On the device
Privacy notes
These notes describe Homeless X Phase 1. They are not a promise about a future server. Until a server exists, accounts, posts, messages, reports, and referrals stay in app storage on the phone that created them.
This website
homelessx.apphaus.us is a static explanation. It has no account form, no comment form, and no analytics script. A request for a page is handled by Cloudflare so the site can be served. The pages themselves do not ask for your name, phone, email, or location.
The phone app
Signing up asks for an email or a phone number and a role: seeking, donor, family, volunteer, or public. The default tier is public. Nothing on the core map, food list, lost and found, or skill share is locked behind a referral.
Quiet mode hides your location from everyone except contacts you explicitly trust. You can always see your own pin. A donor, family member, or public account cannot see another person’s precise location. Seeking and volunteer accounts can see it only when quiet mode allows.
Direct messages are one to one. The app does not pass a message through other people. A thread does not share an address or a precise location until both people confirm. Every thread and every profile has a report control. In this build the report is saved on the device.
Location history
Location points kept for the account roll off after 30 days. The map of facilities is separate: those pins are public places from OpenStreetMap, not a trail of where a person has been.
Export
The app can export the signed-in profile, that account’s posts, and that account’s messages as one JSON file. The export format is marked homeless-x-json-v1. It is the copy you can keep before you delete anything.
Deletion
Account deletion asks you to confirm. It removes the personal record, that account’s posts and messages, reports tied to the account, and referral edges. It also removes the account id from other people’s trusted-contact lists stored on the same device. Tier credit that was already earned can remain as credit without the deleted person’s id. Deletion on one phone does not reach a copy that was never uploaded, because this build does not upload it.
Inactive accounts
The app includes a rule that anonymizes an account after 12 months without activity. In this build that rule runs on the device. A future server would have to apply the same rule. It is not a remote purge today.
What does not cross roles
Precise location and message history stay inside the role rules above. A donor can read public listings and send a direct message. A donor does not receive another person’s precise location or another person’s message history. Family messaging does not hop across several people.
Referrals
A referral code can be generated and shared. Applying it does not raise a tier until the activity check is credited. The 30-day check in this build is a stub: it does not wait 30 real days, and it does not contact a server. Tiers cap at three. Perk wording is placeholder copy.