PRIVACY POLICY

Effective Date: July 29, 2026 Last Updated: July 29, 2026

This Privacy Policy explains how Hugs911 Homeowners Utility Guide Service ([[CONFIRM LEGAL ENTITY: e.g. “Hugs911 LLC, a [State] limited liability company”]]) (“Hugs911,” “we,” “us,” or “our”) collects, uses, shares, and protects information when you use:

the Hugs911 mobile app for iPhone and Android;
the Hugs911 website at hugs911.com; and
the public Hugs911 property map and any Hugs911 profile page reached from it.

Together these are the “Service.” This Policy applies to all of them.

If you do not agree with this Policy, please do not use the Service. Your use of the Service is also governed by our Terms of Service.

1. THE SHORT VERSION

This is a plain-language summary. It does not replace the full Policy below — please read the whole thing, especially Section 4.

We collect the information you type in. Your name and email, your property address, a satellite image of your property, the locations of your gas/water/electric shutoffs, and details about the people and pets in your household — which can include medical information such as allergies, medications, conditions, and blood type.
You choose what is public. Every household and pet field has its own Public/Private toggle. Some fields are public by default. See Section 4 for the exact list.
When your property is published, the public parts are visible to anyone on the internet. Not just to first responders. Anyone who finds your property on the Hugs911 map — or who calls our public web address for it — can see your street address, your name, your emergency contact numbers, your shutoff locations, and any field marked Public. No login and no PIN is required to see that information.
Private fields are hidden behind your PIN. Anyone who enters your correct PIN sees everything, including all medical information. Choose and share your PIN carefully.
We do not sell your data. We do not rent, lease, or trade it, we do not use it for advertising, and we do not share it with data brokers.
You can delete everything. Delete your account from inside the app, or use our web portal at https://hugs911.com/delete-account. Deletion is permanent.
Hugs911 is not 911. We are not an emergency dispatch service, and we do not transmit your information to emergency services. See Section 3 of the Terms of Service.

2. INFORMATION WE COLLECT

2.1 Information you give us

Account information. Your first name, last name, and email address. We also store the password you set — as a one-way cryptographic hash held by Google Firebase Authentication. We never see or store your password in readable form.

Your Property PIN. A numeric code you create. It controls who can view the information you mark Private.

Property information. The street address you select, the Google Place identifier for that address, the latitude and longitude of the property, a geographic index (geohash) derived from those coordinates, and a satellite image of the property captured from Google Maps.

Utility shutoff information. For each of gas, water, and electricity: the position you place the pin on your satellite image, and the description or note you write for it (for example, “behind the gate on the north side, requires a wrench”).

Household member information. For each person you add: first name, last name, relationship to you, date of birth, phone number, blood type, allergies, medications, medical conditions, and free-text notes or special instructions.

Pet information. For each pet you add: name, species, breed, age, physical description, temperament, microchip number, medications, conditions, and notes.

Emergency contacts. A primary and a secondary emergency contact for your property.

Contractor information. If applicable, a contractor name and license number.

Support communications. If you email us or submit a form, we receive what you send, including your email address and the contents of your message.

2.2 Health and medical information

Some of the fields above are, or can contain, health information: allergies, medications, medical conditions, blood type, disability or mobility information, and diagnoses or conditions you choose to describe in a notes field (for example, autism, epilepsy, dementia, or diabetes).

You are never required to enter health information to use Hugs911. Every one of these fields is optional. You can leave them blank, map your utility shutoffs, and use the rest of the Service normally.

We treat health information as sensitive. See Section 9 for how it is handled, and our separate Consumer Health Data Privacy Policy for the disclosures required by Washington and Nevada law.

2.3 Payment information

Subscriptions are sold and processed by Apple (App Store / StoreKit) or by Google (Google Play Billing) — not by us.

We never receive, see, or store your card number, bank details, or billing address. What we receive from Apple or Google is limited to a transaction identifier, the product purchased, the subscription status, and the renewal or expiration date. We use that only to turn your access on or off.

Apple’s and Google’s handling of your payment information is governed by their own privacy policies, linked in Section 8.

2.4 Information collected automatically

In the app. Your device’s approximate or precise location, but only while you are using the map or address-search features, and only if you grant permission. We use it to center the map near you and to find nearby properties. We do not track your location in the background, and we do not store your device’s location history.

Server logs. Our servers, and Google’s infrastructure on our behalf, record technical information about requests: IP address, timestamp, the resource requested, HTTP status, user-agent string, and error diagnostics. These are used for security, abuse prevention, and debugging.

On the website. Standard web server logs, plus the cookies described in Section 15.

2.5 What we do NOT collect

To be explicit — Hugs911 contains no advertising SDKs, no third-party analytics or attribution SDKs, and no social-media tracking pixels in the app. We do not collect your contacts, your photo library, your microphone or camera input, your device advertising identifier, your browsing history outside our own site, or your biometric data.

3. HOW WE USE INFORMATION

We use the information described above only to:

create and maintain your account, and authenticate you when you sign in;
build, store, and display your property profile, utility map, satellite image, and household records;
generate your Hugs911 Certificate PDF when you request one;
publish the public portions of your profile to the Hugs911 map, and serve your profile page to anyone who looks it up — subject entirely to your Public/Private settings;
verify your PIN when someone attempts to unlock private information;
activate, renew, suspend, and cancel your subscription based on the status Apple or Google reports to us;
respond to your support requests and account or data deletion requests;
send you service and transactional messages — for example, password resets, email-address changes, receipts, material changes to these documents, and notices about your account;
keep the Service secure: detect and investigate fraud, abuse, unauthorized access, and technical failures;
debug, maintain, and improve the Service; and
comply with law and enforce our Terms of Service.

We do not use your information for advertising, profiling, behavioral targeting, or automated decision-making that produces legal or similarly significant effects.

4. HOW YOUR INFORMATION BECOMES PUBLIC — PLEASE READ THIS CAREFULLY

This is the most important section of this Policy. Hugs911 is designed to make certain information about your property deliberately available to people who are not you — that is the point of the product. You should understand precisely what that means before you publish.

4.1 Before your subscription is active

While your subscription is inactive or pending, your property does not appear on the public Hugs911 map, and our public web address for your property returns “not found.” You can fill in everything and it stays private to your account.

4.2 Once your subscription is active and your property is published

Your property is published to the public Hugs911 map once your subscription is active and you have placed all three utility pins (gas, water, electric) and uploaded your satellite image. From that point:

The following is visible to ANYONE, with no login, no account, and no PIN:

CATEGORY	SPECIFIC DATA
Property	Street address; Google Place ID; exact latitude and longitude; the satellite image of your property
Utilities	The mapped location of your gas, water, and electric shutoffs, and the description you wrote for each one
You	Your first name; your last name; your primary emergency contact; your secondary emergency contact
Each household member	First name; plus every field you have left set to Public
Each pet	Pet name; plus every field you have left set to Public

“Anyone” means anyone. This includes neighbors, passers-by, and people who scan a Hugs911 QR code — but it also includes people you have never met, anywhere in the world, who browse the public map or query our public web address for your property directly. This information is served over the open internet and may be cached by internet infrastructure, indexed by search engines, or copied by third parties. We cannot retract information that has already been viewed, cached, or copied.

4.3 Public-by-default fields

When you add a new household member or pet, these fields start out Public unless you change them:

For a person: first name, last name, and allergies.
For a pet: pet name, species, and breed.

Every other field — date of birth, phone number, blood type, medications, conditions, relationship, notes, pet age, description, temperament, and microchip number — starts out Private.

Note that a household member’s allergies are public by default. Allergy information is health information. This default exists because allergies are among the most time-critical things a responder or Good Samaritan needs to know. If you do not want a person’s allergies visible to the public, you must switch that field to Private yourself. We recommend that you review the Public/Private toggles for every household member — particularly for children — before you publish.

Your first name, last name, and emergency contact numbers, and all of your property and utility information, do not have Public/Private toggles. They are public whenever your property is published. If you are not comfortable with that, do not publish your property; you can still use Hugs911 and generate a Certificate PDF for offline use.

4.4 PIN-protected information

Anything you mark Private is withheld from public responses. It is released only when someone submits your correct Property PIN.

Anyone who has your PIN can see everything — every private field, including all medical information, for every person and pet in your household. The PIN is the only barrier. We cannot tell whether the person entering it is a paramedic or a stranger.

You are responsible for choosing a PIN that is not easy to guess and for deciding who to give it to. Do not reuse a PIN you use for banking, your phone, or anything else. If you believe your PIN has been exposed, change it in the app immediately.

4.5 The Certificate PDF and sharing

When you generate a Hugs911 Certificate, the resulting PDF is a plain document on your device. If you email it, message it, print it, or post it, its contents are no longer under our control or protected by your PIN or privacy settings. Anyone who receives the file can read everything in it and forward it further.

4.6 Turning publication off

You can remove your property from the public map at any time by making your subscription inactive (cancel it, or let it lapse) or by deleting your account (Section 12). Removal from the map is not the same as deletion — see Section 12 for how to actually erase your data.

5. HOW WE SHARE INFORMATION

Beyond the public disclosure that you control and that is described in Section 4, we share information only in these situations:

5.1 Service providers. We use the vendors listed in Section 8 to host, store, and operate the Service. They may process your information only to provide services to us, under contract, and may not use it for their own purposes.

5.2 App stores. Apple and Google process your subscription and tell us whether it is active. We do not send them your property or household data.

5.3 Our own personnel. A small number of authorized Hugs911 administrators can access account records, property records, and household records through an internal admin tool. This access exists so we can provide support, investigate abuse, correct data, and carry out deletion requests. Access is limited to personnel who need it and is logged.

5.4 Legal requirements. We may disclose information if we are required to by law, subpoena, warrant, court order, or other valid legal process, or where we believe in good faith that disclosure is necessary to protect the safety of any person, to investigate fraud, or to protect our legal rights. Where we are permitted to notify you, we will try to.

5.5 Business transfers. If Hugs911 is involved in a merger, acquisition, financing, reorganization, or sale of assets, information may be transferred as part of that transaction. Any acquirer will remain bound by this Policy for information collected before the transfer, or we will give you notice and a chance to delete your data before a materially different policy applies.

5.6 With your direction. When you ask us to — for example, when you use the app’s share sheet to send your Certificate to someone.

5.7 What we never do

We do not sell your personal information. We do not “share” it for cross-context behavioral advertising as those terms are defined under California law. We do not disclose your health information for advertising, and we have never done so. We do not provide your information to data brokers, list brokers, insurers, employers, landlords, or credit agencies

6. SERVICE PROVIDERS AND THIRD PARTIES

PROVIDER	WHAT THEY DO FOR US	WHAT THEY CAN ACCESS	THEIR POLICY
Google LLC — Firebase Authentication, Cloud Firestore, Cloud Storage, Cloud Functions, Firebase Hosting	Hosts our entire backend: accounts, database, images, server code, and website	All data you store in the Service, as our processor	https://firebase.google.com/support/privacy · https://policies.google.com/privacy
Google LLC — Google Maps Platform, Places API, Maps SDK	Address search, map display, satellite imagery	Address searches you perform and map interactions; your device location if you grant it	https://policies.google.com/privacy · https://cloud.google.com/maps-platform/terms
Apple Inc. — App Store, StoreKit, In-App Purchase	Sells and processes iOS subscriptions	Your Apple Account and payment details (we never see them); the fact of your purchase	https://www.apple.com/legal/privacy/
Google LLC — Google Play, Play Billing	Sells and processes Android subscriptions	Your Google Account and payment details (we never see them); the fact of your purchase	https://policies.google.com/privacy

Our data is stored on Google Cloud infrastructure in the United States (us-central1).

[[TO CONFIRM: if you add an email-sending service (SendGrid, Postmark, Mailgun), an error-reporting service (Crashlytics, Sentry), or any analytics, it must be added to this table before launch.]]

7. USE OF GOOGLE MAPS

The Service uses Google Maps. By using it you also agree to be bound by Google’s Terms of Service, and Google’s use of information is governed by the Google Privacy Policy.

8. HEALTH INFORMATION

8.1 Hugs911 is not a healthcare provider, and HIPAA does not apply

Hugs911 is not a doctor’s office, hospital, insurer, clearinghouse, or other “covered entity,” and we are not a “business associate,” under the Health Insurance Portability and Accountability Act (“HIPAA”). The health information you enter into Hugs911 is not protected health information under HIPAA, and HIPAA’s protections do not apply to it.

That does not mean it is unprotected. It is protected by this Policy, by your Public/Private settings, by your PIN, and by state consumer health data laws — including the Washington My Health My Data Act and Nevada SB 370, which we address in our separate Consumer Health Data Privacy Policy.

8.2 How we treat it

We collect health information only because you type it in. We do not obtain it from medical records, pharmacies, insurers, wearables, Apple Health, Google Health Connect, or any other outside source.
We use it for one purpose only: to store it and to display it according to your privacy settings so that it is available in an emergency.
We do not use it for advertising, marketing, research, product development, model training, scoring, or profiling.
We do not sell it, and we do not disclose it to insurers, employers, landlords, or government agencies except as required by valid legal process (Section 5.4).
We do not use it to determine anyone’s eligibility for employment, insurance, housing, or credit.

8.3 It is not medical advice

Hugs911 stores information; it does not interpret it. Nothing in the Service is medical advice, diagnosis, or treatment, and no one at Hugs911 reviews your health entries for accuracy or completeness. Never delay contacting 911 or a medical professional because of anything in the Service.

9. CHILDREN AND OTHER PEOPLE IN YOUR HOUSEHOLD

9.1 The Service is for adults

Hugs911 is not directed to children. You must be at least 18 years old to create a Hugs911 account. We do not knowingly permit anyone under 18 to register.

9.2 Information about children living in your home

You may add children as household members, and doing so is often the point — a responder needs to know a child is in the house, which room, and what they are allergic to.

When you enter information about a minor, you represent that you are that child’s parent or legal guardian, or that you have their parent’s or guardian’s permission. You are consenting on that child’s behalf to the collection and — if you mark fields Public — the public disclosure of their information.

Please think carefully here. A child’s first name, last name, and allergies are public by default once your property is published (Section 4.3). If you do not want a child’s name or health information publicly visible, set those fields to Private before publishing.

If you believe a child’s information is in Hugs911 without proper authority, contact us at privacy@hugs911.com and we will remove it.

9.3 Information about other adults

The same principle applies to every adult you add. Before you enter someone else’s name, phone number, date of birth, or medical information — and especially before you mark any of it Public — you need that person’s permission. They have privacy interests of their own. If someone asks us to remove their information from your profile, we may do so and will notify you.

10. HOW LONG WE KEEP INFORMATION

Account and profile data — kept while your account exists. Cancelling your subscription does notdelete it; it only unpublishes your property.
After you delete your account — your account record, profile, household and pet records, property record, utility pins, subscription record, and satellite images are deleted from our live systems immediately (Section 12).
Encrypted backups — our hosting provider retains point-in-time backups. Deleted records age out of those backups within 90 days.
Server and security logs — up to 90 days, then deleted. Logs may contain IP addresses but do not contain your household or health data.
Deletion requests — we keep a minimal record (the email address, and the date requested and fulfilled) for up to 2 years, so we can show we honored the request. You can ask us to delete that record too.
Transaction records — Apple and Google keep their own purchase records under their own policies. We keep the minimal subscription record we need for tax, accounting, and audit purposes for up to 7 years, as law requires. It contains no health or household data.

11. SECURITY

We take reasonable administrative, technical, and physical measures to protect your information, including:

data encrypted in transit (TLS/HTTPS) and at rest on Google Cloud infrastructure;
passwords stored only as one-way hashes, by Google Firebase Authentication;
server-side access rules so that one account cannot read another account’s private records;
private fields filtered out on our servers before a public response is sent, so private data is never delivered to a browser that has not supplied the correct PIN;
administrative access limited to authorized personnel and requiring elevated credentials.

No system is perfectly secure. We cannot guarantee that your information will never be accessed, disclosed, altered, or destroyed by breach of our safeguards. You also play a real part: use a strong, unique password; do not share your login; choose a PIN that is not guessable; and remember that anything you mark Public is intentionally not protected at all.

If a breach affecting your personal information occurs, we will notify you and the appropriate authorities as required by applicable law.

12. HOW TO DELETE YOUR ACCOUNT AND YOUR DATA

You can delete your Hugs911 account and all associated data at any time, by either method:

In the app

Open the account panel → Account → Delete Account, and confirm. This runs immediately and is permanent.

On the web — no login required

Go to https://hugs911.com/delete-account and submit the email address on your account. We will contact that address to confirm it is you, then permanently delete the account. We complete verified requests within 30 days, and usually much faster.

By email

Write to privacy@hugs911.com from the address on your account, with the subject “Delete my account.”

What gets deleted

Your login credentials; your profile (name, email, PIN, emergency contacts, contractor details); every household member and pet record, including all medical information; your property record, address, coordinates, and all three utility pins; your satellite images and any stored snapshots; and your subscription record. Your property is removed from the public map.

What to know before you delete

It is permanent. We cannot restore a deleted account, and we cannot recover your utility map, household records, or Certificate. Generate and save your Certificate PDF first if you want a copy.
Deleting your account does not cancel your subscription. Subscriptions are billed by Apple or Google, and only you can cancel them, in your App Store or Google Play account settings. Cancel your subscription first, then delete your account, or you may continue to be charged. See Section 8 of the Terms of Service.
Deletion does not reach copies already made. Anything already publicly viewed, cached, screenshotted, or shared as a PDF is beyond our reach.
We may retain a minimal amount of data where law requires it — see Section 10.

13. YOUR PRIVACY RIGHTS

13.1 Rights available to everyone using Hugs911

Regardless of where you live, you can:

See and correct virtually all of your information directly in the app, at any time;
Request a copy of the personal information we hold about you, in a portable format;
Delete your account and data (Section 12);
Withdraw consent to public display, by changing your privacy toggles or unpublishing;
Opt out of non-essential email using the unsubscribe link. We will still send transactional and security messages while you have an account.

13.2 State privacy rights

Depending on your state of residence — including California, Colorado, Connecticut, Virginia, Utah, Texas, Oregon, Montana, Delaware, Iowa, Nebraska, New Hampshire, New Jersey, Minnesota, Maryland, Tennessee, Indiana, Kentucky, Rhode Island, and others as their laws take effect — you may have the right to:

know what personal information we collect, the purposes, the categories of sources, and the categories of recipients;
access and obtain a portable copy;
correct inaccurate information;
delete your personal information;
opt out of sale, of targeted advertising, and of profiling with legal or similarly significant effects — we do none of these three things, so there is nothing to opt out of;
limit the use of sensitive personal information. Under California law, health information is sensitive personal information. We use it only for the purposes in Section 8.2, which are the purposes permitted without a right to limit — but if you want it removed, delete the fields in the app or delete your account;
not be discriminated against for exercising any of these rights. We will not deny you the Service, charge you a different price, or give you a lesser experience because you exercised a privacy right.

13.3 Washington and Nevada consumer health data rights

If you are a Washington or Nevada resident, you have additional rights concerning consumer health data — including the right to confirm whether we collect, share, or sell it, the right to withdraw consent, and the right to have it deleted. We do not sell consumer health data. These rights and the disclosures those laws require are set out in our separate Consumer Health Data Privacy Policy.

13.4 How to exercise your rights

Email privacy@hugs911.com with your request and the email address on your account. You may also write to us at the address in Section 19.

We will verify your identity, usually by confirming control of your account email, before we act. We may ask for more information if we cannot verify you; if we cannot, we must decline, and we will tell you why.

Timing. We respond within 45 days. If we need more time we will tell you within that period and may extend by another 45 days. There is no charge, unless a request is excessive or repetitive, in which case we will tell you before doing anything.

Authorized agents. You may use an authorized agent. We will require written proof of authorization and may still verify you directly.

Appeals. If we deny your request, you may appeal by replying to our decision with the word “Appeal.” We will respond to an appeal within 45 days with our decision and reasons. If we deny your appeal, you may contact your state Attorney General.

13.5 California “Shine the Light”

California residents may request information about disclosures of personal information to third parties for their direct marketing purposes. We make no such disclosures. Requests: privacy@hugs911.com.

14. COOKIES AND WEBSITE TRACKING

In the mobile app: no cookies, no advertising identifiers, no third-party trackers. The app stores your session token and local preferences on your device.

On hugs911.com: we use cookies and similar technologies that are strictly necessary to make the site work — keeping you signed in, remembering your display preferences, and preventing abuse. [[TO CONFIRM WITH WEB DEVELOPER: the WordPress site may also set cookies from WordPress itself, from comments, and from any plugins, embeds, or e-commerce components in use. That list must be verified and reflected here, and a cookie banner added if any non-essential or analytics cookies are set.]]

Do Not Track and Global Privacy Control. We do not track you across other websites, so there is nothing for a DNT signal to switch off. We honor the Global Privacy Control (GPC) signal where applicable.

Embedded content. Pages on our site may include embedded content (for example, maps or videos) from other sites. Embedded content behaves as if you visited that other site, and that site may collect data about you and set its own cookies. We do not control it.

15. LINKS TO OTHER SITES

The Service may link to sites we do not operate. We are not responsible for their content or privacy practices. Read their policies before giving them information.

16. UNITED STATES ONLY

Hugs911 is offered in and directed to the United States, and all data is stored and processed in the United States. We do not target or market the Service to individuals in the European Economic Area, the United Kingdom, or Switzerland. If you access the Service from outside the United States, you do so on your own initiative and you consent to the transfer of your information to, and its processing in, the United States, where privacy laws may differ from those where you live.

17. CHANGES TO THIS POLICY

We may update this Policy. When we do, we will change the “Last Updated” date at the top and post the new version here.

If a change is material — for example, a change in what we collect, how we use it, who we share it with, or what is public by default — we will give you notice before it takes effect, by email to the address on your account and by an in-app notice, and where the law requires it we will ask for your consent. Continuing to use the Service after a change takes effect means you accept the updated Policy.

We will keep prior versions available on request.

18. CONTACT US

Privacy questions, requests, and complaints: Email: privacy@hugs911.com

General support: Email: support@hugs911.com

Mail: Hugs911 Homeowners Utility Guide Service Attn: Privacy [[TO CONFIRM: street address, city, state, ZIP — a mailing address is required for CCPA-covered businesses and is expected by both app stores]]

We aim to respond to every privacy inquiry within 10 business days, and to formal rights requests within the timeframes in Section 13.4.

APPENDIX — APP STORE DISCLOSURE MAPPING

This appendix is for whoever submits the app. It is not part of the Policy and can be omitted from the published web page — but the two store forms must match it.

Apple App Privacy (“nutrition label”) — App Store Connect

DATA TYPE	COLLECTED	LINKED TO IDENTITY	USED FOR TRACKING	PURPOSE
Name	Yes	Yes	No	App Functionality
Email Address	Yes	Yes	No	App Functionality
Phone Number	Yes	Yes	No	App Functionality
Physical Address	Yes	Yes	No	App Functionality
Precise Location	Yes	Yes	No	App Functionality
Coarse Location	Yes	Yes	No	App Functionality
Health & Fitness — Health	Yes	Yes	No	App Functionality
Sensitive Info(medical/disability)	Yes	Yes	No	App Functionality
Photos or Videos (satellite snapshot)	Yes	Yes	No	App Functionality
Other User Content (pins, notes)	Yes	Yes	No	App Functionality
Purchases	Yes	Yes	No	App Functionality
User ID	Yes	Yes	No	App Functionality
Crash / Performance / Other Diagnostic	Yes	No	No	App Functionality

Tracking: NO. No ATT prompt is required. Nothing is used for advertising.

Google Play Data Safety — Play Console

Data collected AND stored: Name; Email address; Phone number; Address; Precise location; Approximate location; Health info; Photos; Files/docs; App activity; Purchase history; User IDs; Crash logs.
Encrypted in transit: Yes. Encrypted at rest: Yes.
Data shared with third parties: No. (Processors acting on our behalf are not “sharing” under Play’s definition — confirm each vendor’s classification at submission.)
Users can request data deletion: Yes — in-app, and at https://hugs911.com/delete-account.
Users can request account deletion: Yes — same.
Data collection is optional: Health information is optional; account and property data are required to use the Service.
Committed to Play Families Policy: No — the app is 18+.
Independent security review: No.

Required declarations

Sensitive/health data: both stores must be told the app collects health information. Do not understate this.
Publicly visible data: Apple’s form and Google’s form both need to reflect that user-designated data is made publicly available.
Account deletion URL for Play Console: https://hugs911.com/delete-account
Privacy Policy URL for both stores: https://hugs911.com/privacy
Terms of Use / EULA URL for both stores: https://hugs911.com/terms