Whitehall Civic Association

Privacy Policy

Last updated October 2026

The Whitehall Civic Association runs this website and app for residents of the Whitehall neighborhood. This page describes what we collect and why, on both the website and the mobile app.

Account information

When you create an account, we store your email address, a username, and a salted hash of your password (we never store the password itself). If you sign in with Google or Apple instead, we store the stable account identifier that provider gives us, not your password.

The neighborhood directory

The directory is visible only to signed-in residents. It shows your household's address and the details you choose to share: names, photos, pets, interests, and — only if you leave them switched on — your phone number and email. You can edit or hide any of this from your household page at any time.

Photos

Photos you upload (profile pictures, pets, your household gallery) are stored on our server and shown only to signed-in residents. The app asks for camera or photo library access only when you choose to add a photo.

Location

The map shows each household at its street address, which we convert to map coordinates once when the address is saved. If the app asks for your device's location, it is used on your device only, to center the map — it is never sent to or stored on our server.

Push notifications

If you allow notifications, we store a device push token so we can send you association announcements and event reminders. You can turn notifications off at any time in your device settings.

Dues payments

Dues are processed by Stripe. We never see or store your card or bank details — Stripe handles them directly and tells us only that your household's dues were paid, the amount, and the date.

Cookies and sessions

The website uses a session cookie to keep you signed in. The mobile app uses a comparable device-stored session token instead of cookies.

Deleting your account

You can delete your account from within the mobile app at any time, or ask us to do it. This removes your login and personal contact details; forum posts stay on record, credited to a deleted account, so conversations stay intact for other residents.

Questions

Reach out via the contact page with any privacy questions.