Privacy Policy

Last updated: June 18, 2026

This Privacy Policy explains how Kosha Wellness (“Wellness,” “we,” “us”) collects, uses, shares, and protects information when you use our website, apps, and services (the “Services”). By using the Services you agree to the practices described here.

1. Information We Collect

We collect the following categories of information:

  • Account information: your name, email, password (stored hashed by our identity provider), phone number, and role (customer or provider).
  • Profile & location: your address or city, which we geocode into coordinates to power search; for providers, your service area, modes (in-person/virtual), licensed states, bio, and credentials.
  • Bookings: services booked, dates and times, notes, and status.
  • Payments: processed by Stripe. We do not store full card numbers; we retain payment metadata such as amounts, status, and identifiers needed to manage your bookings and payouts.
  • Messages: content of chats you exchange with providers or customers through the Services.
  • Usage & device data: log data, approximate location (from IP), device and browser information, and interactions with the Services.

2. How We Use Information

  • To provide, operate, and improve the Services, including search and matching.
  • To facilitate bookings, payments, payouts, reminders, and communications.
  • To personalize results and surface relevant providers and content.
  • To send transactional notifications (confirmations, reminders, receipts) and, with consent, updates.
  • To maintain security, prevent fraud and abuse, and comply with legal obligations.

3. How We Share Information

We share information only as needed to run the Services:

  • Between customers and providers: when you book or message, the other party sees the information necessary to deliver the service (e.g., your name and booking details). Customers’ precise coordinates are not shared with providers.
  • Payment processing: Stripe, Inc., to process payments and provider payouts under its own terms and privacy policy.
  • Infrastructure providers: Amazon Web Services for hosting, storage, geocoding, email, and messaging.
  • Legal & safety: when required by law, to enforce our Terms, or to protect rights, safety, and property.
  • Business transfers: in connection with a merger, acquisition, or sale of assets.

We do not sell your personal information.

4. Location Information

We use the location you provide (address, city, or device GPS when you grant permission) to find providers near you, calculate distances, and apply licensing rules for virtual services. You can change or remove your location at any time in your profile.

5. Cookies & Tracking

We use cookies and similar technologies to keep you signed in, remember preferences, and understand usage. Essential cookies are required for the Services to function; you can control non-essential cookies through your browser settings. Disabling some cookies may affect functionality.

6. Data Security

We use industry-standard safeguards including encryption in transit (TLS) and at rest, scoped access controls, and secrets managed in a secure parameter store. No method of transmission or storage is completely secure, so we cannot guarantee absolute security.

7. Data Retention

We retain information for as long as your account is active or as needed to provide the Services, comply with legal obligations, resolve disputes, and enforce agreements. You may request deletion as described below.

8. Your Rights & Choices

  • Access, correct, or update your profile information at any time in the app.
  • Request a copy or deletion of your personal information by contacting us.
  • Opt out of non-essential notifications in your notification preferences.
  • Depending on your location, you may have additional rights under laws such as the GDPR or CCPA/CPRA.

9. Health-Related Information

Some information you share (e.g., booking notes or messages) may relate to your health or wellbeing. We treat this information as sensitive and limit access to what is necessary to provide the Services. Kosha Wellness is a marketplace and is not a healthcare provider; see our Terms of Service.

10. Children’s Privacy

The Services are not directed to children under 18, and we do not knowingly collect their information. If you believe a child has provided us information, please contact us so we can remove it.

11. Changes to This Policy

We may update this Policy from time to time. We will post the updated version with a new “Last updated” date and, for material changes, provide additional notice.

12. Contact Us

Questions about this Policy? Email us at support@kosha.life.