Legal

Privacy Policy

How MANOR collects, uses, stores, and protects information when you use connected home features. Available features, recording support, and online isolation depend on your service tier.

Last Updated · August 22, 2026

1. Scope

This policy covers the public marketing website (mymanor.click) and the authenticated MANOR application (iOS and web) that you access after signing in, across Standard and Dedicated service tiers. It does not cover the apps or services of third-party device manufacturers and platforms you choose to connect (for example, an appliance brand's own app, a vehicle manufacturer's account, or a smart-lock vendor's service). Those services have their own privacy policies that govern data they collect directly from your devices.

2. Guiding Principles

• Data Minimization: We only process the data required for the home features you have enabled.
• User Control: You decide which integrations to connect, which automations to run, and you can disconnect or pause them at any time.
• No Advertising Sales: We do not sell or rent your personal data, and we do not share it for third-party advertising or profiling.
• Security by Design: Encryption in transit (HTTPS/TLS) and at rest (cloud-provider managed encryption for storage, logs, and authentication).
• Transparency: Clear explanation of each data category and purpose.

3. Data We Collect

3.1 Account Information

• Sign-In Identifier: When you sign in with Apple, we receive the user identifier and (if you choose to share it) an email address. This may be a private relay address provided by Apple. We use this to authenticate you and associate your account with your household.
• Display Name: Optional, used to label your account in your household.
• Session & Authentication Tokens: Managed securely; used only to keep you signed in and authorize requests.
• Security Events: Sign-in successes and failures, token refreshes, and similar account-security signals.
• Push Notification Token: When you enable notifications on a device, the device-issued push token is stored so we can deliver alerts to that device. Tokens are revoked when you sign out or remove the device.

3.2 Camera Streams & Recordings

• Live Streams: Camera video and audio are streamed from your home edge to an authenticated session in the app. Live frames are not persisted as part of the streaming path. Standard uses shared authentication and control-plane resources, as described in Section 3.7.
• Event Recordings & Snapshots: Recordings are disabled on Standard. On a recording-enabled tier, including Dedicated where configured, MANOR may save a short video clip and/or still image when activity is detected so you can review what happened. Those recordings are stored for and access-controlled to that Dedicated home.
• Detection Results: Where enabled, the system performs automated detection on camera frames to recognize broad categories such as "person" or "vehicle" so that alerts and timeline events are useful rather than noisy. Detection produces an event record (timestamp, camera, category, and, where supported, a thumbnail); the underlying processing pipeline is not exposed externally.
• Stream Metadata: Connection events (start/stop), playback state, error codes, and performance metrics (buffering, stall counts, time-to-first-frame). This metadata does not include frame contents.

3.3 Sensor & Device Telemetry

• Water Usage: Numeric meter readings, derived consumption over time, and confidence indicators. Source images used to derive readings are processed transiently and discarded; only the numeric readings and limited quality metrics are retained.
• Water Leak & Environmental Sensors: Sensor states (e.g., wet/dry, temperature, humidity) and the events those sensors generate.
• Smart Locks & Doors: Lock and door state changes, lock-battery levels, and the time of any lock or unlock action you initiate from MANOR. Where supported, periodic battery summaries may be emailed to you.
• Climate & Air Quality: Device states (e.g., on/off, mode, target setting), recent measurement history shown in charts, and command history for actions you initiate.
• Appliances: High-level cycle state (e.g., idle, running, complete), device capability indicators, and error codes. We collect only what is needed to show status in MANOR and issue commands you initiate.
• Vehicles: If you connect a supported vehicle, MANOR may receive state your vehicle's account exposes (such as charge state, lock state, climate state, and approximate location used for home-arrival automations) and a record of commands you issue. We do not collect long-form driving history or telemetry beyond what is needed for the features you've enabled.
• Lighting, Audio & Other Smart Devices: Device state and command history for the controls you use in MANOR.

