Privacy Policy

What stays on your phone

Everything you add to your home record is stored on your phone, not on our servers:

• Your home's details, floor plans and room scans, and the lot outline you trace
• Your maintenance plan and history, and the home health score
• Appliances, paint colors, filters, warranties, manuals, inventory and other records, with their photos and what you paid
• Utility bills, closing documents and mortgage details (account numbers are kept to the last 4 digits)
• Your pros (contractors and services) and their contact details
• Messages from your home's email once your phone has fetched them

Because it's on your phone, deleting the app deletes it. Settings → Data lets you delete parts of it, and Erase everything deletes all of it.

Your home's email address

Each home gets its own email address on mydoorpost.net, made from the street address you give in setup (for example 123mainok@mydoorpost.net). Our server keeps that address name, a scrambled (hashed) form of your phone's secret key and, if you give it, your own email address so mail from you is trusted.

Mail sent to your home's address is received by Postmark and held on our server (Supabase) only until your phone fetches it, then deleted. Anything not fetched within 30 days is deleted anyway. Forwarded mail can contain other people's names and details; DoorPost receives whatever is forwarded to it.

Because the address is based on your street address, someone could guess it. Mail from senders DoorPost doesn't know is marked "Needs review" and is never filed automatically. Be careful with links in mail you didn't expect.

When you turn the email off, change your home's address or erase DoorPost, the address is retired for good and never given to anyone else, and any waiting mail is deleted.

AI reading of photos, documents and mail

When you ask DoorPost to read something (an appliance label, a bill, a paint label, a business card, a mortgage statement or closing documents), the photo or file is sent through our server to Anthropic's Claude API for that one request. Mail from trusted senders is read the same way when your phone fetches it, so it can be filed (you can undo or move it). Our server doesn't keep the photo, file or message.

We instruct the AI not to keep names, full account or loan numbers, Social Security numbers, bank details or signatures, and our code removes them from what comes back. Appliance lookups also search the web for the model's specs, manual and recalls. Anthropic does not use this data to train its models.

Location, maps and weather

• County records (US homes): your address is sent to RentCast to look up your home's public records (year built, size, lot). Results are kept for up to 180 days by address so the same home isn't looked up twice.
• House photo: your address is sent to Google Street View for a picture of the house, which your phone keeps for a day.
• Satellite map: Apple Maps loads imagery around your home; Apple's privacy terms apply.
• Forecast: your home's location, rounded to about a kilometer, is sent through our server to Apple WeatherKit. It isn't stored on our server.
• Weather warnings (DoorPost Plus, US homes): your phone signs up with a random ID (we keep only its hash), its push notification address and your home's location rounded to about a kilometer. The location is used once to find your National Weather Service zones (county-sized areas) and isn't stored; only the zone codes and push address are. Warnings are sent through Expo's push service and contain no personal details. Turning weather alerts off or deleting the app removes the sign-up.

Subscriptions

DoorPost Plus is sold through Apple. Apple handles payment; we never see your card or bank details. RevenueCat, our subscription service, receives an anonymous ID it creates, your App Store purchase details (plan, price, trial, renewal and cancellation dates, country and currency) and basic device details (iOS and app version). We use this only to know whether you have Plus and to count subscriptions. Your name, email and home details are never sent to RevenueCat.

Anonymous home insights

DoorPost can share anonymous facts about homes to learn things like how long appliances last in each region. In most countries this setting is on when you set up your home; in the European Union, the European Economic Area, the United Kingdom and Switzerland it starts off and is only on if you turn it on. You can change it during setup or anytime in Settings → Privacy. Turning it off deletes anything waiting to be shared and its random ID.

Insights are kept separately from your home record under a random ID that isn't linked to you, your account or your device's advertising ID. Before anything is stored it's made less exact on your phone: state or region and only the first part of the postal code (in the US, the first three digits of the ZIP code, with areas of fewer than 20,000 people removed), decades instead of years, and size ranges instead of exact numbers.

