Privacy

What we collect

• Your account: the name you give us, your email address, and your phone number once you verify it. If you sign in with a password we store a one-way hash of it, never the password itself. If you sign in with Google, Facebook or Apple we store that provider’s user id for you and the email address it confirmed.
• If you host: your listings, their addresses, photos, house rules, and the answers you give in the assistant interview, including things like check-in steps.
• If you book: your stay dates, the number of guests, what you paid, and the messages in that booking.
• Messages between guests and hosts, and the assistant’s replies.
• Verification results: whether an identity or property check passed, and why. Documents you upload to prove you control a property.
• Technical records: sign-in times, the emails and texts we sent you, and an audit log of actions taken in your account.

What we never hold

• Card numbers. Payment details are entered directly into Stripe’s payment form and never reach our servers.
• Identity documents or selfies. Identity checks run inside Stripe Identity; we receive only the outcome and a reference number.
• Lock codes, Wi-Fi passwords and other secrets a host stores for a property are encrypted before they are saved, and they are never sent to the assistant’s model. When a guest is entitled to one, the software substitutes the value after the reply is written.

Who else sees your information

We use these companies to run the service. Each sees only what its job needs.

• Amazon Web Services hosts the site and the database, in the United States.
• Stripe takes payments, pays hosts, and runs identity and bank checks.
• Anthropic provides the model behind the assistant. The conversation and the property’s published details are sent there to write a reply. Secrets are not.
• Amazon SES and SNS deliver our emails and text messages.
• Google, Facebook and Apple confirm who you are when you choose one of them to sign in. They tell us your user id, your name and your email address. We do not post anything to them.
• Expo delivers push notifications to the host app.
• PriceLabs reads your calendar and writes your prices, but only if you connect it yourself.

We do not sell your information, and we do not run advertising trackers on the site.

What guests and hosts see about each other

A host sees the name, email address and phone number of a guest who books with them, because they need to reach that guest about the stay. A guest sees the host’s name and the property details. Before a booking, an enquiry shows the host your first name and your message. Reviews are shown publicly under your first name once both sides have written one, or after fourteen days.

Cookies

Two cookies, both necessary. One keeps you signed in. One remembers whether you were last using the hosting side or the traveling side of the site. There are no advertising or analytics cookies.

How long we keep things

• Documents you upload to prove property ownership are deleted ninety days after the decision they supported.
• Bookings, payments and payouts are kept for as long as tax and accounting rules require, because they are financial records.
• The audit log of actions in your account is kept and cannot be edited, including by us.
• Everything else lives as long as your account does.

Deleting your account

You can have your account deleted once you have no upcoming stays and no live listings. Your name is replaced, your email address and phone number are removed, and any organisation you own is closed. Bookings that already happened stay in the financial record without your contact details attached. The steps are on the delete your data page.

Your choices

• Ask us for a copy of what we hold about you, or for a correction, by writing to support@youandhost.com from the address on your account.
• Turn off push notifications in your phone’s settings, and unsubscribe from anything that is not about a booking you are part of.
• Sign in with an email and password instead of Google, Facebook or Apple if you would rather they were not involved.

Children

The service is for adults. Do not create an account if you are under 18.

Changes and contact

If this page changes we will update the date at the top, and tell you by email when the change matters. Questions about privacy go to support@youandhost.com.