Legal

Privacy Policy

Last updated: May 28, 2026

The short version: shift data lives on your device by default. If you enable cloud sync, it goes to our servers — and nowhere else. No advertisers, no analytics vendors, no data brokers.

NeighCheck (the "app," the "Service") is operated by NorseHorse ("we," "our," or "us"), an individual sole proprietorship based in Hoover, Alabama, USA. This policy describes what we collect, how we use it, and what your rights are.

1. What we collect

Account information

When you create an account, we store your email address, an optional display name, and a securely hashed password (we never store passwords in plain text). We also generate an internal user ID. None of this is required to use the core shift-tracking features — the app works offline, on-device, with no account.

Shift & earnings data

The app stores your shifts, tips, hours, job profiles, mileage, expenses, tax setup, and related notes. By default this lives only on your device. If you choose to enable cloud sync, the same data is transmitted to our servers over TLS and stored there so it can roam across your devices.

Community / Mask data

If you opt in to community features (Wage Wire, Pastures forums, Employer Intel reviews, direct messages, Job Board), you generate a "Mask" — an anonymous handle. Posts and reviews are attached to the Mask, never to your real name or email. Your shift data is used in aggregate to validate that a post came from someone who actually works that job, but the underlying shifts themselves are never published.

Device identifiers

We store a per-device identifier and an Apple/Google push token (if you enable notifications) so we can send sync events and shift reminders to the right device.

Logs

Our servers keep standard request logs (IP address, timestamp, endpoint, response status) for a rolling window of 30 days to debug issues and detect abuse. They are not connected to advertising profiles or third parties.

2. What we don't collect

  • We do not use third-party analytics (no Google Analytics, no Firebase Analytics, no Mixpanel, no Amplitude).
  • We do not use advertising SDKs.
  • We do not run cross-app tracking. The iOS App Tracking Transparency prompt does not appear because there is nothing to track.
  • We do not collect or analyze your contacts, photo library, or text messages.
  • We do not record your screen, key presses, or in-app session "heatmaps."
  • We do not request location unless you opt in to shift auto-detect — and even then, location is processed on-device and never sent to our servers.

3. How we use what we collect

We use the data we have only for the following purposes:

  • Providing the app — saving your shifts, syncing across devices, sending push notifications, surfacing your insights and tax estimates.
  • Validating community contributions so that wage data, employer reviews, and forum posts come from people who actually work the relevant job.
  • Responding when you email support.
  • Fixing bugs and improving performance based on server-side error logs.
  • Protecting the Service against abuse, spam, fraud, and security threats.

4. End-to-end encrypted direct messages

Mask-to-mask DMs are end-to-end encrypted on your device before they reach our servers. The server stores only the encrypted ciphertext and routes it to the recipient. We cannot read, search, recover, or hand over the plaintext of your messages — even to ourselves.

5. Sharing & sale of data

We do not sell, rent, license, or share your personal data with third parties for advertising, marketing, or commercial purposes. Full stop.

The only third parties we transmit any data to are the infrastructure providers necessary to run the app:

  • Apple Push Notification Service and Firebase Cloud Messaging to deliver iOS and Android push notifications.
  • Our hosting provider (a single VPS in the United States) on which our server-side software runs.
  • Apple App Store and Google Play, who handle app distribution. We receive only aggregated, anonymous download and crash statistics from them.

6. Cost of the app

NeighCheck is currently free on iOS and Android. There are no in-app purchases or subscriptions. If that ever changes, we will tell you clearly in-app before any charges occur, and we will not retroactively lock features you already had.

7. Your rights & controls

  • Access: Settings → Export gives you a CSV of every shift you've logged plus a PDF year-end summary.
  • Delete: Settings → Account → Delete Account, or use neighcheck.com/delete-account. Deletion is permanent and removes all cloud data tied to your account, including any Mask you've created.
  • Correction: All shift and profile data is fully editable inside the app.
  • Opt-out of community features: You can use NeighCheck purely as a private tip tracker without creating a Mask or posting anything publicly.
  • Withdraw consent: Disable cloud sync to keep new data on-device only; deletion of your account removes the existing cloud-side data.

8. Children

NeighCheck is intended for tipped and gig workers and is not directed at children under 13. We do not knowingly collect personal information from children under 13. If we learn that we have, we will delete it promptly. If you're a parent or guardian and believe your child has provided us data, email support@neighcheck.com.

9. Data retention

Account and shift data persists until you delete your account. Server access logs are kept for 30 days. Backups of the database are rotated and never kept longer than 60 days. Deleted accounts are unrecoverable.

10. International users

Our servers are located in the United States. By using NeighCheck from outside the US, you consent to the transfer of your data to the United States. If you are in the European Union, the United Kingdom, or California, you have additional rights under GDPR, the UK GDPR, and the CCPA — all of which we already provide to every user as listed above. Contact us to exercise any specific right.

11. Security

Data in transit is protected by TLS. Passwords are hashed using bcrypt. Direct messages are end-to-end encrypted on-device. We follow standard server hardening practices and review access regularly. No system is perfectly secure, but we work to keep yours safer than most.

12. Changes to this policy

We may update this Privacy Policy from time to time. Material changes will be announced in-app and on this page, and the "Last updated" date above will move. Continued use of NeighCheck after that date constitutes acceptance of the updated policy.

13. Contact

Questions about this policy or about your data: support@neighcheck.com. We answer.