Privacy Policy
Last updated 17 September 2026
The short version. Metro Hub holds the information your community needs to run: who lives there, what the board has posted, and what you have booked or reported. We do not sell it, we do not advertise against it, and no resident can see another resident's personal details just by using the app.
Who we are
Metro Hub is an app for a single residential community — an HOA, a condo association or a managed property. Your community's board or manager decides who is invited and what is published. This policy covers the Metro Hub app and metrohub.ai.
Questions about this policy: privacy@metrohub.ai.
What we collect
| What | Why we have it |
|---|---|
| Your name, email address and unit | To place you in the right community and show the board who is a member. Your unit is how a work order or a booking is attributed to a home. |
| Your role — resident, owner, tenant, board member, manager | It decides what you can see. Owner-only documents such as financials and meeting minutes are not shown to tenants. |
| What you post or submit — posts, comments, poll votes, event RSVPs, amenity bookings, work orders | To provide the feature. These are visible to your community according to where you posted them. |
| Photos you attach | Only the ones you pick, only where you attach them — a work order photo, a profile picture. We do not read your photo library. |
| Questions you ask Ask Metro | To answer them, and to keep your chat history so you can return to it. See Ask Metro below. |
| A device token for notifications | To send a push notification to your phone. It identifies the device, not you. |
| Payment details for paid bookings | Handled by Stripe. Card numbers never reach our servers. |
We do not collect your location, your contacts, your microphone or camera feed, your browsing behaviour outside the app, or any advertising identifier. There is no third-party analytics or advertising SDK in the app.
What we do not do
- We do not sell or share your personal information — including under the meanings the CCPA gives those words. There is no advertising in Metro Hub and no data broker relationship.
- We do not show residents each other's personal details. You see a neighbour's name on a post they chose to write. You do not get a directory of who lives where, and you do not see their vehicle, contact or household information.
- We do not use your content to train a general-purpose AI model.
Ask Metro and AI
Ask Metro answers questions using Google Gemini, which runs in Google's cloud, not on your phone. When you ask a question, your question and excerpts of the community documents relevant to it are sent to Google to generate an answer. The app tells you this at the point you use it.
Ask Metro can only reach documents you are already permitted to read. An owners-only document is not searched for a tenant, and an answer never cites one.
Your questions and the answers are stored so your chat history is there when you come back. You can delete that history from the app at any time, and deleting your account deletes it.
Who else sees your information
- Your community. Your board and manager can see the membership list, what you post, and what you submit to them. That is the point of the app.
- Supabase — our hosting and database provider, which stores the data on our behalf.
- Google (Gemini) — for Ask Metro answers and search, as described above.
- Stripe — for paid amenity bookings.
- Apple — to deliver push notifications to your device.
- If the law requires it — a valid legal demand, or to protect someone's safety.
We do not pass your information to anyone else, and none of the providers above is permitted to use it for their own purposes.
How long we keep it
Your account information is kept while your account exists. What you post stays in your community's record until you or the board removes it. When you delete your account, your profile and your personal content are deleted; posts the board has adopted as community records may remain, with your name removed where we can.
Your rights
You can delete your account from inside the app — Profile → Delete account. It is permanent and it removes your personal data from our systems.
If you are a California resident, the CCPA and CPRA give you the right to know what personal information we hold about you and where it came from, to have it deleted, to have inaccurate information corrected, and to limit the use of sensitive personal information. We do not sell or share personal information, so there is nothing to opt out of — but you may still ask. Exercising any of these rights will never get you worse service.
To make a request, email privacy@metrohub.ai from the address on your account. We respond within 45 days.
Security
Data is encrypted in transit and at rest. Access to your community's data is enforced at the database level by row-level security, not only in the app — so a request for something you should not see is refused by the server, not merely hidden by the screen. You can also lock the app with Face ID on your own device.
Children
Metro Hub is not directed at children under 13 and we do not knowingly collect their information. Accounts are created by invitation from a board, for residents.
Changes
If we change this policy we will update the date at the top, and we will tell you in the app if the change is significant.