;
  • GPS or other precise location data;
  • client lists or pet-care records; or
  • any other sensitive information described in Section 8, including information about minors.

We also do not build advertising audiences from sensitive pet-care, safety, or medical information.

7.3 Do we “sell” or “share” personal information?

We do not sell personal information for money.

However, some state privacy laws define “sale,” “sharing,” and “targeted advertising” broadly. We do not currently use advertising tools. If we add them, and Google’s or Meta’s advertising tools collect cookie or device identifiers and browsing activity on our website or apps, and those companies may use that information for their own purposes or to target ads across other sites and apps, that activity may count as:

  • “selling” or “sharing” personal information for cross-context behavioral advertising under California law; and
  • “targeted advertising” or a “sale” under the laws of other states.

The categories involved would be limited to online identifiers (such as cookie IDs, device IDs, and IP addresses), internet and app activity on our Platform, and limited conversion events. See the table in Section 12.2.

We do not knowingly sell or share the personal information of anyone under 16.

7.4 Your choices: “Your Privacy Choices” and GPC

  • “Your Privacy Choices.” Use the “Your Privacy Choices” button in the site footer, the app menu, Settings, or on our Privacy Policy page to opt out of the sale or sharing of your personal information and of targeted advertising, and to limit the use of sensitive information. You do not need an account to opt out. Your choice is saved in the browser you are using. If you use another browser or device, make your choice there too, or email privacy@bingopetcare.app and we will record your opt-out for your account.
  • Our public website. bingopetcare.org uses no analytics or advertising cookies and no advertising tags, so it does not show a consent banner, and its “Your Privacy Choices” link opens this section. Nothing on that website sells or shares personal information, and we honor GPC there as everywhere else.
  • Cookie banner. In our apps, our consent banner separates strictly necessary, analytics, and advertising technologies. Analytics and advertising are off until you accept them, everywhere in the US. You can reject non-essential tracking and change your choices at any time through the banner settings or “Your Privacy Choices.” We keep your consent choice for 12 months, then ask you again. You can withdraw analytics consent at any time the same way: Bingo stops recording page views from that browser right away, and our app platform’s built-in analytics stops the next time the app loads.
  • Global Privacy Control (GPC). If your browser or device sends a GPC signal, we treat it as a valid request to opt out of sale, sharing, and targeted advertising for that browser or device. We honor GPC for all US users, not only where the law requires it. Our servers also check for the GPC signal and do not record page views from a browser that sends it. When we detect and apply a GPC signal, we show a visible confirmation, such as “Opt-Out Request Honored” in our privacy choices banner. A cookie banner will not override your GPC signal.
  • Do Not Track. Browsers’ older “Do Not Track” setting has no common standard, so we do not respond to it, except that we honor GPC as described above.
  • Mobile devices. You can also limit ad tracking through your device settings (for example, “Allow Apps to Request to Track” on iOS or “Delete advertising ID” on Android).
  • Opting out of ad-platform tracking directly. Google and Meta offer their own ad settings. Industry opt-outs are also available through the Digital Advertising Alliance and the Network Advertising Initiative.

Opting out does not stop all advertising; you may still see Bingo ads that are not based on your activity.

Our Cookie & Tracking Notice at https://bingopetcare.org/cookies lists each technology we use, what it does, and how long it lasts: strictly necessary browser storage for signing in, security, and remembering your privacy choice, and Google Analytics, Bingo’s own page-view counts (kept 14 months), and our app platform’s built-in analytics only if you accept them.


