Privacy Policy
- Housing operators use ResidentLift to run their houses. Information about residents and applicants belongs to the operator, and we handle it only to provide the service to them.
- We don't sell personal information, use it for advertising, or share it except with the service providers that run ResidentLift.
- Each operator's data is kept separate from every other operator's, and access is limited by role.
- If you are a resident or applicant, the house you applied to or live at controls your records. Contact them first, and we'll help them respond.
1. Who we are and what this covers
ResidentLift LLC, a Wyoming limited liability company ("ResidentLift", "we", "us"), provides software for operators of recovery residences, sober living homes and transitional housing (each an "Operator"). This policy covers the ResidentLift app at app.residentlift.com, our website at residentlift.com, our emails and related services (the "Service").
We play two different roles:
- For Operators' account and billing information (the people who sign up for and manage ResidentLift), we decide how the information is used, and this policy applies directly.
- For information about residents, applicants and house staff that an Operator puts into the Service ("Resident Data"), we act as the Operator's service provider. The Operator decides what is collected and how it is used, under its own policies and the law. We process Resident Data only to provide the Service to that Operator, as set out in our Terms of Service. If you are a resident or applicant, please read the Operator's own privacy notice and contact them with questions.
2. Information we collect
From Operators and their staff
- Account information: name, email, phone, password (stored only as a secure hash), business and house names, role, and settings.
- Signup information: how many houses you run, the date and version of the Terms you accepted, and the IP address and browser used to sign up (used to prevent abuse).
- Billing information: your plan, number of houses and billing history. Card and bank details are collected and stored by our payment processor, Stripe. We never see or store full card numbers.
- Communications: messages you send us, and questions you ask the in-app help assistant.
- Technical information: IP address, browser and device type, pages and actions in the app, and error logs, collected by our hosting and database providers to keep the Service running and secure.
Resident Data (on behalf of Operators)
Depending on how an Operator uses the Service, Resident Data can include: names and contact details; room and bed assignments; move-in and move-out dates; rent amounts, balances, payments and credits; pay schedules and income source; intake and screening form answers; drug screen results; recovery meeting attendance; notes; uploaded documents; electronically signed agreements and the signing details (name, signature image, date and time, and related technical details); release-of-information consents; and, for residents who use the resident portal, their login email and activity. Applicants who fill out an Operator's public screening form give their name, contact details and the answers the Operator asks for.
Some Resident Data is sensitive, including information that reveals that a person is in recovery from a substance use disorder. Operators should collect only what they need.
3. How we use information
- To provide, maintain and secure the Service, including signing people in and keeping each Operator's data separate.
- To do what Operators ask, such as sending rent reminders, signing links, intake and screening forms, and notices to their residents and applicants.
- To manage free trials, subscriptions and billing, and to send service, billing and security emails.
- To provide support. Our authorized personnel can access an Operator's account to help with support requests and to fix problems, and do so only for those purposes.
- To prevent fraud and abuse, for example by limiting signups from the same network.
- To understand how the Service is used, in aggregated form that doesn't identify any Operator, resident or person, and to improve it.
- To comply with the law and enforce our Terms.
We do not sell personal information, share it for cross-context behavioral advertising, use Resident Data for marketing, or use Resident Data to train AI models.
4. How information is shared
With the Operator and their team. Resident Data is visible to the Operator's authorized staff according to the roles the Operator sets. Residents see their own portal information.
With our service providers, who process information for us under contracts that require them to protect it and use it only to provide their services:
| Provider | What they do |
|---|---|
| Supabase | Database, sign-in, file storage and server functions (United States) |
| Netlify | Hosting the app and website |
| Stripe | Subscription billing for Operators, and online rent payments for Operators who turn them on |
| Resend | Sending emails, such as confirmations, rent reminders and notices |
| Anthropic | The AI model behind the in-app help assistant. It receives only what is typed into the assistant. |
| Google Fonts, jsDelivr, cdnjs | Delivering fonts and code libraries to your browser. They receive your IP address and browser details when files load. |
For legal reasons. We may disclose information if we believe in good faith it is required by law, subpoena or court order, or necessary to protect the safety, rights or property of people or of ResidentLift. When a request concerns Resident Data, we will refer it to the Operator where we lawfully can, and we will resist requests that the law doesn't require us to fulfill. Records covered by 42 C.F.R. Part 2 receive the protections that rule requires.