3.4 Household & Automations

• Household Membership: The list of users invited to your home and their role.
• Automation Configuration: Schedules, modes (e.g., armed/disarmed), zones you've drawn, and rules you've set up. These configurations are stored so the system can apply them on your behalf.
• Event History: A timeline of significant events (alarm state changes, detections, lock actions, garage events, leak alerts, automation triggers) so you can review what happened and when.

3.5 Notifications & Communications

• Push Notifications: Alerts (e.g., motion at a camera, door unlocked, water leak detected) delivered through Apple's push service to devices you've signed in with. The notification payload reflects the event, not the underlying frame content.
• Email Notifications: If you have enabled them, MANOR may send periodic summaries (e.g., daily or monthly home reports) and incident or escalation emails to the email associated with your account.
• Support Correspondence: Messages you send to our support address may be retained to diagnose problems and improve the product.

3.6 Usage & Diagnostics

• App Performance & Error Logs: Event timing, feature usage counts, non-personal error messages, anonymized device/browser type (e.g., "iPhone, iOS 19").
• Public Website Analytics: The marketing site (mymanor.click) uses Google Analytics 4 with IP anonymization enabled to understand aggregate traffic and page performance. Advertising features, remarketing audiences, and cross-site tracking are disabled.

3.7 Service Tier Architecture

• Standard: A controlled trial that uses a shared online control plane. Authentication, alarm state, events, and integration configuration use common cloud resources and are separated by application-level home identifiers rather than separate per-home cloud accounts. Recordings are disabled. Normal Standard approvals are limited to one home while cross-home camera authorization is not per-home isolated.
• Dedicated: Uses a separately provisioned, per-home isolated online environment. Recording features may be enabled for supported, configured cameras.

3.8 Data We Do Not Collect

• No address book, contacts, or photo library access
• No health, financial, or biometric data
• No marketing profiling or third-party advertising identifiers
• No tracking of your activity in apps or websites operated by other companies

4. Legal Bases (Where Applicable)

For jurisdictions requiring disclosure (e.g., GDPR), processing is based on: (a) performance of a contract (the home features you sign up for and use), (b) legitimate interests (reliability, security, abuse prevention), and (c) consent (optional integrations you connect, push notifications you enable, optional summaries you opt into).

5. How We Use the Data

• Provide Home Features: Live cameras, recording where available on your tier, event timelines, water and environmental monitoring, smart-home control, alarm and automations.
• Send Alerts: Notify you of events you've asked to be notified about (motion, leak, door, alarm, etc.).
• Reliability & Performance: Monitor connection and stream health to improve responsiveness and resilience.
• Security: Authenticate users, prevent fraudulent access, detect anomalies in account or system behavior.
• Troubleshooting: Investigate problems you report, with logs scoped to the issue at hand.
• Product Improvement: Aggregate, non-identifying signals (e.g., average stream start latency) to make the product better.
• Website Experience: Anonymized visit trends on the marketing site to improve layout and content.

6. Camera Recordings & Detection

Standard does not create or store camera recordings. On a recording-enabled tier, recordings and snapshots tied to events at your cameras are stored in encrypted cloud storage for the applicable home and accessible through that home's authorization controls. Recordings rotate automatically. Older clips are removed on a schedule appropriate to a residential security system.

Where a feature uses automated visual analysis, that analysis is used solely to make alerts and the event timeline more useful inside MANOR; results are not shared with advertisers or used to build profiles of individuals. We do not sell, license, or otherwise use your recordings for any purpose unrelated to operating the service for you.

7. Edge & On-Device Processing

Some features run partly on equipment located in your home and partly in the cloud. The split is chosen to keep MANOR responsive and to limit how much data needs to leave your home. Where processing happens close to the home, resulting events, summaries, or readings may be forwarded to the cloud; camera video leaves the edge when you request a live stream or use a recording feature available on your tier. The exact processing layout depends on your service tier and may evolve as the product improves.

