Citystoop, LLC ("we," "us," or "our") operates the Leurenkill Heights mobile application (the "App"). This Privacy Policy explains how we collect, use, disclose, and protect your information when you use our App.
When you register, we collect your name, email address, username, phone number (optional), and a profile photo (optional).
We collect content you create through the App, including:
For each conversation you participate in, we store the conversation type (direct, group, or cabin), the list of conversation members, message timestamps, your last-read time, and your per-conversation mute setting.
If you opt in to the "On the Hill" feature in Settings, we collect coarse location data sufficient to determine whether your device is inside a one-mile geofence centered on the property. We do not collect your exact coordinates, do not track your location continuously, and do not store any location history beyond your current on-hill / off-hill state. Geofence monitoring uses only the "When In Use" permission and is fully opt-in — disabled by default.
We collect Apple Push Notification Service (APNs) device tokens for each of your devices so push notifications reach all devices you're signed in on. We do not collect device identifiers for advertising purposes.
We collect basic information about how you interact with the App, such as your notification preferences (per content type and per conversation), and read/unread status of notifications and conversations.
We do not sell, trade, or rent your personal information to third parties. We share information only in these limited circumstances:
Your name, username, profile photo, and content you post on the main feed, social feed, events, chatter, and PA announcements are visible to all approved members of the Leurenkill Heights community.
Direct messages, group messages, cabin chat messages, and any photo attachments you send in those messages are visible only to the other members of that specific conversation, not to the wider community. Group conversations are limited to members added by the creator. Cabin chats are limited to members assigned to that cabin. Administrators may access reported messages as part of community moderation (see Section 5).
If you have enabled "On the Hill" presence sharing, your on-hill / off-hill state is visible only to the audience you select: the entire community ("Whole hill"), members of your cabin assignment, specific people you allowlist, or any combination thereof. You can change or disable this audience at any time. Members not in your audience cannot see your presence state and cannot determine whether you have the feature enabled.
We use the following third-party services to operate the App:
We may disclose information if required by law, court order, or governmental authority.
Your data is stored on Supabase's infrastructure with encryption at rest and in transit. Authentication credentials are hashed and never stored in plain text. We implement row-level security policies to ensure users can only access data appropriate to their role — including conversations, where only members of a conversation can read its messages and attachments.
Profile photos, post images, message photo attachments, and PA audio recordings are stored in secure cloud storage with access controls. Message photo attachments are stored in a dedicated bucket where each user can only upload to their own path prefix.
The App is not intended for use by children under the age of 13. We do not knowingly collect personal information from children under 13. If we become aware that we have collected personal information from a child under 13, we will take steps to delete that information promptly. Junior accounts are managed by parents or guardians.
We retain your account information and content for as long as your account is active.
If your account is deleted, we remove your profile data, authentication credentials, and device tokens. Content you posted to community feeds (such as posts and comments) may be retained in anonymized form for community record-keeping purposes.
Direct messages, group messages, and cabin chat messages persist for as long as the conversation exists. When you leave or are removed from a group, your sent messages remain visible to the other members. When a user account is deleted, that user's messages remain in conversations but are no longer attributed to a profile.
Push notification logs are retained for 90 days. Audio PA announcements expire and are deleted after 4 hours. Photo attachments in messages persist for as long as the underlying message persists.
Location presence data is current-state only — your on-hill status updates when you cross the geofence boundary and clears when you exit. We retain a short-lived record of recent push-notification deliveries (per recipient pair, expiring after 5 hours) to prevent duplicate alerts. There is no historical location log.
We may update this Privacy Policy from time to time. We will notify you of any material changes by posting the updated policy within the App or by email. Your continued use of the App after changes are posted constitutes your acceptance of the updated policy.
If you have questions about this Privacy Policy or our data practices, please contact us:
Citystoop, LLC
PO Box 651
Ellenville, NY 12428-0651
privacy@leurenkill.com