DIY Pros
Privacy Policy
Last updated: [DATE]
DRAFT — for attorney review before publication.
This Privacy Policy explains what information DIY Pros ("we," "us," "our") collects when you use the DIY Pros app (the "Service"), how we use it, and who we share it with.
1. Information We Collect
From DIY Users
- Account information: name, email address, and password (stored by our authentication provider using standard secure hashing — we never see or store your plaintext password).
- Payment information: when you save a card, Apple Pay, or bank payment method, your actual card/account details are sent directly to and stored by Stripe, our payment processor. We only retain a non-sensitive reference (e.g., card brand and last 4 digits) to display back to you.
- Session history: which Pro you spoke with, category, duration, cost, and date.
- Refund/dispute records: any written reason you submit when requesting a refund or disputing a denial. These records are retained indefinitely as part of your account history.
- Video reference (optional): if you reach the app through a Pro's embedded badge on a creator's video/page, the page title and URL may be attached to your help request so the Pro knows what prompted it.
From Pros
Everything above, plus: - Identity verification data: processed through Stripe Identity (government ID scan and a live selfie match). DIY Pros receives only the verification result (verified / not verified), not the underlying ID images. - Payout information: bank/payout details are collected and held by Stripe Connect, not by DIY Pros directly. - License information: license number and state, as self-reported by the Pro. DIY Pros does not verify this information against any government or licensing-board database — see the Terms of Service for what this means. - Certification results: your knowledge-assessment scores and the tier they place you in.
Automatically
- Standard technical data needed to operate the Service (device type, app version, basic error logs).
2. Video and Voice Sessions
Live sessions are transmitted in real time through our video provider, Agora, to connect you with your Pro. Sessions are not recorded, and DIY Pros does not retain any video or audio from a session once it ends.
3. Face ID and Biometric Data
If you enable "Use Face ID Instead" at login, your biometric data (your face) is processed entirely by Apple's on-device Face ID system and never leaves your device, and is never seen, transmitted, or stored by DIY Pros in any form. What DIY Pros stores on your device, protected behind Face ID, is an encrypted authentication token — not your biometric data itself.
4. Who We Share Information With
We share information with the following service providers, only as needed to operate the Service:
| Provider | Purpose |
|---|---|
| Stripe | Payment processing, saved payment methods, Pro payouts, identity verification |
| Agora | Real-time video/voice transmission during live sessions |
| Supabase | Database, authentication, and backend hosting |
| Resend | Transactional email (e.g., password reset codes) |
We do not sell your personal information to third parties.
5. Data Retention
Session history and refund/dispute records are kept indefinitely so that account history remains available to you and to DIY Pros for support and dispute-resolution purposes. [PLACEHOLDER: confirm retention period is acceptable, or define a specific retention/deletion schedule.]
6. Your Rights
You may request access to, correction of, or deletion of your personal information by contacting [SUPPORT EMAIL]. Some information (e.g., completed session and payment records) may be retained as required for legal, tax, or dispute-resolution purposes even after a deletion request.
[PLACEHOLDER: if you have or expect users in California, the EU/UK, or other jurisdictions with specific privacy statutes (CCPA/CPRA, GDPR, etc.), this section needs jurisdiction-specific rights language — an attorney should confirm which apply.]
7. Children's Privacy
The Service is not directed to, and may not be used by, anyone under 18. We do not knowingly collect information from anyone under 18.
8. Security
We use industry-standard measures (including encryption in transit and Apple's Keychain/Secure Enclave for on-device biometric-protected data) to protect your information. No system is completely secure, and we cannot guarantee absolute security.
9. Changes to This Policy
We may update this Privacy Policy from time to time. Material changes will be reflected by updating the "Last updated" date above.
10. Contact
Questions about this Privacy Policy can be sent to [SUPPORT EMAIL] or [COMPANY MAILING ADDRESS].