BOTH YARDS

Both Yards

Privacy Policy

Last updated: October 20, 2026

This Privacy Policy explains how Both Yards (the Home + Work app) collects, uses, and shares information when you use our websites, progressive web apps (PWAs), and Android app (including Trusted Web Activity / TWA builds) at bothyards.com and app.bothyards.com, and related services (together, the “Service”).

Contact for privacy questions: support@bothyards.com.

1. Who we are

Both Yards is the operator of the Service. The Service helps households (“Home”) and workplaces (“Work”) manage places, members, inventory, tasks, messaging, and related tools under one login.

2. Information we collect

Depending on how you use the Service, we may process:

  • Account & profile. Name, email, login credentials, invite/join details, role (e.g. owner, member), and profile preferences you provide. We also keep whether you have confirmed your email address. If you turn on two-step sign-in, we store an encrypted authenticator key and your backup codes in protected form, and, if you choose “Trust this device for 30 days”, a signed cookie on that device.
  • Place & organization content. Data you or your teammates enter for Home or Work places — for example inventory and store lists, board/jobs, meals, hours/clock events, warranties, studio/settings, and similar place content.
  • Messaging. Messages and related metadata (sender, recipients, timestamps, read state) within places where messaging is enabled.
  • Notifications. If you turn on notifications, we keep your notification preferences (for example quiet hours). In the Android app, push notifications are delivered through Google Firebase Cloud Messaging: we store a device push token for your signed-in account and send the notification text (for example “Milk is low” or a new message preview) to Google so it can reach your phone. In the browser, we may use the notification permission and a service worker to show alerts. You can turn notifications off in Settings or in your device settings at any time.
  • Device & technical data. IP address, browser/app type and version, device identifiers typical of web/apps, approximate region derived from network, cookies or local storage, service worker / offline cache data, and diagnostic logs needed to run and secure the Service.
  • Location. We do not collect precise GPS/device location by default. Inventory “locations” (e.g. pantry, fridge, room) are labels you type. If a future feature asks for device location, we will request permission first and use it only for that feature.
  • Payments. Paid plans are processed by Stripe. When you start a plan, Stripe collects your card and billing details directly; we never see or store full card numbers. We store your plan, its status and renewal dates, and the Stripe customer and subscription IDs that link your place to its plan.

3. How we use information

  • Provide, maintain, and improve the Service (accounts, Home/Work places, inventory, messaging, notifications, PWA and Android TWA access).
  • Authenticate users, enforce invites/permissions, and protect against abuse.
  • Send service emails such as invites, password resets, sign-in codes and trial or billing reminders.
  • Show optional in-app or device notifications you enable.
  • Analyze reliability and fix bugs (aggregated or diagnostic use).
  • Comply with law and enforce our terms.

4. How we share information

We do not sell your personal information. We may share data with:

  • Other members of your places — content and messages you post in a shared Home or Work place are visible to members with access.
  • Service providers who process data on our behalf under contract, only as needed to run the Service:
    • Stripe (payments and subscriptions);
    • Google Firebase Cloud Messaging (push notifications to the Android app);
    • Resend (service emails such as invites, email confirmation, sign-in codes, password resets and reminders);
    • our server hosting provider (the private server where the app and its database run).
  • Legal & safety — when required by law, or to protect rights, security, or users.
  • Business transfers — if we merge, sell, or reorganize, information may transfer subject to this policy or notice.

5. Cookies, storage, and offline

We use cookies, local storage, IndexedDB, and similar technologies for login sessions, preferences, offline/store caching, and PWA/service worker behavior. You can clear site data in your browser or uninstall the Android app; that may sign you out and remove local caches.

6. Android app & PWA

The Android app (including TWA) and installable PWA load the same Both Yards web Service. Permissions you grant on the device (e.g. notifications) are controlled by your OS settings. Digital Asset Links and related verification files may be published to associate the app with our domain.

7. Retention

We keep account and place data while your account or place remains active and as needed to provide the Service. If a free trial ends or a plan lapses, your place’s data is kept and stays readable; we don’t delete it because a plan ended. You may request deletion of your account or specific content by emailing us. Some records may be retained for a limited time for backups, security, dispute resolution, or legal compliance.

8. Security

We use reasonable administrative and technical measures (e.g. HTTPS, access controls) to protect information. No method of transmission or storage is 100% secure.

9. Children’s privacy

The Service is not directed at children under 13 (or the minimum age required in your region). We do not knowingly collect personal information from children. Contact us if you believe a child has provided data so we can delete it.

10. Your choices

  • Update profile and place settings in the app.
  • Turn notifications off in Settings and/or your device/browser permission settings.
  • Leave a place or ask an owner to remove your membership.
  • Ask for a copy of your data, a correction, or deletion by emailing support@bothyards.com.

Depending on where you live, you may have additional rights under applicable privacy laws (e.g. access, deletion, portability). Contact us to exercise them.

11. International users

We may process and store information in the United States or other countries where we or our providers operate. Those locations may have different data-protection laws than your home country.

12. Changes

We may update this policy from time to time. The “Last updated” date at the top will change when we do. Continued use of the Service after changes means you accept the updated policy, where permitted by law.

13. Account deletion requests

To request deletion of your Both Yards account or personal information, visit our account deletion page or email support@bothyards.com with the subject Account deletion. Place owners should identify any Home or Work place data they also want reviewed for deletion. Some information may be retained for a limited time in backups, security logs, dispute resolution, or to comply with law.

14. Contact

Privacy questions or requests:
Email: support@bothyards.com
Web: https://bothyards.com · App: https://app.bothyards.com

This page is provided for transparency for users and app stores (including Google Play). It is not legal advice. If you need formal legal counsel for your situation, please consult a licensed attorney.