Privacy

Kit helps families find and pay for postpartum care. We collect only what it takes to book that care: your basic contact details, and your address when a provider is coming to your home. We don’t ask for medical information. We tell you who else sees what we hold, and we don’t sell it or use it for advertising.

This page covers Kit at app.kitbenefits.com, which is operated by Kit Benefits Inc., 2416 Marine Drive, West Vancouver, British Columbia, V7V 1L1.

If you use Kit to arrange care, we hold your name, email, phone number, and the province and city you’re in. If you book an in-home visit we hold your address and any entry notes you give. If you tell us about your baby we hold their date of birth and the stage you’re at, which is what lets Kit suggest care that fits the week you’re actually in.

When you book, we hold the booking itself, and your answers to any questions the provider asks beforehand. These are practical questions about arranging the visit, not medical ones. You choose what to put in them, and you can ask us to delete them. Any records a provider keeps about your care are held in their own systems, not in Kit.

If you’re a provider, we hold your profile and business details, your credentials and registration numbers, the results of your background check, proof of insurance, the bookings you take through Kit, and a record of the payouts sent to you. Your bank details are held by Stripe, not Kit.

If you send someone a gift of care, we hold your name, email and the amount.

Providers can connect a Google Calendar. Kit asks for two permissions and uses them for exactly two things:

• Adding your Kit bookings to your calendar, and keeping them up to date when a booking changes or is cancelled. Kit only ever creates and manages its own events. It does not read, change or delete anything else in your calendar.
• Seeing when you’re busy, so Kit stops offering clients an hour you’re already committed to. Kit reads free/busy only: the times a calendar is occupied, and nothing else. Not titles, not who else is invited, not locations, not notes. Kit cannot tell a dentist appointment from a family lunch, and does not need to.

Busy times are stored as plain start-and-end times against your provider account, used only to work out which hours to offer, and replaced each time they’re re-read. They’re never shown to clients: a client sees that an hour isn’t available, never why.

To stay connected, Kit stores the access Google issues for your calendar (an access token and a refresh token), encrypted, along with the email address of the Google account you connected so the page can show which one it is. Kit also keeps a note of which calendar event belongs to which booking, so it updates the right one.

You can disconnect at any time from Settings → Calendar, or revoke Kit’s access in your Google account. When you disconnect, Kit asks Google to withdraw its access, stops reading immediately, and deletes the stored tokens, the connected account’s email, the stored busy times and its event notes. If Google stops accepting the connection, Kit deletes the stored busy times then too. The booking events Kit already added stay in your calendar as your record of the work. You can delete them there like any other event.

Kit’s use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements. We do not use Google Calendar data for advertising, we do not sell it, and we do not transfer it to anyone except the service providers that run Kit on our behalf (listed below) or where the law requires. No person at Kit reads it except to keep the service working, to investigate abuse, or when you ask us to. We do not use it to train generalised AI or machine-learning models.

Someone who sends you a gift sees only that it was claimed. They cannot see your wallet balance, which services you booked, which providers you saw, when you saw them, or anything you told a provider.

A provider you book sees your name, the contact details you gave, what you booked, and your answers to their own intake questions. For an in-home visit they see the address and entry notes. They do not see your wallet, who funded it, or anything about bookings with other providers.

Providers can have their Kit bookings copied into their own calendar (Google Calendar, Apple Calendar, Outlook or another calendar app). When they do, each booking in that calendar carries what they need for the visit: your name and phone number, the address for an in-home visit, your baby’s age, and your answers to their intake questions. That copy sits in the provider’s own calendar account, under that calendar company’s terms. When a booking changes or is cancelled, Kit updates or removes it there.

Kit is built and managed by Kit Benefits Inc. Like most apps, we rely on a few trusted companies for specific jobs, such as secure hosting, card payments and sending emails. They handle information only to do that job for us, under contract:

• Supabase: the database and accounts behind Kit.
• Vercel: hosting.
• Stripe: payments and provider payouts. Card numbers go to Stripe directly; Kit never sees or stores them, only the brand and last four digits.
• Resend: email.
• Twilio: text messages.
• Google: calendar sync, for providers who connect one.

Some of these services may store or process information outside Canada. Wherever it’s handled, they’re bound by contract to protect it, and it’s subject to local law, which can include lawful access by authorities there.

We don’t sell personal information, and we don’t share it with anyone for their own marketing.

We keep your account and booking history while your account is open. To close your account, email hello@kitbenefits.com. We’ll delete or anonymize your personal information within 90 days, except records tied to money (invoices, payments, payouts), which tax law requires us to keep for seven years.

You can ask us for a copy of what we hold about you, ask us to correct it, or ask us to delete it. You can withdraw consent at any time, though some of Kit stops working without the basics. We can’t send someone to your home without an address.

Email hello@kitbenefits.com and we’ll respond within 30 days. If you’re not satisfied, you can complain to the Office of the Privacy Commissioner of Canada.

Kit is for adults. We hold a baby’s date of birth and care stage because that’s what makes the recommendations useful, but it is given by their parent or guardian and sits within the parent’s own account. Children don’t have Kit accounts.

Access is restricted to the account it belongs to, enforced by the database itself rather than only by the app. Calendar tokens are encrypted before they’re stored. Payment details never reach Kit’s servers.

If we change how Kit uses your information we’ll update this page and, where the change is significant, tell you directly rather than leaving you to notice.

Questions: hello@kitbenefits.com. Our terms cover the rest of how Kit works.