Your data belongs to you.

Latchstring connects neighbors who could use a hand with a small task to neighbors who have offered to help. It is not a marketplace. There are no prices, no ratings, no rankings, no public helper lists, and no public request feeds.

Name and email let you sign in and let trusted contacts recognize you. Your name is never globally searchable.

A verified phone number is required to offer help and to accept a match, so both neighbors are verified before any coordination opens. Signing in, exploring, and expressing interest in a request never require it. Others may see that your phone is verified, never the number itself.

Photos are uploaded only when you choose them. Each photo has its own visibility stage, and upload processing strips EXIF location and device metadata.

Help request and offer text is visible only at the disclosure stage you choose. It is never published as a feed.

Trusted contacts are private to the people connected. Latchstring never turns them into a public social graph.

Safety reports are kept for three years even if an account is deleted, so patterns can be recognized. This is the one deletion carve-out.

Feedback stays private unless you choose anonymous gratitude, which appears as a single excerpt without counts or sorting.

We do not sell or rent data. We do not share information with advertisers, brokers, or political entities.

Our service providers process data only for Latchstring: Cloudflare R2, SendGrid, Twilio, and Sentry.

If a binding legal demand requires disclosure, we comply and notify the affected person unless prohibited.

If someone's life or safety is in immediate danger, we may share relevant information with appropriate authorities. That bar is intentionally high.

Most account data exists only while the account is active. Account deletion removes almost everything within seconds.

Database backups are purged within 30 days. General audit records are kept for one year. Safety records are kept for three years.

You can edit or hide disclosures, request a machine-readable export, mute most email categories, and delete your account whenever you want.

Some messages stay unmutable because they protect account security, mutual consent, safety, or account integrity.

Latchstring uses one cookie: your sign-in session. We do not run third-party trackers, marketing pixels, email open tracking, or email click tracking.

Latchstring is not designed for children under 16, and we do not knowingly collect data from children.

If we materially change what data we collect, who receives it, or how long we keep it, we will show an in-app notice before the change takes effect.