Privacy Policy

myBahay (“we,” “us,” or “our”) operates mybahay.app (the “Service”). This Privacy Policy explains what personal information we collect, how we use it, and your rights regarding that information. By using the Service you agree to the practices described here.

1. Information We Collect

We collect information you provide directly and information generated through your use of the Service:

• Account information: email address and name when you sign up.
• Property details: address, purchase date, square footage, and other home attributes you enter.
• Maintenance records: tasks, dates, notes, photos, and contractor information you log.
• Agent submissions: data submitted by real-estate agents on behalf of homeowners at setup.
• Usage data: page views, session interactions, and feature usage collected via PostHog (see Section 4). PostHog may record session replays; passwords and payment fields are excluded from recording.

2. How We Use Your Information

• To provide, operate, and improve the Service.
• To send transactional emails (password resets, maintenance reminders).
• To process payments through Stripe (see Section 4).
• To analyze usage patterns and prioritize product improvements.
• To respond to support requests sent to [support email].

We do not sell your personal information to third parties.

3. Data Storage and Security

Your data is stored in a PostgreSQL database hosted by Neon (United States) and served through Vercel (United States). We apply industry-standard security measures including encrypted connections (TLS), environment-variable secret management, and access controls. No method of transmission over the internet is 100% secure; we cannot guarantee absolute security.

4. Third-Party Services

We use the following third-party services, each governed by their own privacy policy:

• PostHog – product analytics and session replay (no passwords captured).
• Stripe – payment processing. We receive only a payment confirmation and masked card summary; we never store your full card number or CVV.
• Neon – managed PostgreSQL hosting.
• Vercel – application hosting and edge delivery.

5. Your Rights

You have the right to:

• Access the personal data we hold about you.
• Delete your account and associated data — we will complete deletion within 30 days of your request.
• Export your property data in a portable format upon request.

To exercise these rights, email us at [support email].

6. Data Retention

We retain your data while your account is active. Deleted accounts are fully purged from our systems within 90 days. Anonymized, aggregated usage statistics may be retained indefinitely.

7. Children

The Service is not directed to children under 13. We do not knowingly collect personal information from anyone under 13. If you believe a child has provided us information, contact us at [support email] and we will delete it promptly.

8. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify registered users by email at least 14 days before material changes take effect. Continued use of the Service after the effective date constitutes acceptance of the updated policy.

9. Contact

Questions or requests about this Privacy Policy should be sent to: [support email].