8. Sensitive information

Some information needs extra protection. We treat the following as sensitive:

Sensitive informationWhy we collect itConsent or legal basisLimits on use
Precise geolocation (GPS during active services)Show visit points and paths and verify visits (including comparing clock-in and clock-out locations); safety; disputes; insurance claims; timekeepingProvider’s separate opt-in consent and device permission; continuous tracking for walks, for visits of Businesses that opt in to it, and when the Provider turns on “Go live”; location at clock-in and clock-out, required for walks, independent Bingo Sitters’ own visits, and Businesses that opt in (Section 5.1)Only during active services (clock-in to clock-out), continuously or at key moments as described in Section 5.1; never sold; never used for ads; restricted access (Section 5)
Government-ID-related data (driver’s license, identity verification data)Verifying Sitters who offer transportation; identity verification; verifying a Client’s eligibility for a discount they requestProvided by you for a service you requestUsed only for verification and legal compliance; restricted access
Background-check informationPlanned, not yet collected: safety screening of Bingo Sitters, and of adults living in a home where Pets are boardedEach person’s own written FCRA disclosure and authorizationFull SSN collected only by Checkr; Bingo receives status and permitted results; used only for eligibility, with FCRA pre-adverse-action and adverse-action steps; never used to train AI models
Account credentials (username and password)Secure loginNeeded to provide your accountPasswords stored as secure hashes; never shared
Home access information (lockbox and alarm codes, entry instructions)Let the assigned Provider enter to care for your PetYou choose to provide itReleased only as described in Section 6.1; stored encrypted; every view is logged, and the Client can see who viewed them; not included in marketplace previews, emails, or report cards; never used to train AI models. The Booking Assistant can see a Client’s own entry details when helping that Client (Section 4.3)
Contents of messages between UsersDeliver messages; safety; disputes; enforcing our termsNeeded to provide messagingAccess limited to participants and authorized personnel for safety, support, legal, or enforcement needs; never sent to ad platforms
Health information you volunteer (for example, a disability accommodation request or a household allergy relevant to care)Only for the purpose you gave itYour consent, given by choosing to provide it for that purposeUsed only for that purpose; not used for ads; you can ask us to delete it
Information about minors under 16 (Household Member contacts)Emergency and household contactProvided by the parent or guardianNever sold or shared; used only as a contact

We never sell sensitive information and never use it for advertising or to infer characteristics about you. Home access information, payment details, government identifiers, background-check reports, and veterinary and medical details are also never used to train Bingo’s AI models (Section 4.3.1). We collect sensitive information only where it is necessary for the service you request, for safety, or for legal compliance. Where state law requires opt-in consent before we process sensitive data, we ask for it first. You can withdraw consent at any time, though some services (such as GPS-supported walks, transportation services that require a verified driver’s license, or marketplace access that requires a background check) may then become unavailable.


9. How long we keep information

We keep personal information only as long as we need it for the purposes in this policy, including legal, tax, accounting, insurance, safety, and dispute needs. The table below sets our retention periods by category. When a period ends, we delete the information or de-identify it.

CategoryRetention period
Account and profile information (including Family profiles, Pet profiles, and service locations)For the life of your account, and deleted or de-identified within 30 days after we verify a deletion request, except records we must keep for the reasons listed below
Approximate town-level location point (Section 5.6)For the life of your account, and deleted with your account
Payment and transaction records, including subscription billing7 years after the transaction or tax year
Detailed route data (check-ins when the Provider opens Bingo, continuous routes, pause records, and the path drawn from them)90 days after the service, plus any incident or legal hold (Section 5.5). Deleted automatically every day
Visit-verification records (arrival, departure, location check, clock-in and clock-out location comparison and any flag) and clock-in and clock-out timestampsOur set period is 7 years after the service, plus any incident or legal hold (Section 5.5)
Care documentation: messages (direct and Booking-related), photos, videos, report cards, walk-map care markers (Section 5.5), and private feedback from Providers3 years after the service, or after the last activity in the conversation, plus any incident or legal hold
Background-check records3 years after the check is completed
Insurance documents3 years after the coverage expires
Driver, vehicle, license, and permit documents3 years after the document expires
Reviews and responsesUntil removed by the author or by Bingo under our review policy
Home access informationUntil you delete it or close your account. Assigned caregivers can see it only on the visit day(s); your preferred caregivers and your Business’s staff can see it while they remain connected to you (Section 6.1)
Emergency veterinary authorizations and emergency records7 years
Device, usage, and analytics data14 months
Cookies and similar technologiesYour consent choice is kept in your browser for 12 months, then we ask again. Google Analytics data follows the 14-month period above
Privacy request records and opt-out records24 months, which is at least what California law requires
Business-controlled data after a Business Subscriber leavesAvailable for export for 30 days, then deleted or de-identified within 90 days after termination, except records we must keep for the reasons below