8. Smart Home & Third-Party Integrations

When you connect a third-party service (such as a smart appliance, smart lock, electric vehicle, air purifier, or sensor platform), MANOR exchanges credentials or tokens with that service so it can read the state and send the commands you ask it to. We store only the credentials or tokens strictly required to keep the connection working, and we refresh them as needed. The third-party service has its own privacy policy that governs how that vendor handles data inside its own systems. You can disconnect any integration at any time from within MANOR; doing so stops further data flow for that integration.

9. Logging & Metrics

• Default Logging: Operational events and error signals needed to keep the service reliable.
• Scope: Logs are scoped to technical troubleshooting and exclude camera frame content. Personally identifying fields are limited to what's required for support (e.g., your account ID for an issue you've reported).
• Elevated Debug: If we ask you to enable elevated logging to investigate a specific issue, those extra logs follow shorter retention and are removed after the issue is resolved.

10. Storage, Retention & Deletion

• Account Data: Retained while your account is active. Deleted upon verified deletion request after a short safety window (typically 7–14 days).
• Camera Recordings & Detection Events: Standard has no camera recordings. On recording-enabled tiers, recordings are rotated automatically; older items are removed on a schedule typical for residential security systems. You can request earlier deletion of specific recordings or your full history.
• Sensor, Device & Automation History: Retained to present charts and timelines (typically up to 12 months for chart data, longer in aggregate form). You may request purge.
• Routine Diagnostic Logs: Rotated and purged automatically (typically 30–90 days).
• Elevated Debug Sessions: Shorter retention (typically 7–14 days) or manual purge after incident resolution.

Your Deletion Requests: Email us (see Contact) and we will verify identity and remove associated data unless retention is legally required.

11. Data Sharing & Disclosure

• No Sale or Rental: We do not sell or rent personal data.
• Within Your Household: Members of a household can see cameras, devices, and history made available to that household. Roles control what each member can do. Dedicated provides per-home online isolation; Standard uses the shared, application-scoped architecture described in Section 3.7.
• Cloud & Service Providers: We use established cloud infrastructure providers for hosting, storage, authentication, push delivery, and email delivery. These providers act under contractual obligations for security and confidentiality and only process data on our behalf.
• Third-Party Integrations: Only the data needed to operate the integrations you have connected is exchanged with those services, on your direction.
• Legal Compliance: Disclosures only if required by applicable law or to defend rights and safety.

12. Security

• Encryption in transit (TLS) and at rest (cloud-provider managed keys).
• Authentication built on Apple Sign In; tokens scoped and rotated.
• Principle of least privilege for backend roles.
• Monitoring of anomalous authentication and access patterns.
• Segregated environments for development versus production.
• Per-home online isolation for Dedicated; a shared, application-scoped control plane with normal Standard approvals limited to one home.

No system is 100% secure; we continuously improve defenses and encourage responsible disclosure of vulnerabilities to our security contact.

13. Children's Privacy

The App is not directed to children under 13 (or equivalent age of digital consent in your jurisdiction). We do not knowingly collect personal information from children. If you believe a child provided personal information, contact us for removal.

14. International Data Transfers

Production data for households is processed and stored in cloud regions in Canada. Limited supporting services (for example, transactional email delivery, public-website analytics, and push notification delivery) may be operated from regions outside Canada by their respective providers. Where data is transferred to another region, we rely on the safeguards offered by those providers and applicable contractual protections.

15. Your Rights

• Access: Request a copy of your stored data.
• Correction: Fix inaccurate account details.
• Deletion: Request account/data deletion (subject to lawful exceptions).
• Restriction / Objection: Where applicable law provides.
• Portability: Where applicable law provides.

To exercise rights, contact us (see below). We may request identity verification.

16. Apple App Privacy Summary

Data Linked to You

No Tracking: We do not use your data to track you across apps or websites operated by other companies.

17. Changes to This Policy

We may update this policy as features evolve or laws change. Material changes will include an updated "Last Updated" date and reasonable notice within the app or website.

18. Contact