Legal

Privacy Policy

How MANOR collects, uses, stores, and protects information when you use connected home features. Available features, recording support, and online isolation depend on your plan (Free or Premium).

Last Updated · October 11, 2026

1. Scope

This policy covers the public marketing website (mymanor.click), the MANOR app for iPhone and iPad, the web account at mymanor.click/account, the Edge software that runs on a computer in your home, and the Android app when it is released, across the Free and Premium plans described in Section 3.7. It does not cover the apps or services of third-party device manufacturers and platforms you choose to connect (for example, an appliance brand's own app, a vehicle manufacturer's account, or a smart-lock vendor's service). Those services have their own privacy policies that govern data they collect directly from your devices.

2. Guiding Principles

• Data Minimization: We only process the data required for the home features you have enabled.
• User Control: You decide which integrations to connect, which automations to run, and you can disconnect or pause them at any time.
• No Advertising Sales: We do not sell or rent your personal data, and we do not share it for third-party advertising or profiling.
• Security by Design: Encryption in transit (HTTPS/TLS) and at rest in the cloud (cloud-provider managed encryption for storage, logs, and authentication). Recordings kept on the edge computer in your home rely on that computer's own disk encryption, where enabled, and on who can access it.
• Transparency: Clear explanation of each data category and purpose.

3. Data We Collect

3.1 Account Information

• Sign-In Identifier: When you sign in to the web account with an emailed code, we use the email address you enter to send a one-time code and keep a short-lived record of the request to limit abuse. When you sign in with Apple or, where available, Google, we receive the provider's user identifier and email address that the provider makes available. Apple may provide a private relay address. We use these details to authenticate you and associate your account with your household. If you link sign-in methods, we retain the verified association between the provider identifiers so either method can reach the same authorized account.
• Display Name: Optional, used to label your account in your household.
• Billing (Premium): Premium payments are handled by our payment processor, Stripe, on its own checkout and billing pages. Stripe receives your email address and account identifier; we keep a reference to your Stripe customer record and your subscription status and billing period. We never receive or store your card number.
• Session & Authentication Tokens: Managed securely; used only to keep you signed in and authorize requests.
• Security Events: Sign-in successes and failures, token refreshes, and similar account-security signals.
• Push Notification Token: On homes with mobile alerts enabled, a device-issued push token is registered with your home and account so we can route alerts to that device. iOS uses Apple Push Notification service (APNs); Android uses Google Firebase Cloud Messaging (FCM). You can disable visible notifications in your device settings. Signing out ends access in the app; registered tokens may remain in the service until they are replaced, invalidated, or removed during account deletion.

3.2 Camera Streams & Recordings

• Live Streams: Camera video and audio are streamed from your home edge to an authenticated session in the app, directly when possible or through an encrypted relay operated by MANOR when a direct connection is not available. Live frames are not persisted as part of the streaming path. Free uses shared authentication and control-plane resources, as described in Section 3.7.
• Recordings, Event Clips & Snapshots: Free does not record. On Premium, the edge computer in your home records video from your configured cameras continuously to its own disk for a rolling window (see Section 6), and MANOR may also create a short clip or still image when activity is detected so alerts and the timeline show what happened. Recordings stay on that computer and are access-controlled to that home; only the short event clips and snapshots used for alerts, emails and reports are copied to that home's own online environment.
• Detection Results: Where enabled, the system performs automated detection on camera frames to recognize broad categories such as "person" or "vehicle" so that alerts and timeline events are useful rather than noisy. Detection produces an event record (timestamp, camera, category, and, where supported, a thumbnail); the underlying processing pipeline is not exposed externally.
• Stream Metadata: Connection events (start/stop), playback state, error codes, and performance metrics (buffering, stall counts, time-to-first-frame). This metadata does not include frame contents.
• Camera Credentials: The network address, username and password you enter for each camera are stored in the camera registry, encrypted at rest, and used only so the edge computer in your home can connect to that camera.
• Microphone / Push-to-Talk: If you grant microphone permission and use push-to-talk, the app captures your voice while you hold the talk control and sends it to the selected home camera's speaker through an authenticated connection. The app and MANOR's talk relay do not save this microphone audio as a recording. The camera manufacturer's own recording behavior is governed by that device's settings and policies. You can revoke microphone permission in your device settings.