Why we may keep information longer. We may keep specific records longer when they are reasonably needed for tax, accounting, payment, fraud prevention, insurance, safety, a dispute, a contract, or a legal obligation. Retained records are restricted and deleted when the obligation ends. Deleting your account does not delete records we must keep for these reasons, and it does not delete a Booking record that another party (such as the other Client or Provider, or a Business) also relies on; in that case we remove or de-identify your personal details where we can.

Deleting your account in the app. When you delete your account in the app, it is closed right away and scheduled for deletion. You have 7 days to change your mind by signing back in. After that, we delete or de-identify your information as described in this section, within the 30 days allowed above.

Legal and incident holds. When an incident, complaint, insurance claim, payment dispute, legal proceeding, safety investigation, or preservation request arises, we preserve the related records until the matter and all related retention obligations end, even if the normal period has passed.

De-identification instead of deletion. In some cases, we de-identify information instead of deleting it, so that it can no longer reasonably be linked to you. We may keep and use de-identified information as described in Section 4.4.

Backups. Deleted information may remain in secure backups for a limited period, until those backups are overwritten on their normal cycle. Backups are isolated and are not used for ordinary purposes.

Business Subscribers. Before business-controlled messages are deleted after a Business leaves, we notify the Business.


10. How we protect information

We use reasonable administrative, technical, and physical safeguards designed to protect personal information, appropriate to its sensitivity. They include:

  • encryption in transit and at rest. Your information is encrypted both while it travels to and from the Platform and while it is stored, using industry-standard encryption provided by the infrastructure we host on. To be plain about what that does and does not mean: your information is not end-to-end encrypted, and the platform operator keeps administrative access to the systems so that it can provide support, fix problems, and maintain the service. Access is restricted to the people who need it and is logged.
  • controlled release of entry details (gate and door codes, key location, and emergency contact phone): caregivers see them only through a visit screen that logs every view (Section 6.1);
  • passwords stored as secure hashes. Two-factor sign-in is not available at this time. If we add it, we will update this policy.
  • role-based access controls, so that each business’s records stay separate and each person sees only what their role needs;
  • audit logs of important actions, including who viewed home access information and who changed Pet, Booking, price, and account records;
  • restricted, logged access to background-check results, location data, home access information, and payment records;
  • vendor security requirements in our contracts; and
  • employee and contractor confidentiality obligations and training.

No system is completely secure. We cannot guarantee the security of information sent to or stored on the Platform. You help protect your account by using a strong, unique password, keeping your login private, and telling us right away at privacy@bingopetcare.app if you think your account or someone’s access information has been compromised. If a lockbox or alarm code may have been exposed, change it right away.

If a data breach affects your personal information, we will notify you and regulators as the law requires.


11. Your privacy rights

11.1 One process for all US users

Different states give different privacy rights. To keep things simple, we offer the rights below to all US users, wherever you live, through a single process. Some rights have legal exceptions, and the specific rights, limits, and deadlines that apply to you depend on the law of your state. Where your state gives you a stronger right, we follow it.

11.2 Your rights

You may ask us to:

