Privacy Policy

1. Information we collect

We collect the following categories of personal information:

• Account information you provide at sign-up — name, email address, phone number (optional), user name, time zone, and your password (stored only as a secure hash).
• Property and unit information — the units, registrations, ownership and household relationships, roles, and approvals associated with your account.
• Content you submit — maintenance issues, comments, documents and file uploads, and messages you send through the Service.
• Billing information — for paid subscriptions, limited billing details. Card and payment data are collected and processed directly by our payment processor (Stripe); we do not store full card numbers.
• Usage and technical data — log data such as sign-in events, IP address, device/browser information, and records of emails we send you, used to operate and secure the Service.

Some information about a person may be entered by someone else — for example, a property administrator or unit owner registering a household member. If your information is in the Service and you did not put it there, contact us or the relevant property administrator.

2. How we use information

We use personal information to:

• provide, operate, maintain, and secure the Service;
• authenticate you, including two-factor authentication and email verification;
• process registrations, approvals, maintenance issues, and communications;
• send transactional email (verification, approvals, issue updates, security, billing);
• process subscription payments and prevent fraud and abuse;
• respond to support requests and improve the Service;
• comply with legal obligations and enforce our Terms.

3. How the Service shares information within a property

halekura is a shared workspace for a building. By design, information you enter may be visible to others in the relevant property — for example, property administrators, unit owners, and staff — according to your role and the visibility settings of each item. Some items can be marked private; where a private setting is offered, it is described at the point of upload or entry. Consider who can see an item before you submit it.

4. When we share with third parties

We do not sell your personal information. We share it only with service providers who help us run the Service, under contracts that limit their use of it, including:

• Hosting and infrastructure — to run the application and database;
• Payment processing — Stripe, for subscriptions;
• Email delivery — to send the emails described above.

We may also disclose information if required by law, to protect the rights, safety, or security of users and the Service, or in connection with a merger, acquisition, or sale of assets, subject to this Policy.

5. Data retention

We keep personal information for as long as your account is active and as needed to provide the Service, then retain and dispose of it as required to meet legal, accounting, and security obligations. When an account is deleted, we delete or anonymize associated personal information, except where we must retain it by law.

6. Security

We use technical and organizational measures to protect personal information, including password hashing, encryption of two-factor secrets, and access controls scoped by role and property. No system is perfectly secure, so we cannot guarantee absolute security. Keep your credentials confidential and notify us of any suspected compromise.

7. Your choices and rights

Depending on where you live, you may have rights to access, correct, delete, or export your personal information, or to object to or restrict certain processing. You can update much of your account information in the Service directly. To make a request, contact us at [email protected]. We will respond as required by applicable law. Note that some information is controlled by the property administrator who manages your building, and we may direct certain requests to them.

8. Cookies and similar technologies

We use cookies and similar technologies that are necessary to run the Service — for example, to keep you signed in and to remember preferences such as your theme. We do not use them to track you across other websites for advertising.

9. Children

The Service is not directed to children under 13 (or the minimum age required in your jurisdiction), and we do not knowingly collect their personal information. If you believe a child has provided us information, contact us and we will take appropriate steps.

10. International users

We operate the Service from the United States, and your information may be processed in the United States and other countries whose data-protection laws may differ from those where you live. By using the Service, you understand your information may be transferred to and processed in those locations.

11. Changes to this Policy

We may update this Privacy Policy from time to time. If we make material changes, we will take reasonable steps to notify you, such as by email or an in-app notice. Changes take effect on the date posted.

12. Contact

Questions or requests about your privacy? Contact us at [email protected].