mStreet Privacy Policy

mStreet is an invitation-controlled app for private communities, households and trusted groups. This policy explains what mStreet processes, why it is needed, who can receive it and how to remove it. Do not place payment-card numbers, medical records or other information you would not safely share with the audience you select into a post, profile or community field.

Accounts and identity

mStreet uses Google, Apple or email sign-in to establish an account. Depending on the provider and your choices, mStreet receives an account identifier, name, email address and provider profile image. It stores the profile, verified email addresses, optional phone numbers, pronouns, biography and social-profile links you choose to add. One-time phone codes are used only for verification and expire after a short period. Passwords for Google and Apple are never received or stored by mStreet.

Community and household information

mStreet stores the communities you join, household name and address, membership and management roles, people or pets added to a household roster, selected field visibility, group and trusted-circle memberships, plans, service and civic proposals, support choices, reports, comments, reactions, notes and protected-access items you create. Protected-access content is encrypted at rest and remains subject to the audience and account permissions selected by its owner. Community managers can review membership requests, submitted reports and material their role permits them to administer.

Photos, files, audio and live video

When you choose to upload media, mStreet processes the selected photo, video, audio or document, its type, size, owner, audience and creation time. Uploads are stored privately and delivered through short-lived links to authorized viewers. A live broadcast sends camera and microphone content through Amazon IVS to the invited community. Live sessions are limited, and any enabled replay expires after the seven-day pilot window. mStreet does not activate the camera or microphone without a visible user action and operating-system permission.

Location

Location is optional. mStreet can use a one-time precise location to position you on a map or help configure a community. If you separately enable community entry notifications, the operating system monitors the saved boundary on your device; raw movement history is not uploaded. A community or household address, saved map point or boundary you choose to submit becomes account- or community-linked data with the visibility shown in the app. Map tiles are supplied by OpenStreetMap-compatible services, which may receive ordinary network information such as your IP address.

Notifications, calendar and sharing

Local notifications are scheduled on your device for plans you choose to follow. If a future community enables remote notifications, the app will disclose that before registering a device token. Google Calendar setup is a separate one-way action and requires separate Google consent. The system share sheet sends only the invitation, media or document you deliberately choose to the destination you select.

Advertising

The standard plan reserves a fixed 50-point or 50-dp strip below the app for a Unity Ads banner. The strip remains reserved while inventory loads or is unavailable, so advertising cannot cover or move community controls. The mStreet Plus subscription removes this banner.

Before Unity Ads starts, mStreet sends user-opt-out and non-behavioral signals and disables cross-app personalization. mStreet does not supply names, email addresses, phone numbers, home addresses, precise location, community memberships, messages, photos, videos, live streams, protected-access material or other community content for ad targeting. Unity may process technical advertising data needed to deliver, secure, measure and diagnose an ad, including IP address, IP-derived approximate location, device or app identifiers, ad interactions, app or session activity, crash information and performance data. Unity handles that data under Unity's Game Player and App User Privacy Policy. mStreet does not request Apple's App Tracking Transparency permission and does not enable behavioral ad targeting.

Service providers and disclosures

Civaren uses Amazon Web Services for authentication, encrypted databases and storage, APIs, audit logs, live video and short-lived media delivery; Google and Apple for sign-in; Apple or Google for store billing; Unity for contextual banners; and OpenStreetMap-compatible tile services for maps. These providers process only the information needed for their service. mStreet does not sell personal information. It may disclose information when legally required, to protect users or the service, or as part of a corporate transaction with appropriate safeguards.

Retention, deletion and export

• Account, profile, membership and community records remain while the account or governing community needs them to operate the service.
• You can remove your own uploaded media and eligible content in the app. Community audit and safety records may retain attribution or a removal record where needed to protect members and enforce rules.
• Live replay files expire after seven days in the current pilot configuration. Temporary upload and download links expire much sooner.
• Use the in-app account controls to request account deletion. mStreet removes the Cognito account and account-scoped records; some community history may remain de-identified or attributed where community safety, legal obligations or another member's rights require it.
• For an access, correction, export or deletion request you cannot complete in the app, email hello@civaren.com from the account address.

Security, children and changes

mStreet uses encrypted transport, encrypted AWS storage, operating-system protected token storage and permission checks. No system can guarantee absolute security. mStreet is intended for invitation-controlled communities and is not directed to children under 13. Adults control household roster entries for children; a child roster entry does not receive app authority. We will update this policy before materially changing these practices.

Contact

Civaren, United States · hello@civaren.com.