  • Know what personal information we collect about you, where it comes from, why we use it, and the categories of third parties we disclose it to.
  • Access a copy of the specific personal information we hold about you.
  • Correct inaccurate personal information. You can correct most account information yourself in your settings.
  • Delete personal information we collected from or about you, subject to legal exceptions (such as payment, tax, safety, insurance, and dispute records).
  • Port your information: receive it in a portable, readily usable format. You can download a copy of your own information yourself in Settings (“Download my data”), or ask our privacy team to prepare it.
  • Opt out of the sale or sharing of your personal information and of targeted advertising (Section 7.4).
  • Opt out of profiling in furtherance of decisions that produce legal or similarly significant effects. The Bingo Route and fraud and safety tools involve human review for such decisions (Sections 4.2 and 4.3). You may also ask for human review of a Bingo Route decision at any time.
  • Limit the use of sensitive information to what is necessary to provide the services you request (Sections 8 and 12.4).
  • Opt out of the use of your personal information to train Bingo’s own AI models (Section 4.3.1). We offer this to everyone, whether or not your state requires it.
  • Get a list of third parties. Where the law provides it (for example, in Connecticut, Oregon, and Minnesota), you may ask for a list of the specific third parties, or categories of third parties, to which we have disclosed your personal information.
  • Question a profiling result. Where the law provides it (for example, in Minnesota), you may ask why a profiling decision was made, review the data used, and have inaccurate data corrected and the decision reconsidered.
  • Appeal a decision about your request (Section 11.8).

11.3 How to submit a request

You can submit a request by:

  • Web form: https://bingopetcare.org/privacy-request
  • Email: privacy@bingopetcare.app
  • Mail: Bingo! LLC, 315 E Linden St, Moorestown, NJ 08057

Opt-outs of sale, sharing, and targeted advertising can also be made through “Your Privacy Choices” or by turning on GPC. These do not require identity verification.

Bingo does not operate a support telephone line. All privacy requests come in through the form, by email, or by mail.

11.4 Verification

To protect your information, we verify requests to know, access, correct, delete, or port information before we act on them. We will usually ask you to log in to your account or confirm information we already have, such as your email and phone number. For requests involving sensitive information, we may ask for more. We use the information you provide for verification only to verify your request. If we cannot verify you, we will tell you and explain why.

11.5 Authorized agents

You may use an authorized agent to make a request for you. We may ask the agent for signed written permission from you, or a valid power of attorney, and may ask you to verify your identity directly with us or confirm that you gave the agent permission. A parent or legal guardian may make requests for a minor Household Member listed on their Family profile.

11.6 Response times

We will confirm receipt of a request to know, access, correct, or delete within 10 business days, and respond within 45 days. If we need more time, we may extend once by up to 45 more days, and we will tell you why within the first 45 days. We act on opt-out requests as soon as feasibly possible and within the period the law requires (no later than 15 business days). We do not charge for requests, unless they are clearly unfounded, excessive, or repetitive, where the law allows us to charge a reasonable fee or decline.

11.7 Requests about Business Subscriber records

If your request concerns records a Business Subscriber controls (Section 1.2), we will tell you and, where appropriate, forward it to the Business or help the Business respond. Your request about your own Bingo account will still be handled by Bingo.

11.8 Appeals

If we deny your request in whole or in part, you may appeal. Reply to our decision, use the form at https://bingopetcare.org/privacy-request, or email privacy@bingopetcare.app with “Privacy Appeal” in the subject line, within 30 days of our decision. A person who was not involved in the original decision will review your appeal. We will respond in writing within the period the law of your state requires (generally 45 or 60 days), explain our decision, and tell you about any action taken or not taken.

Appeals about your account (for example, a deactivation or a Bingo Route review) are handled separately: email privacy@bingopetcare.app with “Account Appeal” in the subject line.

If we deny your appeal, you may contact your state attorney general. Where the law requires it, our response will include a way to contact your state attorney general to submit a complaint. Complaint pages for several of those states:

StateWhere to complain
ColoradoColorado Attorney General, https://coag.gov/file-complaint/
ConnecticutConnecticut Attorney General, https://portal.ct.gov/ag (consumer complaint form)
VirginiaVirginia Attorney General, Consumer Protection Section, https://www.oag.state.va.us/consumer-protection/index.php/file-a-complaint
TexasTexas Attorney General, https://www.texasattorneygeneral.gov/consumer-protection/file-consumer-complaint
CaliforniaCalifornia Attorney General, https://oag.ca.gov/report, and the California Privacy Protection Agency, https://cppa.ca.gov
Every other stateYour state attorney general’s consumer protection office. We will give you the current address in our appeal response.

