Privacy Policy
Last updated October 2026
The Whitehall Civic Association runs this website and app for residents of the Whitehall neighborhood. This page describes what we collect and why, on both the website and the mobile app.
Account information
When you create an account, we store your email address, a username, and a salted hash of your password (we never store the password itself). If you sign in with Google or Apple instead, we store the stable account identifier that provider gives us, not your password.
The neighborhood directory
The directory is visible only to signed-in residents. It shows your household's address and the details you choose to share: names, photos, pets, interests, and — only if you leave them switched on — your phone number and email. You can edit or hide any of this from your household page at any time.
Photos
Photos you upload (profile pictures, pets, your household gallery) are stored on our server and shown only to signed-in residents. The app asks for camera or photo library access only when you choose to add a photo.
Location
The map shows each household at its street address, which we convert to map coordinates once when the address is saved. If the app asks for your device's location, it is used on your device only, to center the map — it is never sent to or stored on our server.
Push notifications
If you allow notifications, we store a device push token so we can send you association announcements and event reminders. You can turn notifications off at any time in your device settings.
Dues payments
Dues are processed by Stripe. We never see or store your card or bank details — Stripe handles them directly and tells us only that your household's dues were paid, the amount, and the date.
Cookies and sessions
The website uses a session cookie to keep you signed in. The mobile app uses a comparable device-stored session token instead of cookies.
Deleting your account
You can delete your account from within the mobile app at any time, or ask us to do it. This removes your login and personal contact details; forum posts stay on record, credited to a deleted account, so conversations stay intact for other residents.
Questions
Reach out via the contact page with any privacy questions.