Collected today: state or region, the first part of the postal code (3 digits of a US ZIP code), own or rent, decade you moved in, and how many rooms a scan found (as a range). Never collected: names, emails, phone numbers, street addresses, GPS locations, parcel numbers, serial numbers, photos, receipts, prices, anything you type, or device IDs.

We may share or license aggregate results (for example "water heaters in the 787 area last about 11 years") with manufacturers, retailers, builders, utilities or researchers, but only figures backed by at least 20 homes and never individual records. Recipients must agree not to try to identify anyone, and we never provide insights to insurers or lenders to price or decide on individual people.

Other details we keep

If you use a referral code, our server stores the code and a random install ID used only for referrals. Our service providers may keep basic technical logs (such as the time of a request and errors) for security and reliability.

Who we share with

We don't sell or rent your personal information and we don't share it for advertising. We use these service providers only to run the features above, under their own privacy and security commitments: Supabase (our server and database), Postmark (receives home email), Anthropic (AI reading), Apple (WeatherKit, Maps, App Store), Google (Street View), RentCast (county records), Expo (push notifications) and RevenueCat (subscriptions).

We may disclose information if the law requires it, to protect people's safety, or as part of a sale or merger of DoorPost, in which case this policy continues to apply.

How long we keep things

• Home email messages: until your phone fetches them, and never more than 30 days
• Photos and documents sent for AI reading: not kept after the request
• County record lookups: up to 180 days
• Weather warning sign-ups: until you turn alerts off or your phone stops receiving pushes; sent warnings are remembered for 2 weeks
• Your home email address name: until you turn it off or erase DoorPost, after which it's retired
• Everything on your phone: until you delete it

Security

Data sent between the app and our servers is encrypted in transit, and our database is protected with row-level security. Keys for outside services are kept on our servers, never in the app. No system is perfectly secure, so please protect your phone with a passcode.

Your choices and rights

• See and change your data: it's in the app.
• Delete it: Settings → Data deletes parts or all of it, and deleting the app removes what's on your phone.
• Turn off the home email, weather warnings or anonymous insights in Settings.
• Ask us to access, correct or delete anything held on our servers by emailing support@threeoaksdigital.net.

Depending on where you live, you may have legal rights over your personal information. In US states such as California, Colorado, Virginia and Texas, these include the rights to know, access, correct, delete or move it, and to opt out of its sale, targeted advertising or profiling. We don’t sell personal information or use it for targeted advertising. To use any of your rights, email us; we’ll respond within the time the law requires and won’t treat you differently for asking.

Children

DoorPost is meant for adults managing a home and isn't directed to children under 13. We don't knowingly collect information from children. If you think a child has given us information, email us and we'll delete it.

If you live outside the United States

DoorPost can be used around the world. Some features work only for homes in the United States today, such as county records and National Weather Service warnings.

Our servers and most of our service providers are in the United States, so information the features above send to our servers is processed there. Where the law requires it (for example for the EU, EEA, UK and Switzerland), we rely on safeguards such as the European Commission’s Standard Contractual Clauses or the provider’s certification under the Data Privacy Framework.

• Why we use your information (legal bases under the GDPR and UK GDPR): to provide the features you ask for (contract); to keep DoorPost secure and working and to count subscriptions (legitimate interests); and, where required, your consent, such as for anonymous insights and notifications. You can withdraw consent anytime in Settings.
• Your rights: to access, correct or delete your information, to restrict or object to how we use it, to receive a copy in a portable form, and to withdraw consent. Most of your information is on your phone, where you can see, export and delete it yourself; for anything on our servers, email support@threeoaksdigital.net.
• You can also complain to your local data protection authority, though we’d appreciate the chance to help first.

Changes to this policy

If we change this policy we'll update the date at the top. If a change is significant, we'll tell you in the app before it takes effect.

Contact

Questions or requests: support@threeoaksdigital.net