Privacy Policy

906 Doheny mobile app

Effective: August 14, 2026

1. Who this policy applies to

This policy covers the "906 Doheny" mobile app, available on the Apple App Store and Google Play. The app is a private communication tool for residents of the 906 Doheny Terrace condo building in West Hollywood, California. Access is restricted to residents who have been manually approved by an HOA board member.

2. What we collect

Information you give us directly

• Email address — used to sign you in and to send confirmation codes.
• Name — used to identify you to the board and to other residents in the resident directory (visible to board members only).
• Unit number — used to identify which unit in the building you occupy.
• Owner/Renter status — used by the board for compliance purposes.
• Phone number (optional) — used by the board for building emergencies only. Never shared publicly. You may omit this field.
• Reports you submit — including any text, category selections, and photos you attach. These are transmitted to HOA Premier Management (our building management vendor) and are visible to HOA board members.
• Alerts you post (board members only) — including title, body text, and severity, visible to all approved residents.

Information we collect automatically

• Push notification token — a device identifier issued by Apple Push Notification service (iOS) or Firebase Cloud Messaging (Android). Used only to deliver alerts you have opted into.
• Account timestamps — created-at, last-sign-in-at, approved-at. Used for account management.

What we do not collect

• We do not collect your device's location.
• We do not access your phone's contacts or photo library except when you explicitly attach a photo to a report.
• We do not use any advertising SDKs or third-party analytics.
• We do not track you across other apps or websites.
• We do not currently collect crash reports or performance telemetry.

3. How we use the data

• To authenticate you when you sign in.
• To identify you to HOA board members reviewing your sign-up.
• To deliver push notifications for alerts you have opted into.
• To route your maintenance reports to HOA Premier Management for response.
• To let the board see who is a resident and coordinate building operations.

4. Who sees the data

Inside the app

• Other residents: Cannot see your email, phone, unit, or reports. Cannot see the identities of other residents.
• Board members (admin role): Can see the full resident list including names, units, emails, and phone numbers where provided. Can see all reports and who submitted them.
• HOA Premier Management: Receives copies of your reports (including any attached photos) by email so they can respond and coordinate vendor work. Their response comes to you by email.

Third-party service providers

• Supabase, Inc. — hosts our backend database, authentication, and file storage. Data is processed under Supabase's privacy policy. Supabase acts as a data processor on our behalf.
• Apple Push Notification service — delivers push notifications on iOS.
• Firebase Cloud Messaging (Google LLC) — delivers push notifications on Android.

We do not sell or rent your data to anyone. We do not share your data with advertisers or data brokers.

5. How long we keep it

We keep your profile and any content you post as long as your account is active. When you delete your account (Settings → Manage account → Delete my account), we:

• Anonymize your profile — your name and email are removed from our records.
• Delete your push notification token so we cannot reach your device.
• Retain the content you posted (reports, alerts) in anonymized form for the building's operational records.

6. Your rights

You may, at any time:

• Update your name, email, or phone number in the app's Settings.
• Change which severity levels of alerts push to your device.
• Delete your account from within the app.
• Email us at the address below to request a copy of the personal data we hold about you.

If you are a California resident, you have additional rights under the California Consumer Privacy Act (CCPA). If you are an EU or UK resident, you have additional rights under the GDPR. Contact us at the address below to exercise those rights.

7. Children

The app is intended for adult residents (typically 18+) of 906 Doheny Terrace. It is not designed for children under 13, and we do not knowingly collect personal information from children under 13. If you believe a child has provided us information, contact us and we will delete it.

8. Security

Data is transmitted over HTTPS and stored on Supabase's managed infrastructure with row-level security policies restricting access to authorized residents and board members. We do not store passwords ourselves — Supabase's authentication service handles that.

9. Changes to this policy

If we materially change what we collect or how we use it, we will notify residents through an in-app alert and update the "Effective" date at the top of this page.

10. Contact

Questions about this policy, or to exercise your privacy rights:

Email: kalebittner@gmail.com