Privacy Policy

1. What this policy covers

This policy explains what information we collect, how we use and share it, and the choices you have when you use the MyFrontYard web app and the MyFrontYard HOA apps for iOS and Android (together, the “Services”). Residents, board members, association staff, and property managers use the Services to run their community. Our marketing website has its own privacy policy.

2. Your community association

You join the Services through a community association or its management company. The association decides what community records it keeps and who in the community can see them, for example the resident roster, dues accounts, violation history, and meeting records. We host and process those records on the association’s behalf. Your community’s administrators can answer questions about community records and correct them, and we help them respond to requests.

3. Information we collect

• Account and profile. Your name, email address, nickname, profile photo, notification preferences, and security settings such as two-factor authentication. Your password is stored only in hashed form by our sign-in provider. If you use Sign in with Apple or Sign in with Google, we receive your name, email address (or an Apple private relay address), and an account identifier. We never receive your Apple or Google password.
• Membership and property. The communities you belong to, your roles, the property or unit linked to you, and contact details your association keeps in its roster, such as phone number and mailing address.
• Content you create. Posts, comments, reactions, chat and direct messages, service requests, architectural applications, amenity reservations, votes, meeting RSVPs and attendance, and questions you ask about community documents, along with the photos and files you attach.
• Payments. Invoices, payment history, and autopay settings. You enter card and bank details directly into Stripe. We keep only what Stripe returns to identify a saved method (type, brand, last four digits, and expiry date), never the full card or account number.
• Precise location. Only when you tap “Use my location” while placing a service request on the map. It is saved with that request so your community can find the problem. The apps never collect location in the background.
• Device and technical data. A push-notification token and the device platform (iOS or Android) if you allow notifications; your IP address and approximate location derived from it; browser or device type; and logs used to operate and secure the Services.
• Communications. Messages you send to us, replies you email to community chat rooms, and the service emails and notifications we send you.

4. Permissions the mobile apps use

• Notifications. Optional. You can decline, or turn them off later in your device settings.
• Camera and photos. Used only when you choose to take a photo or pick a file to attach, for example a profile photo or a picture on a service request. We receive only the items you choose.
• Location. Used only when you tap “Use my location”, as described above.

The apps do not use your device’s advertising identifier, contain no advertising, and do not track you across apps or websites owned by other companies.

5. How we use information

• To provide the Services and the community features your association turns on;
• To sign you in, enforce access controls, and prevent fraud and abuse;
• To process payments to your association;
• To send the service emails and notifications you have chosen to receive;
• To provide the AI features described in section 7;
• To respond to support requests;
• To understand and improve the Services, using aggregated or de-identified data;
• To comply with the law and protect the rights and safety of our users and others.

6. How we share information

We do not sell your personal information, and we do not share it with third parties for cross-context behavioral advertising.

We share information only in these cases:

• Within your community, as the features and your association’s settings allow. For example, other members may see your posts and your directory entry, and administrators see the records they manage.
• With service providers who process it on our behalf, under contracts that limit its use to providing their service to us:
  • Supabase: database, sign-in, and file storage
  • Vercel: application hosting
  • Stripe: payment processing, including card and bank details and fraud prevention
  • Resend: sending email, and receiving the replies you email to community chat rooms
  • Google (Firebase Cloud Messaging) and Apple (Push Notification service): delivering push notifications to the mobile apps
  • Google Maps Platform: maps and address lookup
  • Anthropic: the AI features described in section 7
  • Voyage AI: search for the Ask the Documents feature
  • Mixpanel: product analytics, when enabled (see section 8)
  • Apple and Google: sign-in, only if you choose Sign in with Apple or Sign in with Google
• For legal reasons, when required by law or legal process, or to protect the rights, property, or safety of us, our users, or the public.
• In a business transfer, such as a merger, acquisition, or sale of assets, with notice where the law requires it.

7. AI features

Some features use AI: summaries of community chat rooms, answers to questions about your community’s documents (Ask the Documents), draft meeting agendas and minutes, and reports for boards and property managers. When you use one, the content it needs (for example the messages being summarized, or your question and the relevant passages of your community’s documents) is sent to Anthropic, and for document search to Voyage AI, to produce the result. We do not use your content to train AI models. AI output can be wrong, so check it before relying on it.

8. Cookies and analytics

We use cookies, local storage, and similar technologies to keep you signed in, protect your account, and remember preferences such as theme. Your cookie choice is stored in a first-party cookie named mycommons_cookie_consent.

We may enable Mixpanel product analytics, and it runs only if you choose “Accept all” in the cookie banner. With that choice, our servers record which features are used (for example, that a request was submitted), linked to your account identifier rather than your name or the content, and the web app records page views. If you choose “Necessary only”, or make no choice, no analytics are recorded. The apps contain no advertising or crash-reporting software.

9. Data retention and account deletion

We keep your information while your account is active and as long as your association needs its records. You can delete your account at any time in the app (Profile → Delete account) or by following the steps on our account deletion page. Deletion ends your sign-in, removes your profile details and device notification registrations, and ends your community memberships. Records that belong to your association, such as posts, messages in official chat rooms, votes, and payment history, stay with the association with your identity removed. Financial records are kept as long as the law and the association’s own retention rules require. Backups and security logs are deleted on their normal schedule.

10. Security

Information is encrypted in transit and at rest by our hosting providers. We limit access by role, record administrative actions in audit logs, and offer two-factor authentication. No system is perfectly secure, so we cannot guarantee absolute security.

11. Your choices and rights

You can edit or clear your profile, choose which notifications you receive, turn off direct messages from the community directory, change app permissions in your device settings, decline analytics cookies, and delete your account. Depending on where you live, you may also have the right to access, correct, delete, or receive a copy of your information, and to opt out of certain processing. To make a request, contact us using the details below. We may need to verify your identity, and we will not treat you differently for exercising these rights.

12. Children

The Services are intended for adults and are not directed to children. We do not knowingly collect personal information from children under 13. If you believe a child has given us personal information, contact us and we will delete it.

13. Where information is processed

We and our service providers process and store information in the United States and in other countries where they operate, with appropriate safeguards where the law requires them.

14. Changes to this policy

We may update this policy from time to time. We will post the new version here with a new “Last updated” date, and tell you about material changes in the Services or by email.

15. Contact

V.2 Labs LLC operates MyFrontYard. Questions about this policy or our privacy practices: support@v2labs.ai.