Privacy Policy

Who this applies to

Homefront Pro is software for home service pros (roofers, landscapers, remodelers, painters, and the like) and the homeowners they work with. This policy covers both:

• Pros — account holders running their business on Homefront Pro.
• Homeowners— clients who view estimates, approve work, sign documents, or pay invoices through a pro's portal.

What we collect

From pros

• Name, email, phone, and password (or Google or Apple sign-in).
• Business info: company name, address, website, logo, team members, years in business, services you offer.
• License, insurance, bonding, and certification details you choose to show clients.
• Content you create: estimates, invoices, clients, photos, documents, messages.
• Payment account info through Stripe. We never see your card or bank numbers — Stripe handles that.

From homeowners

• Name, email, phone, and property address.
• Your signature (drawn or typed) when you approve an estimate or sign a document.
• IP address, browser, and timestamp at the moment you sign. This is kept as an audit trail so the document meets ESIGN and UETA requirements.
• Messages, approvals, payments, and anything else you do on the portal.

Collected automatically

• IP address, browser, device, and pages you visit — used for security, troubleshooting, and to keep the service running.
• Push notification tokens — only if you turn on push notifications. On the web this is a Web Push endpoint; in our iOS and Android apps, it's an Apple Push Notification service (APNs) or Firebase Cloud Messaging (FCM) token.
• Crash and error reports — if the app crashes or hits an error, we collect a diagnostic report so we can fix it. These reports aren't tied to your identity.
• Product interaction — basic, aggregated info about which pages and features get used, so we can improve the product. Not sold, not shared with advertisers.
• Cookies for sign-in and language preference. No third-party advertising cookies.

Our iOS and Android apps

Our mobile apps use a few device features. Each one only runs when you choose to use it:

• Camera — to take photos of job sites and attach them to estimates and invoices. We only access it when you tap the camera button.
• Photo library — to attach existing photos to estimates and invoices. We only see the photo you pick.
• Face ID, Touch ID, and Android biometrics— to lock the app when it's in the background. The biometric check happens on your device. Your face or fingerprint never leaves your phone and we never see it.
• Push notifications— only after you grant permission. You can turn them off anytime in your device settings or in the app's Notification Preferences.

We don't track you across other apps or websites. We don't use Apple's App Tracking Transparency identifier (IDFA), and we don't share your data with advertising networks or data brokers. Our Apple App Privacy declarations and PrivacyInfo.xcprivacy manifest match exactly what's described in this policy.

How we use it

• Run the service and keep your account working.
• Send estimates, invoices, reminders, and receipts.
• Process payments and pay pros through Stripe.
• Prevent fraud, abuse, and security problems.
• Answer your support questions.
• Improve the product based on how people use it.

Who we share it with

We share the minimum needed to run the service. Here's every company we work with and why:

• Stripe — payment processing and payouts to pros.
• Resend — sending transactional email (estimates, invoices, receipts).
• Twilio — sending SMS, only when SMS notifications are turned on.
• Cloudflare R2 — storing files you upload (logos, photos, documents, signatures).
• Neon — hosting our Postgres database.
• Google — only if you sign in with Google.
• Apple— only if you sign in with Apple. Apple may share a private relay email instead of your real one; that's fine, we'll use whatever Apple sends us.
• Apple Push Notification service (APNs) — only if you turn on push notifications in our iOS app.
• Firebase Cloud Messaging (FCM, by Google) — only if you turn on push notifications in our Android app.
• Vercel — hosting the app.
• Law enforcement or regulators, when we're legally required.
• A buyer or successor, if Homefront Pro is ever sold or merged. We'll tell you before that happens.

How long we keep it

We keep account data while your account is active and for a reasonable time after you close it (usually 90 days, in case you come back or need to export).

Signed documents — estimates, contracts, invoices — are kept for at least 7 years along with their audit trail (IP, user agent, timestamp). This is standard for ESIGN and UETA compliance and protects both you and your client if a signed document is ever questioned.

Your choices

• Update your info anytime from Settings.
• Export your estimates, invoices, and clients as PDF or CSV.
• Delete your account from Settings. We'll remove your data except what we're legally required to keep (signed documents, tax records).
• Turn off email, SMS, or push notifications anytime in Notification Preferences.
• Reply STOP to any SMS to unsubscribe. HELP for help. Message and data rates may apply.
• Revoke Google sign-in access at myaccount.google.com/permissions.
• Revoke Sign in with Apple access from your iPhone in Settings → Apple ID → Sign-In with Apple, or at appleid.apple.com.

California residents (CCPA)

If you live in California, you have the right to know what we collect, to get a copy, to correct it, to delete it, and to opt out of sale. We don't sell personal information, so there's nothing to opt out of. To use any of these rights, contact us through our support form.

EU and UK residents (GDPR)

Our lawful basis for processing your data is performing our contract with you (running the service) and our legitimate interest in keeping the service secure and improving it.

You can access, correct, delete, restrict, or port your data, and object to how we process it. Reach us through the support form.

Your data may be transferred to the United States, where we and our subprocessors operate. We rely on Standard Contractual Clauses for those transfers.

Security

We encrypt your data in transit (HTTPS) and at rest. Access is scoped — employees only see what they need to support you. We use Stripe for payments so we never store card or bank numbers.

No service is 100% secure. If something happens to your data, we'll tell you as soon as we can and within any timeframes the law requires.

Children

Homefront Pro is for adults running a business. We don't knowingly collect information from anyone under 18. If we learn we have, we'll delete it.

Changes to this policy

If we make meaningful changes, we'll email you and update the date at the top. Small edits (typos, clarifying wording) just get a new date.

Contact

Questions about this policy or your data? Send us a message. We'll get back to you within a few business days.