Privacy policy

The short version

• We collect what you give us: your name, email, unit, an optional phone number, and what you post, message or upload.
• Only the approved members of your own community can see what you share there. Private messages are seen only by the people in the conversation.
• There are no ads in Hallmates. We do not track you across other apps or websites, and we never sell your information.
• Your information is kept on one server we rent from Amazon Web Services in the United States.
• You can ask for a copy of your information, and you can delete your account in the app or from our delete your account page.

This draft describes what the app does today (checked against the app's code on October 24, 2026). It still needs review for the laws that apply to Fouta App LLC and its users, including state privacy laws (for example California, Virginia, Colorado, Connecticut and others), and for whether any of them apply at Hallmates' size.

Who we are

Hallmates is made by Fouta App LLC ("we", "us"). You can reach us at admin@gethallmates.com.

Hallmates is independent. It is not run by your condo association, its board or its management company, and they do not control this policy.

Fouta App LLC's mailing address and state of organization should be added here. Stores and some state laws expect a postal address.

What we collect

When you are invited

Your community admin creates your invitation. It holds your name, your unit, your role (owner, tenant, board member or admin) and, if the admin sends it that way, your email address or mobile number. If you never join, the invitation stops working after 14 days.

Expired and unused invitations are not deleted automatically today; they stay in the database. Decide how long to keep them and add a cleanup job, then state the period here.

When you join and use Hallmates

Board members and admins may also enter the association's own figures (budget, reserves, loans and insurance) on the "Our money" page. These describe the association, not you.

Phones often hide extra details inside a photo, such as where and when it was taken. Our server removes them from every photo you upload, before anyone else can see it.

When you ask us to start a community

The form on our start a community page sends us the association's name, the building address, your unit, your email and, if you give it, your name. We use it only to contact you about setting up Hallmates.

What we collect automatically

Our server keeps short technical logs of requests (for example, which page of the app was asked for, when, and whether it worked), so we can fix problems. They are deleted after 5 to 10 days. To slow down people trying to guess sign-in codes, the server briefly remembers the internet address a sign-in request came from, for about 15 minutes.

The app has no advertising, analytics or tracking tools from other companies.

The old Fouta code used Meta (Facebook) app events. Hallmates has removed it. If any analytics or crash-reporting tool is added later, this section and the store privacy forms must change first.

Who can see your information

• Members of your community see your name, photo, Board badge and what you share in the community. They see your unit unless you choose "Only the board" in Privacy settings.
• Your community admin also sees your email address, your invitation, how your membership was confirmed, and reports about content. Admins can remove content that breaks the rules.
• Private messages are seen only by the two people in the conversation. If you report a conversation, your admin is told about it.
• Members of other communities see nothing about you.
• Fouta App LLC can access the data on our server to run Hallmates, answer requests and keep it safe. We do not read private messages unless someone reports them, the law requires it, or we need to investigate abuse or a security problem.

Confirm the conditions under which Fouta App LLC staff may look at private messages and reported content, and whether members should be told when that happens.

Companies that help us

We do not sell or rent your information, and we do not share it for advertising. We use these service providers, who handle data only to provide their service to us:

• Amazon Web Services (United States, Virginia region): the server that stores everything, and Amazon Simple Email Service, which sends your sign-in codes and invitations by email.
• Let's Encrypt issues the security certificate that encrypts the connection to our server. It does not receive your information.

We may share information if the law requires it, to protect someone's safety, or as part of a sale or merger of Fouta App LLC, in which case this policy keeps applying to your information.

Review the legal-request and business-transfer wording.

Where it is kept and how it is protected

Everything is kept on one server in Amazon's data centers in northern Virginia, United States. Connections to the server are encrypted (HTTPS), and the server's disk is encrypted. Photos and documents can be opened only by signed-in members of the community they were shared in. You sign in with a one-time code sent to your email, so there is no password to steal.

There are no automatic backups yet. Decide the backup plan (where, how long kept, encrypted) before launch and describe it here.

How long we keep it

• While you are a member, we keep your information so the app works.
• When you delete your account, we delete your profile, your private conversations, your listings and RSVPs, and your photos at once. Posts, replies and issue reports stay so conversations make sense, shown as "Former neighbor" without your name or unit. Past votes stay in the totals without your name. See delete your account.
• Request logs are deleted after 5 to 10 days.

There are no database backups yet. Once there are, say how long deleted information stays in them.

Your choices and rights

• See and change your name, phone, photo and settings in the app under Settings.
• Edit or delete anything you posted, at any time.
• Get a copy of your information: in the app, Settings, then Privacy and safety, then "Email me a copy of my information". We email it to you within 30 days.
• Delete your account in the app, or follow the steps on our delete your account page.
• Ask us anything about your information at admin@gethallmates.com.

Depending on where you live, you may have more rights under your state's law. We will honor them, and we will not treat you differently for using them.

"Email me a copy" sends a request to us; there is no automatic export yet, so each copy is prepared by hand.

Children

Hallmates is for adults who own or live in a unit. You must be 18 or older to use it. We do not knowingly collect information from children under 13. If you believe a child has an account, email us and we will delete it.

Confirm 18 as the minimum age, and the matching store age rating.

Changes to this policy

If we change this policy in a way that matters, we will tell you in the app before the change takes effect. The date at the top shows the latest version.

Contact

Fouta App LLC, admin@gethallmates.com.