CommunityConnect

CommunityConnect Privacy Policy

Operator: 180 Degrees, Inc. · Effective date: to be set upon approval · Last updated: October 14, 2026

Draft for review. This policy is pending final approval by 180 Degrees leadership and may change before the App's public release.

CommunityConnect is a mobile app for adults (18+) who live at or take part in services at 180 Degrees sites (the “App”). It helps users receive announcements for their selected location, submit feedback, find community resources, and manage their account.

The App is used solely for general informational and administrative purposes related to your participation in services at 180 Degrees sites. It is not used for the provision, coordination, or management of health care services or treatment.

This policy describes:

This policy applies only to information we collect in this App and other electronic communications sent through this App. This policy does not apply to Protected Health Information (“PHI”), as defined under the Health Insurance Portability and Accountability Act (“HIPAA”). The App is not designed or intended to collect, store, or transmit PHI or substance use disorder treatment records protected under 42 CFR Part 2.

Information CommunityConnect handles

Account and profile information

When you create or use an account, CommunityConnect may handle:

CommunityConnect supports email/password, Google, and Apple sign-in. Firebase Authentication processes sign-in credentials and authentication records. Google or Apple also processes information when you choose its sign-in service. The App does not receive your Apple or Google password.

Program location and announcements

The location you select is a program location that you enter manually. The App does not request GPS permission or collect precise device location.

Announcement requests go through a CommunityConnect server component (hosted on Cloudflare) that verifies your sign-in and determines your selected program location itself from your account profile, rather than trusting a location value sent by the App. That server component then retrieves matching announcements from an AppSheet-backed system. Normal announcement requests are limited to the selected program location and announcements intended for all locations. Cloudflare, AppSheet, Google Workspace systems, and their operational logs may process the request, selected location, network address, and request metadata.

Feedback

Feedback is optional. When you submit it, CommunityConnect sends the text to a Google Apps Script service for review by authorized 180 Degrees staff. The App does not automatically attach your account identifier or email address to the feedback. Feedback may still identify you if you include identifying details in the text, and Google may process network and operational request information.

Feedback is not an emergency or confidential reporting channel. Please do not include passwords, authentication codes, or information you do not want staff to review. Do not submit health information, medical records, treatment details, or other sensitive health-related information through the App’s feedback feature. Any health-related information inadvertently submitted through the App may be handled in accordance with applicable law, including HIPAA where applicable.

Push notifications and device information

CommunityConnect uses OneSignal for push notifications. When the OneSignal SDK runs, OneSignal may create an anonymous user/subscription record and process a push token, OneSignal identifiers, IP address, country derived from IP address, device model, operating system, carrier, language, time zone, app and SDK version, notification-permission status, first and last session times, session count, app usage duration, and notification delivery/open information. The App also sends the selected program location as a tag so announcements reach the right location.

The App does not assign your account ID or email address to OneSignal. Notification permission is optional and can be changed in device settings. OneSignal may still create operational subscription records when its SDK initializes, subject to its configuration and policies. CommunityConnect does not enable OneSignal GPS location collection.

Diagnostics and operational records

CommunityConnect and its providers may process technical information needed to operate, secure, and troubleshoot the service, such as network address, device and app version, request time, authentication events, error information, and notification delivery status. The App does not include an advertising SDK or a dedicated crash-reporting/analytics SDK.

How information is used

Information is used to:

CommunityConnect does not include advertising or use the App data for cross-app advertising tracking. It does not sell personal information.

Service providers

CommunityConnect relies on the following providers to operate:

These providers process information under their own terms, privacy notices, and retention practices, which we encourage you to read before providing information on or through them.

Retention

Active account and profile information is generally kept while the CommunityConnect account remains active. Local app data remains on the device until it is cleared by the App, sign-out/deletion flow, device settings, or the App removal.

Specific retention periods for identifiable feedback, support requests, and administrative records are being finalized and will be posted here before public release.

Provider logs, notification records, security records, and backups may remain for limited periods according to provider practices or legitimate legal, security, fraud-prevention, and audit needs. Information retained for one of these reasons is not used for unrelated purposes and is removed or de-identified when the approved need ends.

Account and data deletion

If you can access the App, go to Settings → Delete Account. The App asks you to reauthenticate and then deletes your sign-in account and CommunityConnect profile. As part of the same request, it also clears local account data, deletes your OneSignal push-notification subscription record, and, for Apple accounts, revokes Sign in with Apple's authorization for CommunityConnect. If the App reports an error, deletion may not have completed; contact support.

You may also request deletion without the App — see Delete Your Account.

A request may cover the CommunityConnect account and profile, identifiable feedback where it can reasonably be located, and notification subscription data where it can be matched and removed. Deleting CommunityConnect does not delete your Apple or Google account. Some provider logs and backups cannot be removed immediately, and unidentified feedback may not be technically possible to match to a requester.

Deleting a CommunityConnect account does not affect certain records maintained by 180 Degrees to meet its obligations under HIPAA or other applicable law.

Security

180 Degrees uses administrative, technical, and organizational safeguards appropriate to the App's operation. No system can promise absolute security. To the extent 180 Degrees is a covered entity or business associate under HIPAA, the security of any PHI is addressed under its separate HIPAA policies and procedures, not this App’s privacy policy.

Announcement requests are handled by a server component that requires sign-in and determines your program location itself; the credential used to retrieve announcements is not included in the App and is not accessible from a device.

Account deletion removes your CommunityConnect sign-in account and profile directly. As part of the same request, the App also asks OneSignal to delete your device's push-notification subscription record and, for Apple accounts, asks Apple to revoke Sign in with Apple's authorization for CommunityConnect. These two steps are best-effort: they are reported honestly if either could not be confirmed, but they never delay or block deletion of your account and profile.

Children's privacy and eligibility

CommunityConnect is intended for adults (18 or older) who live at or take part in services at 180 Degrees sites. It is not directed to children, and 180 Degrees does not knowingly collect information from anyone under 18 through the App.

If you are under 18, do not use or provide any information on this App or through any of its features, create an account on the App, or provide any information about yourself to us, including your name, address, telephone number, email address, or any screen name or username you may use. If we learn we have collected or received personal information from a child under 18 without verification of parental consent, we will delete that information. If you believe we might have any information from or about a child under 18, please contact us through CommunityConnect Support (communityconnect@180degrees.org).

Policy changes

This policy may be updated when the App, providers, or legal requirements change. This page shows the effective date and last-updated date. Material changes will be communicated in a manner approved by 180 Degrees.

Contact