11.9 No discrimination or retaliation

We will not deny you service, charge you a different price, give you a different level of quality, or otherwise discriminate or retaliate against you for exercising your privacy rights. Some features may not work without certain information; for example, a Bingo Sitter cannot receive Booking payments without connecting a payment account, and we cannot show a Client a walk route if location is off. That is a result of the feature’s needs, not a penalty.


12. California privacy notice

This section adds information required by the California Consumer Privacy Act, as amended (the “CCPA”), for California residents. It applies to Clients, Household Members, Bingo Sitters, Business Personnel (for information Bingo controls), Veterinarian Users, and visitors.

12.1 Notice at collection

At or before the point of collection, we tell you the categories of personal information (including sensitive personal information) we collect, why, whether it is sold or shared, and how long we keep it. This Section 12 and Sections 2 through 9 are our notice at collection. Our in-app and web collection screens link here. You can opt out of sale and sharing at “Your Privacy Choices.”

12.2 Categories of personal information (past 12 months)

CCPA categoryExamplesSourcesBusiness purposesDisclosed toSold or shared?Retention
IdentifiersName, email, phone, account ID, IP address, cookie and device IDsYou; other Users; automatic collection; vendorsProvide the Platform; bookings; payments; security; support; communications; analytics; advertisingOther Users as needed; Business Subscribers (their clients); service providers; Google Analytics, if you accept it (online IDs only)No in the past 12 months; we do not use advertising tools. If we add them: online identifiers only, and only after you accept advertising cookiesLife of account + 30 days after verified deletion; analytics data 14 months
Customer records (Cal. Civ. Code § 1798.80(e))Address, service locations, payment card last 4 and tokens, insurance policy information, driver’s licenseYou; other Users; payment processor; insurersBookings; payments; verification; tax; insuranceAssigned Providers after acceptance; payment processor; insurers; service providersNoAccount life + 30 days; payment records 7 years; insurance documents 3 years after coverage expires
Protected classification characteristicsAge (18+ confirmation); disability information if you request an accommodationYouAge eligibility; accommodationsService providersNoAccount life + 30 days
Commercial informationBookings, services purchased, tips, refunds, subscription and training purchases, referral credits, plan discounts and promo codesYou; automatic collection; payment processorBookings; payments; accounting; support; fraud preventionOther Users (Booking details); Business Subscribers (their Bookings); service providersNo in the past 12 months. If we add advertising tools: two conversion events only (“account created” and “first booking completed”), only after you accept advertising cookies, with no Booking, price, address, or Pet detailsPayment, invoice and tax records 7 years; the care documentation attached to a Booking (messages, photos, report cards) 3 years; Booking and Pet profile records for the life of the account (Section 9)
Biometric informationNot collectedNoneNoneNoneNoNone
Internet or other electronic network activityPages and screens viewed, clicks, app interactions, crash logsAutomatic collectionAnalytics; security; product improvement; advertisingGoogle Analytics (if you accept); service providersNo sale or cross-context sharing in the past 12 months. Google Analytics collects this only after you accept analytics cookies14 months
Geolocation dataPrecise location during active services: continuously for walks, for visits of Businesses that opt in to it, and while a Provider has “Go live” on; otherwise at key moments (clock-in, clock-out, care markers, opening Bingo); approximate location from IP address; ZIP, city, and state used for local price ranges and nearby matchingAutomatic collection (your device)Visit map (points and connecting path); visit verification, including the clock-in and clock-out location comparison; safety; disputes; timekeepingThe Client for that Booking (and Family members it is shared with) and the other Providers on that Booking; authorized Bingo safety personnel for a Business’s visits (for an independent Bingo Sitter’s own visit, only a Bingo administrator who opens that visit for a safety incident, dispute, or legal request, which is logged; Section 5.3); a Business Subscriber for its own staff on its own Bookings (including location flags); our mapping service provider (OpenRouteService, if enabled), which receives coordinates only; insurers and authorities as neededNo, neverSet periods: detailed route points 90 days; arrival, departure, location-check and clock times 7 years; both subject to holds. Route points are deleted automatically (Section 5.5)
Sensory dataPhotos, videos, report-card mediaYou; other UsersCare documentation; report cards; safety; disputesClient and Appointment Team; service providersNo3 years after the service
Background-check information (consumer reports)Not collected in the past 12 months (screening has not started). When it starts: screening status, completion date, eligibility result, permitted report informationCheckr (our background-check vendor)Safety eligibility for Bingo Sitters and for adults living in a boarding Sitter’s homeCheckr; service providersNo3 years after the check
Professional or employment-related informationSitter qualifications, insurance, licenses, business name, rates, training completions; Business Personnel roles and timekeeping; contractor agreements between Businesses and Bingo Sitters, including signature records and the signer’s IP addressYou; Business Subscribers; vendorsVerification; matching; Business workspace toolsClients (public profile items); Business Subscribers; service providersNoAccount life + 30 days; documents per Section 9
Education information (non-public, FERPA)Not collectedNoneNoneNoneNoNone
InferencesService preferences, match suggestions, reliability and responsiveness indicators, fraud and safety signalsDerived from other categoriesMatching; the Bingo Route; fraud and safetyService providersNoAccount life + 30 days
Sensitive personal informationAccount login credentials; driver’s license; precise geolocation; contents of messages between Users; health information you volunteer; personal information of consumers under 16You; other Users; automatic collection; vendorsSee Section 8See Section 8No, neverSee Section 9

