NeighborFlow

Privacy Policy for NeighborFlow

Effective Date: April 26, 2026

At NeighborFlow (“we,” “us,” or “our”), we take your privacy seriously. This Privacy Policy explains how we collect, use, share, and protect your information when you use our website, mobile-friendly web application, and related services (collectively, the “Service”) for coordinating service projects and volunteer activities.

By using the Service, you agree to the practices described in this policy. If you do not agree, please do not use the Service.

1. Information We Collect

We collect the following types of information:

Information You Provide Directly

  • Account information: Name, phone number (primary), email address (optional), and password or authentication details.
  • Organization information: When you create or join a ward, stake, church group, nonprofit, or community organization, we collect the organization name and basic details.
  • Service project data: Titles, descriptions, dates, times, locations, and requirements for projects you create or participate in.
  • Volunteer activity: Sign-up details, attendance records, notes, and service history.
  • Communications: Messages or notes you send through the Service (e.g., “I can bring snacks”).

Automatically Collected Information

  • Usage data: How you interact with the Service (pages viewed, features used, timestamps).
  • Device and connection information: IP address, browser type, device type, and operating system.
  • Location data (approximate only, if you enable it for project location features).

Third-Party Information

  • We may receive limited information from authentication providers or SMS services (e.g., Twilio) when you register via phone.

We do not collect sensitive personal data such as Social Security numbers, financial account details, or precise geolocation unless you voluntarily provide it in project notes.

2. How We Use Your Information

We use the collected information to:

  • Provide and improve the Service (create projects, manage sign-ups, send reminders).
  • Send important notifications via SMS, email, or push (e.g., project reminders, confirmations). You can manage these preferences.
  • Enable organization leaders to coordinate service activities and track participation within their private group.
  • Generate anonymous or aggregated insights (e.g., total service hours across the organization).
  • Maintain security, prevent fraud, and enforce our Terms of Service.
  • Comply with legal obligations.

We do not use your data for targeted advertising.

3. Sharing and Disclosure of Information

Your data stays private to your organization by default. Other organizations cannot see your projects or activity.

We may share information in these limited cases:

  • Within your organization: Leaders and members of the same group can see relevant project and sign-up information.
  • Service providers: Trusted third parties such as Supabase (hosting/database), Twilio (SMS), Stripe (payments), and Hostinger (hosting). These providers are contractually required to protect your data.
  • Legal requirements: If required by law, subpoena, or government request.
  • Business transfers: In the event of a merger, acquisition, or sale of assets, your information may be transferred.

We do not sell your personal information to third parties.

4. Data Security

We implement reasonable administrative, technical, and physical safeguards to protect your information, including encryption in transit and at rest, access controls, and regular security reviews. However, no system is completely secure. You should use a strong password and enable any available two-factor authentication.

5. Data Retention

We retain your personal information for as long as your account is active or as needed to provide the Service. You may request deletion of your account and data at any time (see Section 6). After deletion, we may retain anonymized or aggregated data for analytics and legal purposes.

6. Your Rights and Choices

Depending on your location, you may have the following rights:

  • Access, correct, or delete your personal information.
  • Opt out of certain communications (you can always stop SMS reminders via reply “STOP” or account settings).
  • Request portability of your data.

To exercise these rights, contact us at the email below. We will respond within 30 days.

California Residents (CCPA/CPRA): You have additional rights regarding the sale or sharing of personal information. We do not sell data.

7. Children’s Privacy

The Service is not directed to children under 13 (or 16 in some jurisdictions). We do not knowingly collect data from children. If we learn we have collected such data, we will delete it promptly.

8. International Users

If you are accessing the Service from outside the United States, please note that your information will be transferred to and processed in the United States. By using the Service, you consent to this transfer.

9. Changes to This Privacy Policy

We may update this policy from time to time. We will notify you of material changes by posting the new policy on the Service and updating the effective date. Continued use after changes constitutes acceptance of the updated policy.

10. Contact Us

If you have any questions or concerns about this Privacy Policy, please contact us: