Privacy policy
Effective date: October 22, 2026.
This app is run by your union ("the union," "we"). It is for members of that union. It is not run by, and does not share data with, the employer. The same app can hold other unions. Each union's roster, messages, and files stay separate.
What we collect and why
Your name and email address. These come from the union's member roster or from the account you create with a department code. You sign in with your email and password. A union admin can send a reset link. When email delivery is turned on, we may also send a 6-digit code to confirm a new account or to reset a password. Only people your union has approved can see union content.
Your role. This records whether you're a member or an officer, so officers can post and manage content.
Your phone number, if you add one. It stays in your profile. We do not text you.
Your shift letter, if you set one. It is optional and is deleted with your account.
Event RSVPs. This is your Yes or No for each event. Officers can see who is coming so they can plan headcounts.
Chat messages. These are messages you send in the app's chats, along with your name and the time you sent them, plus photos and files you attach. Other members in that chat can see them. Officers can remove messages.
GIFs. When you search GIFs, the words you type are sent to GIPHY through our server. We do not send GIPHY your name, email, phone, or account id. If you leave the search blank, we ask GIPHY for trending results the same way, still without your identity. GIPHY's own privacy policy applies. Results are limited to G and PG. A GIF you send is loaded from GIPHY's servers. Sticker search in that sheet works the same way. The sticker pack built into the app is not sent to GIPHY. When a GIF or GIPHY sticker loads, it comes straight from GIPHY's servers, so GIPHY may receive your device's IP address, even if you didn't search for it.
Notification previews. Chat notifications show a short preview of the message on the lock screen by default. That can be the start of the message, or a note that someone sent a GIF, a sticker, or a reply. You can turn previews off in Profile, then Notifications, with Show message previews. When that is off, the alert says New message and does not include the message text.
Read receipts. The app records when you read a message. Only the E-Board member or shift rep who sent it can see that you read it. Read receipts are always on. There is no off switch.
Device push tokens (Device ID) are stored, linked to the user, used only for app functionality and not for tracking. Your user ID (account ID) is stored, linked to you, used only for app functionality, and not for tracking. If you allow notifications, we use the token to send chat messages, broadcasts, and urgent union alerts. You can turn notifications off in the app or in your phone's settings.
Live streams. When someone with Go live starts a camera stream, their camera video and microphone audio are sent to signed-in members of that union who are allowed to watch. Each viewer is identified to the stream by their member id and display name while they are connected. The live chat clears when the stream ends. Streams are not recorded.
YouTube. If an officer uses the YouTube link, the video plays from YouTube through the privacy-enhanced domain youtube-nocookie.com. YouTube may receive your IP address while the video plays. We do not send YouTube your name, email, or the member roster.
Announcements and events. Officers post these, and members who can open them can see them.
Event location text. When you type a location on an event, that text is sent to Apple Maps through our server so the app can suggest places. If the union has set a map area, that latitude and longitude are sent with the search. We do not send your name or email, and we do not read your phone's location. You can type any location and save it without choosing a suggestion. Saved places stay in the union's database. Only the address search in Org settings uses Photon (photon.komoot.io) and OpenStreetMap.
We do not collect your device location, contacts, or payment information. We do not sell your data, show ads, or track you across other apps or websites. There are no analytics pixels.
Where your data is stored
Your data is stored with Supabase, a cloud database provider, on secure servers in the United States (West). Push notifications are sent through Expo's push service and Apple's push service. Confirmation and reset emails are sent through Supabase's email service. While a camera stream is on, LiveKit Cloud receives the camera video, the microphone audio, and a viewer identifier (member id and display name). Streams are not recorded. YouTube receives playback traffic only if an officer uses the YouTube link. Apple Maps receives the event location text you type, and the union's map area when one is set, through our server. Photon (Komoot), using OpenStreetMap, receives the address text and the union's map area, only for the Org settings address search. Data © OpenStreetMap contributors. GIPHY receives GIF and sticker search words, or a request for one GIF or sticker id, through our server. It does not receive your name or account. The image is then loaded from GIPHY, which may receive your IP address. These providers handle data only to run the app for us.
Who can see your data
Other members can see your name on chat messages and in the shared chats.
Officers can see the roster, RSVPs, and chats, and can manage posts and members. Only the E-Board member or shift rep who sent a message can see who read it.
Nobody outside the union gets your data, except the service providers listed above, or if the law requires it.
Deleting your account and data
You can delete your account at any time in the app. Go to Profile, tap Delete account, and confirm. This permanently deletes your sign-in account, profile, RSVPs, push token, read receipts, and the chat messages you sent. It can't be undone. You can also ask an officer to delete it for you. We'll do it within 30 days.
The union-owned roster row stays, marked inactive. If you leave the union, officers will remove you from the roster, and that locks the account out.
Questions about this policy? Email support@unionhall.app.
How long we keep data
We keep your data while you're on the member roster and have an account. Once you delete your account or are removed from the roster, your data is deleted. Backups held by our provider expire within 30 days.
Children
The app is for union members, who are adults. We don't knowingly collect data from anyone under 18.
Changes
If we change this policy, we'll post the new version here and announce it in the app.