Business transfers. If ResidentLift is involved in a merger, acquisition or sale of assets, information may be transferred as part of it, subject to this policy, and we will notify Operators.
5. Health information, HIPAA and 42 C.F.R. Part 2
Recovery residences are often not covered by HIPAA, and ResidentLift does not currently sign HIPAA business associate agreements. Operators who are covered by HIPAA must not use the Service for protected health information without a written agreement with us (see our Terms).
Some Operators run programs whose records are protected by the federal confidentiality rules for substance use disorder records at 42 C.F.R. Part 2. The Service includes consent and release-of-information tools with the required re-disclosure notice to help those Operators. Each Operator is responsible for deciding whether Part 2 applies and for meeting its requirements. We handle Resident Data only on the Operator's behalf and do not re-disclose it except as described in this policy or required by law.
The emails the Service sends to residents are designed not to include drug screen results, diagnoses or treatment details.
6. Cookies and browser storage
The app uses your browser's storage to keep you signed in and to remember small preferences, such as how a list is displayed. The app does not use advertising cookies or third-party tracking. If we add analytics or advertising tools to our marketing website, we will update this policy and offer any choices the law requires.
7. How we protect information
- Data is encrypted in transit (HTTPS) and at rest by our database provider.
- Database rules keep each Operator's data separate, so one Operator's staff cannot see another's records.
- Access within an account follows the roles the Operator assigns, and certain records can only be changed by the right person (for example, residents sign their own consents).
- Passwords are stored as secure hashes, and new accounts must confirm their email address.
- Access by our personnel is limited to what support and operations require.
No system is perfectly secure. If we learn of a security incident that affects personal information, we will notify affected Operators without undue delay and provide the information they need to meet their own notification duties, and we will notify individuals and authorities where the law requires us to.
8. How long we keep information
- Account and Resident Data: for as long as the Operator's account is open. After an account is closed, it stays available read-only for at least 30 days so the Operator can export it, and is then deleted, or within 90 days of a written deletion request.
- Backups: deleted data can remain in encrypted backups until they roll over on their normal schedule, and stays protected until then.
- Billing records, Terms acceptance and signup records: kept as long as needed for tax, accounting, legal and fraud-prevention purposes.
- Technical logs: kept for a limited period by our providers, then deleted.
Operators decide how long to keep Resident Data in their account and can delete records in the Service or ask us to.
9. Your choices and rights
Operators can view, correct and export their information in the app, and ask us to delete their account by emailing support@residentlift.com.
Residents and applicants: the Operator controls your records. To see, correct or delete your information, contact the house or organization. If you contact us, we will pass your request to the Operator and help them respond, and we may not be able to act on it directly.
State privacy rights. Depending on where you live, you may have rights to know, access, correct, delete or get a copy of personal information, and to not be discriminated against for using these rights. We will honor these requests as the law requires, generally within 45 days, after confirming your identity. You can use an authorized agent where the law allows. To make a request, email support@residentlift.com. We do not sell or share personal information as those laws define those terms.
10. Children
The Service is not intended for anyone under 18, and we do not knowingly collect personal information from children. If you believe a child's information was entered, contact us and we will work with the Operator to remove it.
11. Where information is stored
ResidentLift is based in the United States, and our database is hosted in the United States. Our service providers may process information in other countries under appropriate protections.
12. Changes to this policy
We may update this policy. For material changes we will notify Operators by email or in the Service before they take effect. The version date at the top shows the current version.
13. Contact us
ResidentLift LLC · support@residentlift.com