We also collect Pet care information and home access information, which we protect as described in Sections 2 and 8.

12.3 Business and commercial purposes

We use and disclose personal information for the purposes in Section 4, including the business purposes the CCPA recognizes: performing services, security and integrity, debugging, short-term transient use, auditing, quality and safety, internal research, and advertising and marketing services.

12.4 Your right to limit use of sensitive personal information

We use sensitive personal information only for purposes the CCPA permits without offering a right to limit, such as providing the services you request, security, fraud prevention, safety, and legal compliance. We do not use it to infer characteristics about you. Even so, you may submit a request to limit through “Your Privacy Choices” or privacy@bingopetcare.app, and we will confirm how we are limiting use. Limiting use may make some services unavailable (for example, GPS-supported walks or transportation).

12.5 Notice of financial incentive

We offer the following programs, which may count as financial incentives under California law:

  • Plan referral program (Business Subscribers and Bingo Sitters). If you refer a new Business or Bingo Sitter using your referral code, you and the new account each receive one free month of your Bingo plan after the new account’s first paid charge.
  • Client referral program. When a new Client joins using an existing Client’s referral code, the new Client is shown a $5 credit and the referring Client a $10 credit. These credits are displayed in your account but cannot currently be spent; we will tell you before they can be used.
  • Plan discounts and promo codes. We may offer discounts or promo codes on Bingo plans.

Personal information involved: your name and account details, your referral code, the fact that a referred account used it, and the resulting charges or credits. How to join: share or enter a referral code, or apply a promo code. Joining is optional. How to withdraw: stop sharing your code, or email privacy@bingopetcare.app; earned rewards already applied are not reversed. Value of your data: we do not assign a separate value to the personal information involved; in good faith, we estimate it as equal to the value of the reward (one month of the plan, or the displayed credit), calculated from what the reward costs Bingo.

12.6 Shine the Light

California Civil Code § 1798.83 lets California residents ask for information about personal information disclosed to third parties for their own direct marketing purposes. We do not disclose personal information to third parties for their own direct marketing purposes. To ask about this, email privacy@bingopetcare.app with “Shine the Light” in the subject line.

12.7 Minors under 16

We do not knowingly sell or share the personal information of consumers under 16. The only information we hold about people under 18 is Household Member contact information a parent or guardian provides (Section 14). Under the CCPA, personal information of consumers under 16 is sensitive personal information, and we treat it that way.