3.3 Sensor & Device Telemetry

• Water Usage: Numeric meter readings, derived consumption over time, and confidence indicators. Source images used to derive readings are processed transiently and discarded; only the numeric readings and limited quality metrics are retained.
• Water Leak & Environmental Sensors: Sensor states (e.g., wet/dry, temperature, humidity) and the events those sensors generate.
• Smart Locks & Doors: Lock and door state changes, lock-battery levels, and the time of any lock or unlock action you initiate from MANOR. Where supported, periodic battery summaries may be emailed to you.
• Climate & Air Quality: Device states (e.g., on/off, mode, target setting), recent measurement history shown in charts, and command history for actions you initiate.
• Appliances: High-level cycle state (e.g., idle, running, complete), device capability indicators, and error codes. We collect only what is needed to show status in MANOR and issue commands you initiate.
• Vehicles: If you connect a supported vehicle, MANOR may receive state your vehicle's account exposes (such as charge state, lock state, climate state, and approximate location used for home-arrival automations) and a record of commands you issue. We do not collect long-form driving history or telemetry beyond what is needed for the features you've enabled.
• Lighting, Audio & Other Smart Devices: Device state and command history for the controls you use in MANOR.

3.4 Household & Automations

• Household Membership: The list of users invited to your home and their role.
• Home Details: The name you give each home, the type of edge computer you chose, and, for Premium, the home's street address, which we use to review your setup request and plan installation.
• Automation Configuration: Schedules, modes (e.g., armed/disarmed), zones you've drawn, and rules you've set up. These configurations are stored so the system can apply them on your behalf.
• Event History: A timeline of significant events (alarm state changes, detections, lock actions, garage events, leak alerts, automation triggers) so you can review what happened and when.
• Phone Location & Home/Away Presence: For a configured home, optional presence detection uses your phone's location to determine whether you are near home. On iPhone, Apple's location services evaluate a region around the configured home. If you allow background location, this can work while the app is closed or not in use. The app sends the resulting home/away state, your account identifier and email address, the name shared by your sign-in provider, the home identifier, and a per-install device identifier to MANOR; it does not send the phone's latitude and longitude in these presence updates. Members of your home can see this state, which supports occupancy displays and home automations. You can stop location access, including background access, in your phone's app permission settings.

3.5 Notifications & Communications

• Push Notifications: Alerts (e.g., motion at a camera, door unlocked, water leak detected) are delivered through APNs on iOS or FCM on Android. The providers process the device token and notification payload to deliver the alert. Payloads can contain event text, home and account routing identifiers, timestamps, sensor states, and action links. Alerts do not include camera frames. Your device's notification settings determine whether alert text can appear on the lock screen.
• Email Notifications: If you have enabled them, MANOR may send periodic summaries (e.g., daily or monthly home reports) and incident or escalation emails to the email associated with your account. Incident emails and reports can include camera snapshots and short event previews from your home.
• Support Correspondence: Messages you send to our support address may be retained to diagnose problems and improve the product.

3.6 Usage & Diagnostics

• App Performance & Error Logs: Event timing, feature activity, error messages, platform, component, and diagnostic metadata help us operate and troubleshoot the app. Diagnostics include a per-install device identifier to group logs from the same device and may be associated with the signed-in account. These logs are not anonymous. They do not intentionally include camera frames or microphone audio.
• Edge Computer Diagnostics: The Edge software reports its identity and software version, the computer's hostname and network addresses, the services it runs, and CPU, memory and disk health so we can keep it paired, updated and supported.
• Public Website Analytics & Cookies: The marketing site (mymanor.click) uses Google Analytics 4 with IP anonymization enabled to understand aggregate traffic and page performance. The site also loads a Google Ads measurement tag, used only to measure whether our own advertising leads to sign-ups; we do not use it for remarketing or share your data for other companies' advertising. These Google tags set cookies in your browser. The web account sets a first-party cookie to keep you signed in, and the site stores your light-or-dark theme choice in your browser.

