The short version
We collect what the service needs to work and nothing more. Your household data is yours. We don't sell data, we don't run ad trackers, and vault documents are encrypted at rest.
What we collect
Account: your email address and a securely hashed password (we never store the password itself).
Household data: the inventory items, plans, readiness answers, and household member details you add.
Location:a ZIP code, if you use local intelligence — it's how we look up weather and hazard alerts for your area. We never collect precise location.
Vault documents: files you choose to upload, encrypted at rest with managed keys.
Payments: handled entirely by Stripe. Card numbers never touch our servers; we keep only the subscription status Stripe reports back.
Newsletter: the email address you subscribe with, plus where the signup came from so we know which page worked.
Usage:basic product events (like pages visited on this site) to understand what's useful. No third-party ad networks, no cross-site tracking.
How we use it
To run the service you signed up for: keeping your inventory, sending the expiration and restock alerts you asked for, the weekly digest, local risk reads for your area, and the Field Notes newsletter if you subscribed. We also use aggregate, de-identified usage to improve the product.
Who processes it for us
A short list of service providers, each doing one job: Stripe (payments), Amazon Web Services (hosting, encrypted storage, and email delivery), the National Weather Service (public hazard data we fetch for your ZIP code), and Zentoko, our publishing platform (delivers the Field Notes newsletter). AI language models help write Sam's weekly guidance from non-identifying context like your area's current alerts — your vault documents and personal details are never shared with AI providers. We don't sell or rent personal data to anyone.
Your choices
Alerts, the weekly digest, and push notifications can each be turned off in the app. Every Field Notes email has an unsubscribe link. To export your data or delete your account and household data, email support@mainstaykit.com from your account address and we will handle it promptly.
Children
Mainstay is a household tool for adults. It is not directed at children under 13, and we don't knowingly collect their information.
Changes
If this policy changes materially, we will post the update here with a new effective date and email account holders about significant changes.
Contact
Privacy questions: support@mainstaykit.com.