12.8 Pre-use notice: automated decision-making and the Bingo Route (effective October 2, 2026)

The Bingo Route uses computer processing to suggest and route Requests to eligible Providers, which can affect which requests a Client's caregivers and nearby Bingo Sitters and Businesses are offered, and in what order (Section 4.2).

  • Purpose. To match Requests with eligible, available, and qualified Providers quickly and safely, and to respect Client preferences and exclusions.
  • How it works. The Bingo Route considers the factors listed in Section 4.2, such as service area, distance to the care address, availability, qualifications, Pet needs, insurance and document status, rates, rating, Client preferences and exclusions, and response history. It produces suggested matches and a routing order. Declining a Request, or letting it expire without a response, is never counted as a reliability strike; only no-shows and late cancellations are.
  • Human review. A person who understands the Bingo Route and has authority to change its result reviews decisions that deny or restrict a Provider’s access to marketplace work, and any decision a Client or Provider asks us to review. This review right applies now.
  • Your rights. You may (a) ask how the Bingo Route reached an outcome that affected you, including the main factors specific to you and how the outcome will be used; (b) appeal the outcome to a human reviewer; and (c) where the law requires, opt out of automated decision-making and use an alternative process. Submit requests through https://bingopetcare.org/privacy-request or privacy@bingopetcare.app.
  • What we will not disclose. We will not disclose source code, scoring weights, thresholds, anti-fraud or security rules, or other Users’ information.
  • No retaliation. We will not retaliate against you for using these rights.

12.9 Contact for California residents

California residents may use the methods in Section 11.3. You may also designate an authorized agent (Section 11.5).


13. Other state privacy rights

13.1 States with comprehensive privacy laws

Residents of the states below have rights under their state’s comprehensive privacy law. As Section 11 explains, we offer these rights to all US users through one process, and apply each state’s specific rules, exceptions, and deadlines as that state’s law provides.

StateLawGPC or opt-out signal required?
CaliforniaCCPA/CPRAYes
ColoradoColorado Privacy ActYes
ConnecticutConnecticut Data Privacy ActYes
DelawareDelaware Personal Data Privacy ActYes
IndianaIndiana Consumer Data Protection ActNo
IowaIowa Consumer Data Protection ActNo
KentuckyKentucky Consumer Data Protection ActNo
MarylandMaryland Online Data Privacy ActYes
MinnesotaMinnesota Consumer Data Privacy ActYes
MontanaMontana Consumer Data Privacy ActYes
NebraskaNebraska Data Privacy ActYes
New HampshireNew Hampshire Privacy ActYes
New JerseyNew Jersey Data Privacy ActYes
OregonOregon Consumer Privacy ActYes
Rhode IslandRhode Island Data Transparency and Privacy Protection ActNo
TennesseeTennessee Information Protection ActNo
TexasTexas Data Privacy and Security ActYes
UtahUtah Consumer Privacy ActNo
VirginiaVirginia Consumer Data Protection ActNo

We honor GPC in every state, including those that do not require it.

Sensitive data and location sale bans. Several states prohibit the sale of precise geolocation or sensitive data (for example, Maryland, Oregon, Virginia, Connecticut, and New Jersey). Bingo does not sell precise geolocation or sensitive data in any state.

Data minimization. Consistent with laws such as Maryland’s, Connecticut’s, and Oregon’s, we limit collection to what is reasonably necessary and proportionate to the purposes we disclose, and collect sensitive data only where necessary for the service you request.

13.2 Nevada

Nevada residents may ask us not to sell their covered information, as Nevada law defines “sale” (generally, an exchange for money). We do not sell covered information under that definition, but you may still submit a request to privacy@bingopetcare.app with “Nevada Opt-Out” in the subject line, and we will record it.

13.3 Other states

If your state passes a privacy law after the date of this policy, we will apply it as that law provides. If you have questions about your rights in your state, contact privacy@bingopetcare.app.