3.7 Plan Architecture

• Free: Your own Mac or Linux computer runs the Edge software, with one home and one edge computer per account and up to two cameras for live viewing only. Free does not record, run detection, or send alerts. Sign-in, camera settings and connection status use shared online resources that other Free homes also use, separated by account and home identifiers rather than by separate per-home environments.
• Premium: Each Premium home runs in a separately provisioned online environment that no other household shares (a Dedicated environment). Recording, detection and alerts are available for supported, configured cameras.

3.8 Data We Do Not Collect

• No address book, contacts, or photo library access
• No health or biometric data, and no card numbers (Premium payments are handled by Stripe; see Section 3.1)
• No marketing profiling or advertising identifiers in the apps; the public website's Google tags are described in Section 3.6
• No tracking of your activity in apps or websites operated by other companies

4. Legal Bases (Where Applicable)

For jurisdictions requiring disclosure (e.g., GDPR), processing is based on: (a) performance of a contract (the home features you sign up for and use), (b) legitimate interests (reliability, security, abuse prevention), and (c) consent (optional integrations you connect, push notifications you enable, optional summaries you opt into).

5. How We Use the Data

• Provide Home Features: Live cameras, recording on Premium, event timelines, water and environmental monitoring, smart-home control, alarm and automations.
• Send Alerts: Notify you of events you've asked to be notified about (motion, leak, door, alarm, etc.).
• Reliability & Performance: Monitor connection and stream health to improve responsiveness and resilience.
• Security: Authenticate users, prevent fraudulent access, detect anomalies in account or system behavior.
• Troubleshooting: Investigate problems you report, with logs scoped to the issue at hand.
• Product Improvement: Aggregate, non-identifying signals (e.g., average stream start latency) to make the product better.
• Website Experience: Anonymized visit trends on the marketing site to improve layout and content.

6. Camera Recordings & Detection

Free does not create or store camera recordings. On Premium, recordings are stored on the disk of the edge computer in your home, where they are kept for a rolling window (72 hours by default; the window can be adjusted per home and per camera, and is shortened automatically if that computer's disk is nearly full) and served to your household through that home's authorization controls. Short event clips, animated previews and snapshots created for alerts, incident emails and reports are copied to encrypted storage in that home's own online environment and deleted automatically after 30 days.

Where a feature uses automated visual analysis, that analysis is used solely to make alerts and the event timeline more useful inside MANOR; results are not shared with advertisers or used to build profiles of individuals. We do not sell, license, or otherwise use your recordings for any purpose unrelated to operating the service for you.

7. Edge & On-Device Processing

Some features run partly on equipment located in your home and partly in the cloud. The split is chosen to keep MANOR responsive and to limit how much data needs to leave your home. Where processing happens close to the home, resulting events, summaries, or readings may be forwarded to the cloud; camera video leaves the edge only when you watch a live stream or play back a recording (sent to your device directly, or through an encrypted relay when a direct connection is not possible), or when a short event clip or snapshot is created for an alert, email or report. The exact processing layout depends on your plan and may evolve as the product improves.

8. Smart Home & Third-Party Integrations

When you connect a third-party service (such as a smart appliance, smart lock, electric vehicle, air purifier, or sensor platform), MANOR exchanges credentials or tokens with that service so it can read the state and send the commands you ask it to. We store only the credentials or tokens strictly required to keep the connection working, and we refresh them as needed. The third-party service has its own privacy policy that governs how that vendor handles data inside its own systems. You can disconnect any integration at any time from within MANOR; doing so stops further data flow for that integration.

9. Logging & Metrics

• Default Logging: Operational events and error signals needed to keep the service reliable.
• Scope: Logs are used for operation and technical troubleshooting and exclude camera frame content and microphone audio. Account, home, and device identifiers may be present so we can connect related failures and investigate access or delivery problems.
• Elevated Debug: If we ask you to enable elevated logging to investigate a specific issue, those extra logs follow shorter retention and are removed after the issue is resolved.

