Privacy Policy

What we collect

Your account: your email address, a securely hashed password (or your Google sign-in), and your name if you enter one. We need this so you can log in and so your data is only yours.

Emails: we use your email address for emails about your account, like resetting your password, and we may send you updates about the app. Every update email has an unsubscribe link at the bottom, and it stops them.

What you type in: client names, the name of who you text, optional phone numbers, email addresses, home addresses, Venmo usernames, services and rates, session dates and times, charges, payments, tasks, and notes. We need this to show you your schedule and your money.

Photos, if you add them: a photo of yourself and of any client you choose. Your phone shrinks each one and takes out its hidden details, like where it was taken, before it is saved.

People who work with you: if you turn on Team, we also save what you type about them. That is their name, phone number, email, the days they can work, their start date, whether they are under 18, an emergency contact and notes. It is also what they do, how you pay them, which sessions they do, when you sent them their schedule, and what you have paid them. Only you can see it, and we never contact them.

Reminders: if you turn on reminders, we save what is needed to reach your phone or computer: an address from its push service, the keys that lock each message so only your device can read it, and which browser and phone you use. When you log out, that device stops getting your reminders. For every account, reminders on or not, we save your time zone and your reminder settings (which ones are on, their times, and quiet hours) so reminders come at the right time. When we send a reminder, we keep a short note of it so you don't get the same one twice. A reminder can show a client's name, a session time and note, a task, a team member's first name, or a dollar amount on your screen.

Basic technical info: normal server logs like request times and error reports, used to keep the app working and secure.

Signing in: to stop abuse, when you sign in we keep a scrambled form of your internet address. We use it for one hour, and delete it after that.

How you use the app: which screens you open and which main steps you take, like adding a client or logging a payment, tied to a random account number and never to your name or email. We also keep screen recordings of how the app is used, with all text and everything you type hidden. A recording shows the layout, taps and moving between screens. It never shows a client's name, phone number, address, notes or a dollar amount. Photos are blocked too. A recording shows an empty box where a photo is. We use this to find what is confusing and fix it.

A friend's link: if you join with a friend's link, we keep which account the link came from. Until you make your account, the link's code waits in your browser for up to 30 days. The friend who shared it only ever sees how many people joined, never your name or anything about you.

We don't collect location tracking, ad profiles, or anything we don't need.

Your clients' data is your responsibility

When you save a client's name, phone, email, or address, that's information about someone else. You're the one who decides to store it.

Only enter what you actually need. Tell your clients you keep records if they'd want to know. If a client asks you to remove their info, delete them in the app. Deleting a client removes their sessions, money records, repeats and tasks. If you typed their name somewhere else, like a group's name or another client's notes, change that too. Follow whatever privacy rules apply where you live.

Only add a photo of a child if their parent says it's OK.

How your data is stored and secured

Your data lives in a managed Postgres database. Every table uses row-level security, which means the database itself only ever returns rows that belong to your account, not just the app, the database.

Traffic is encrypted in transit (HTTPS). Passwords are hashed, never stored as plain text. No system is perfectly secure, but we don't cut corners here.

Photos are kept in private storage that only your account can open. There is no public link to them.

We don't sell your data

We do not sell your data. We do not share it with advertisers. We do not use it to build ad profiles or train models. There is no exception buried further down this page.

We'd only hand over data if the law required it, and we'd tell you unless we were legally barred from doing so.

Who else touches your data

A few service providers help run the app. They only process data to do their job:

• Supabase: the database your records live in, and sign-in, including sign-in with Google.
• Lovable: hosting, delivering the app to your browser, and sending account emails like confirmations and password resets.
• PostHog: analytics and screen recordings of how the app is used, run from servers in the United States. All text and everything you type is hidden on your device before anything is sent. It gets a random account number and the names of main steps, and never your email, your name or any client details. Photos are never sent to it.
• Google: only if you choose to sign in with your Google account.
• Your phone's push service: only if you turn on reminders. Apple's, Google's or your browser maker's, depending on your phone and browser, carries each reminder to your device. The message is locked on the way, so they can't read it.

These providers are not allowed to use your data for their own purposes.

Cookies and local storage

We use browser storage to keep you logged in and to remember small settings like dark mode, and one cookie that fills in your email when you sign in again (also in the app on your home screen). If you tap Start free on one of our pages about a kind of work, your browser keeps which kind for up to 7 days, so setup can start there. We also hold a random number that lets our analytics tell one visit from another. No advertising cookies. No third-party tracking pixels. Our analytics only see what happens inside Go to Neighbor and do not follow you around the web. If your browser sends a "Do Not Track" or "Global Privacy Control" signal, we leave analytics off.

Export or delete your data

Go to Settings to export your clients, services, sessions, money records and team as a file you can open in a spreadsheet, or to reset your data.

Resetting your data clears your clients, sessions and money records but keeps your login.

You can delete your whole account yourself, including your login. Go to Settings and tap Delete account. It removes your clients, services, sessions, money records, tasks, team, reminder settings and devices, your profile, and your login. You can also email us and we will do it for you. We will confirm when it is done, normally within 30 days.

Removing a photo deletes it. Deleting a client deletes their photo, Reset all data deletes your clients' photos, and Delete account deletes every photo. Photos are not in the export file.

How long we keep things

We keep your data while your account is open, because that's the point of the app. When you delete something, it's removed from the live database. Backups and logs are kept for a limited period by our hosting providers and then deleted. Closed accounts are deleted after that too.

Kids and teens

You must be at least 13 to make an account. We do not knowingly collect information from anyone under 13. If we find out we have, we'll delete it. If you're a parent and think your child under 13 made an account, email us and we'll remove it.

Changes to this policy

If this policy changes, we'll update the "Last updated" date at the top and tell you in the app or by email for anything significant.

Contact

Go to Neighbor is operated from California, USA. Email hello@gotoneighbor.com with any privacy question or request.

See also our Terms of Service.