14. Children

The Platform is not directed to anyone under 18, and no one under 18 (or the age of majority where they live, if higher) may create an account. We do not knowingly collect personal information directly from children. The one exception is information a parent or legal guardian chooses to give us about a minor Household Member or emergency contact, as described in Sections 2.2 and 2.3; that information comes from the adult, not from the child, and the child has no login.

A minor listed as a Household Member contact:

  • has no login and cannot use the Platform;
  • is listed with only the contact details the parent or guardian provides; and
  • is never the subject of advertising, sale, or sharing.

If you believe a child has created an account or given us personal information, contact privacy@bingopetcare.app, and we will delete it as the law requires.


15. Texts, emails, and communication preferences

  • Text messages. Bingo does not currently send text messages. Before we do, we will ask for your consent and update this policy.
  • Emails about your account and care. We send transactional emails about your account, security, Bookings and changes, invoices and payments, contractor agreements, and support. These are part of the service and are not marketing.
  • Email. You can unsubscribe from marketing email using the link in any marketing message. We will still send transactional and account emails.
  • Announcements from your caregivers. Businesses and independent Bingo Sitters on Bingo may send announcements to their own clients, meaning clients who booked them in the last 12 months or who list them as a preferred caregiver. You can opt out of these announcements in Settings or with the unsubscribe link in any announcement.
  • Push notifications. Bingo does not currently send push notifications.
  • In-app messaging. Messages between Users go through the Platform. Bingo does not offer in-app or masked calling and does not record calls.
  • Support. Bingo support runs by email and in-app messaging. We do not offer telephone support and we do not record any calls.

16. Veterinarian Users

Veterinarian features are not yet available to the public. This section describes how they will work when they launch. A Veterinarian User is a licensed veterinarian with a Platform account.

  • Owner-shared records only. A Veterinarian User sees only the Pet information and records a Pet’s owner specifically shares, or that is otherwise lawfully authorized. Veterinarian Users do not get automatic access to Client, Family, Pet, Booking, Provider, or Business records.
  • The owner controls sharing. An owner can stop sharing at any time. Stopping sharing ends future access but does not recall copies a veterinarian has already made in the practice’s own records, which are governed by the veterinarian’s own obligations and state veterinary records laws.
  • No telehealth at launch. Bingo does not provide veterinary telehealth, diagnosis, prescribing, or treatment services. Bingo provides records, communication, and support tools only.
  • Veterinarian’s own information. We use a Veterinarian User’s account, practice, and license information to operate the account and verify licensure.
  • Emergencies. In a Pet emergency, we or the Provider may share relevant Pet care information with the treating veterinary facility (Section 6.4).

17. Where your information is stored

Bingo operates only in the United States. We store and process personal information in the United States. If you access the Platform from outside the United States, you understand that your information will be handled in the United States under US law.


18. Changes to this policy

We may update this Privacy Policy from time to time. The “Last updated” date at the top shows when it last changed, and we keep prior versions.

  • Material changes. We will give at least 30 days’ notice by email and in the app before a material change takes effect.
  • Changes that need your consent. If we want to use personal information you already gave us in a materially different way than we told you when we collected it, we will ask for your consent where the law requires.
  • Faster changes. Changes required for legal, security, fraud-prevention, safety, or payment-processing reasons may take effect sooner, with notice as soon as reasonably practicable.
  • Minor changes, such as formatting, clarifications, contact information, or corrections that do not reduce your rights, take effect when posted.

19. How to contact us

If you have questions about this policy or our privacy practices, or want to exercise your rights:

  • Privacy requests: the form at https://bingopetcare.org/privacy-request
  • Privacy email: privacy@bingopetcare.app
  • Security reports: privacy@bingopetcare.app
  • Mail: Bingo! LLC, 315 E Linden St, Moorestown, NJ 08057
  • General questions and accessibility: hello@bingopetcare.app (see our Accessibility Statement at https://bingopetcare.org/accessibility)
  • Account and Bingo Route appeals: privacy@bingopetcare.app or the form at https://bingopetcare.org/privacy-request

We do not operate a support telephone line.

If you need this policy in an alternative format because of a disability, contact hello@bingopetcare.app.