10. Storage, Retention & Deletion

• Account Data: Retained while your account is active. After we verify your deletion request, we complete account and associated personal-data deletion within seven calendar days, subject to lawful retention exceptions.
• Camera Recordings & Detection Events: Free has no camera recordings. On Premium, recordings stay on the edge computer in your home and are removed automatically after a rolling window (72 hours by default, adjustable per home and per camera); event clips and snapshots copied to the home's online environment are deleted after 30 days. You can request earlier deletion of specific recordings or your full history.
• Sensor, Device & Automation History: Retained to present charts and timelines (typically up to 12 months for chart data, longer in aggregate form). You may request purge.
• Routine Diagnostic Logs: Rotated and purged automatically (typically 30–90 days).
• Elevated Debug Sessions: Shorter retention (typically 7–14 days) or manual purge after incident resolution.

Your Deletion Requests: Use the deletion option in the app's Settings, where available, or our account deletion page to email us, including if you no longer have the app. We verify identity before acting and send a completion email after deletion. The request covers your account, linked sign-in identifiers, household membership, registered push tokens, and associated personal data. Shared home equipment and data belonging to other residents remain available to them. Sending a request does not immediately delete the account. Limited records may be retained when required by law or needed to document the request and protect against fraud or unauthorized access; any such retention must have a specific purpose and expiry.

11. Data Sharing & Disclosure

• No Sale or Rental: We do not sell or rent personal data.
• Within Your Household: Members of a household can see cameras, devices, and history made available to that household. Roles control what each member can do. Premium provides per-home online isolation; Free uses the shared architecture described in Section 3.7.
• Cloud & Service Providers: We use cloud infrastructure providers for hosting, storage, authentication, push delivery, and email delivery. This includes Amazon Web Services for MANOR's hosted services, Apple for Apple sign-in and APNs, Google for Google sign-in, FCM, and the analytics and advertising-measurement tags on the public website, and Stripe for Premium payments, where those features are enabled. These providers process the data needed to operate their services under their applicable terms and privacy policies.
• Third-Party Integrations: Only the data needed to operate the integrations you have connected is exchanged with those services, on your direction.
• Legal Compliance: Disclosures only if required by applicable law or to defend rights and safety.

12. Security

• Encryption in transit (TLS) and at rest in the cloud (cloud-provider managed keys); recordings on the edge computer rely on that computer's own disk encryption, where enabled.
• Authentication through supported sign-in providers; tokens scoped and rotated, with access checked for the selected home.
• Principle of least privilege for backend roles.
• Monitoring of anomalous authentication and access patterns.
• Segregated environments for development versus production.
• Per-home online isolation for Premium; a shared control plane for Free, limited to one home and one edge computer per account.

No system is 100% secure; we continuously improve defenses and encourage responsible disclosure of vulnerabilities to privacy@mymanor.click.

13. Children's Privacy

The App is not directed to children under 13 (or equivalent age of digital consent in your jurisdiction). We do not knowingly collect personal information from children. If you believe a child provided personal information, contact us for removal.

14. International Data Transfers

Each Premium home's own online environment (its sign-in, alarm state, events, event clips and notifications), the shared Free service (Free home, edge and camera settings), and the encrypted live-video relay are hosted in cloud regions in Canada. Account and directory data that MANOR keeps centrally (web sign-in identifiers and codes, sessions, billing references, home names and addresses, edge pairing records, and the Premium camera registry) is hosted in a cloud region in the United States. Limited supporting services (for example, transactional email delivery, payment processing, public-website analytics, and push notification delivery) may be operated from regions outside Canada by their respective providers. Where data is transferred to another region, we rely on the safeguards offered by those providers and applicable contractual protections.

15. Your Rights

• Access: Request a copy of your stored data.
• Correction: Fix inaccurate account details.
• Deletion: Request account/data deletion (subject to lawful exceptions).
• Restriction / Objection: Where applicable law provides.
• Portability: Where applicable law provides.

To exercise rights, contact us (see below). We may request identity verification.

16. Mobile App Privacy Summary

This summary covers the iPhone and iPad app; it will be updated when the Android app is released. Available data flows depend on the features and permissions you enable.

Data Linked to You

No Tracking: We do not use your data to track you across apps or websites operated by other companies.

17. Changes to This Policy

We may update this policy as features evolve or laws change. Material changes will include an updated "Last Updated" date and reasonable notice within the app or website.

18. Contact