HopeHub Privacy Policy

Last approved May 27, 2026 · Updated August 11, 2026 · New River Valley Community Services

Policy

NRVCS HopeHub (“the App”) is provided by a Virginia public-sector organization to support access to services and information. The App collects and manages information in accordance with the Virginia Government Data Collection and Dissemination Practices Act (GDCDPA), Va. Code § 2.2-3800 et seq., and other applicable state and federal laws.

Information That We Collect

NRVCS HopeHub collects only the minimum information necessary to perform its intended public function, consistent with Virginia law. The App has no user accounts, and the user is never asked to register or sign in, or for a name, address, phone number, or email address.

What is collected:

  • Anonymous usage statistics. When the App is used, events such as opening the App, viewing a resource, or tapping a crisis contact are recorded, along with the date and time, the screen involved, whether the website or the Android or iOS app is being used, and the app version. These records are stored under a randomly generated identifier created on the device the first time the App is opened. The identifier is not a phone number, device serial number, or advertising ID, and it is not connected to your identity.
  • Crash and error diagnostics. If the App fails, technical information about the failure is sent to our error monitoring provider so it can be fixed.
  • Information voluntarily submitted, such as contact information in an email sent to us or in an organization’s request to be listed in the directory.

We do not collect precise location or text typed into the search box. If location access is allowed, the location is used on the device only, to sort resources by distance, and is never transmitted or stored. Resources saved as favorites are stored on the device only and are never sent to our servers.

Information collected is relevant, lawful, and appropriate for the App’s purpose, as required by the GDCDPA.

Data Deletion: How to Delete Your Data or Request Deletion

No account is needed, and there is no need to contact us. There are three ways to have the data deleted, and you can use whichever is easiest.

Option 1 — Delete it yourself inside the app

  1. Open the HopeHub app.
  2. Tap the information icon in the top corner of the screen to open About HopeHub.
  3. Tap Delete my data.
  4. Tap Delete my data again to confirm.

Usage records are deleted from our database immediately. Nothing is queued for review and no one has to approve it.

Option 2 — Delete it from the website

Visit https://hopehub.nrvcs.org/data-deletion in any web browser and press the Delete my data button. You do not need to install the app or sign in to use this page.

Option 3 — Ask us to delete it for you

Email Info@NRVCS.org with the subject “HopeHub data deletion request”. The data will be deleted and a reply sent within 30 days.

The App has no accounts and cannot be searched by name or email address. Please include the random device identifier shown on the Delete Your Data page so we can find your records. If the App has already been uninstalled or its storage cleared, that identifier no longer exists on the device and nothing that remains can be connected to you; those records are deleted automatically.

Usage records are permanently deleted from our database 90 days after they are collected. Uninstalling the App, or clearing its storage in your device settings, removes the random identifier and everything saved on your device.

How Information Is Used

Information is used solely to:

  • Operate and maintain the App
  • Improve reliability and performance
  • Respond to user inquiries
  • Provide services as authorized by law

Personal information is not used for advertising, profiling, or commercial purposes.

What Is Kept

Anonymous daily totals — for example, “412 people used the App on June 4” — are kept indefinitely for grant and public reporting. These are counts only, contain no device identifiers, and cannot be traced back to any device or person, so they are not affected by a deletion request. Records may, however, be retained where the law requires it, such as in response to a subpoena or court order.

Service Providers

The App relies on a small number of providers that process data on our behalf under confidentiality and security requirements:

  • Supabase — hosts the resource directory and usage statistics database
  • Vercel — hosts the App and provides aggregate traffic measurement
  • Sentry — receives crash and error diagnostics
  • Mapbox — serves the map imagery used to display resource locations

Retention

Usage records are permanently deleted from the database 90 days after they are collected. After 90 days, only anonymous daily totals remain — counts with no device identifiers, retained for grant and public reporting, which cannot be traced back to any device or person. Crash diagnostics are deleted by the error monitoring provider within 90 days.

Data Sharing

NRVCS HopeHub does not sell personal information. Selling personal information is prohibited by Virginia state law. Information may be shared only:

  • As required to administer authorized public programs
  • To comply with legal obligations, subpoenas, or court orders
  • With trusted service providers acting on behalf of the agency, under confidentiality and security requirements

All sharing complies with Va. Code § 2.2-3803.

Individual Rights

In accordance with Virginia law, individuals may:

  • Request to review personal information maintained about them
  • Request correction of inaccurate or incomplete information
  • Request deletion of the data collected from the device, or delete it themselves at any time

Deletion requests are described in full under Data Deletion above. Other requests may be submitted using the contact information below, consistent with GDCDPA procedures.

Data Security

Reasonable administrative, technical, and physical safeguards are used to protect personal information. Information is encrypted in transit.

Children’s Policy

NRVCS HopeHub is not intended for children under age 13, and personal information from children is not knowingly collected.

Contact Information

Questions about this Privacy Policy or information practices, and requests regarding your data, may be directed to: