Privacy

Neighbour Trust has no advertising, and you never need an account to read anything on it. If you choose to sign in with Google — only to save localities, keep notes and compare them — we store your Google account id, email, name and what you save, and nothing else. You can delete all of it yourself, at any time, in one step. If you never sign in, we store nothing about you and set no cookies.

It counts page views, so we can see which neighbourhoods people look up. That counter sets no cookies, stores nothing in your browser and keeps no identifier for you, so it can tell us a page was opened and never that you opened it. Details below.

A few things on the site accept something you type, and all of them are optional: the search box, which can look up a pincode or place to find the localities near it; a box that measures distances from an address you give; a question box on each locality page, answered by an AI model; a button to ask us to add a locality we don't cover, which stores the place and nothing about you; and a link to a form for reporting what you have seen in your area. None is required to use anything. Each is described in full below.

Nothing that identifies you, unless you sign in or type it in yourself. There is no newsletter, and signing in is optional. Without signing in we cannot identify you, and nothing you do here is tied to a profile.

If you sign in. Sign-in uses your Google account and asks Google only for your basic profile: your name and email. We store your Google account id (so we recognise you next time), that name and email, the localities you save and any private notes you write on them, and when you joined and were last seen. Nothing else — not your photo, contacts, location or browsing. Your shortlist and notes are visible only to you; they are never shown to anyone else, counted publicly, or used in any locality's score.

Signing in sets cookies that keep you signed in for up to 30 days and protect the sign-in form from forgery. They are set only when you sign in, and removed when you sign out. Comparisons are ordinary links and need no account.

Deleting your account. On your shortlist page, “Delete my account and everything saved” permanently erases your account, shortlist and notes from our database straight away. Nothing is kept or deactivated “just in case”. Copies may remain in the database provider's routine backups until those expire.

Page-view counting. Every page loads a small script from Vercel Web Analytics, which records that a page was opened, roughly where in the world the request came from, and which site sent you here if any. It sets no cookies, writes nothing to your browser, and assigns you no identifier — so it cannot follow you between visits, between pages in a way that builds a profile, or onto any other website. We use it to see which localities people look up, which is how we decide where to add data next.

It runs on every page. There is no way to switch it off from within the site, and we would rather say that plainly than offer a toggle that does nothing; a browser blocker or Do Not Track extension will stop it loading, and the site works exactly the same without it.

The search box and the address box. Searching a locality name is matched in your browser and sent nowhere. If you search a pincode we don't hold, or press Enter to find a place such as an apartment, road or landmark, that text is looked up so we can show the localities nearest to it. On the schools and connectivity pages you can also enter an address so distances are measured from there rather than from the middle of the neighbourhood. In both cases what you typed is sent to our server and on to Nominatim, the OpenStreetMap geocoding service, which turns it into coordinates. We do not store it, and it is not linked to anything else. It is sent in the body of the request rather than in the web address, precisely so it does not end up written into server logs.

The result is used in your browser and forgotten when you close the tab. Nominatim receives the text from our server, not from you, so your own IP address is not part of what it sees.

Asking us to add a locality. When a search doesn't find what you wanted, you can ask us to add it. We store only what you searched for, the city filter if you had one selected, and — if the place was found on the map — where that place is and how far it is from the nearest locality we cover. We do not store your name, email, IP address or anything else about you, and the request is not linked to any account. To stop the button being misused, our server counts requests per IP address in memory for an hour; that count is never written down. We use the requests, counted together, to decide which areas to add next.

The question box. Each locality page lets you ask a question about that neighbourhood. Your question is sent to our server, and from there to Groq, the company that runs the AI model which writes the answer, together with the public data we hold about that locality. We do not store your question or the answer. To stop the box being flooded, our server keeps a count of questions per IP address in memory for an hour; it is never written to a database or a file, and it is gone when the server restarts. Groq receives the question from our server, not from you, so your IP address is not part of what it sees, but its own terms apply to what it is sent — so please don't put personal details in a question.

The reporting form. Every locality page, and cards where we have little or no data, carry a link inviting you to tell us what you have seen. That link goes to a form hosted by Google Forms, outside this app, and what you submit is stored in the Google account of whoever runs this site — not in our database. It asks which neighbourhood, what category, what you saw, when, and how you know. An email address is optional and used only to ask you a follow-up question. Google's own privacy terms apply to that form, and the locality — and, from a category card, the category — is filled in from the page you came from.

Being honest about this matters more than the sentence above sounding absolute. Like any website, ours runs on hosting that keeps ordinary request logs, and those logs contain IP addresses:

• Vercel serves the site, records standard access logs, and runs the page-view counter described above. The counter's figures are aggregate — page, country, referrer — and are not joined to those logs by us.
• Render runs the data API and does the same.
• Neon stores the neighbourhood data and, for people who sign in, their account and shortlist. For everyone else it holds nothing personal.
• Nominatim, run by the OpenStreetMap Foundation, receives what you typed only when you look up a place in the search box or use the address box, and receives it from our server rather than from your browser.
• Groq receives a question only when you ask one, with that locality's public data, and receives it from our server rather than from your browser.
• Google handles sign-in if you choose to sign in, and hosts the reporting form, seeing a submission only if you choose to send one.

We do not read those logs to build profiles, and nothing in them is combined with anything else. They exist because servers keep them. The place lookup and the question box write no log of their own.

The installed app is the same website in a container. It requests no Android permissions — no location, no contacts, no storage, no camera. It cannot see anything on your phone.

A small amount of the page is stored offline so that losing signal shows a clear message rather than a browser error. Neighbourhood data is deliberately not stored offline: a saved air quality reading would still look current days later, and every figure here is supposed to tell you how old it is.

Air quality from CPCB and community sensors via OpenAQ. Schools from UDISE and OpenStreetMap. Safety and water from published news coverage. All of it is public information about public places, and each figure on the site names its own source and date.

News headlines are read by an automated classifier to decide whether an article describes an incident in a particular locality. It reads published headlines only.

The app is not directed at children. Nothing is collected from anyone who simply reads it. The reporting form is open to whoever follows the link, so it asks for no more than is needed to check a report and makes an email address optional — but we cannot verify who fills it in, and we would rather say so than imply a check we do not perform.

This page was briefly wrong, and it is worth telling you rather than quietly fixing. On 6 September 2026 the address box and the reporting link went live while this page still said there was no form and that we collected nothing. That was untrue for a few hours until this update. Nothing was stored in that window — the address box has never kept anything, and the form was hosted elsewhere from the start — but the promise made here was that the policy would change first, and it did not.

On 8 September 2026 page-view counting was added — the wording above changed in the same commit as the script, which is the commitment working rather than being tested again. A cookieless counter was chosen over the usual analytics tools specifically so that the rest of this page stays true: no cookies, no identifier, no consent banner asking you to agree to something you did not want.

It was wrong again, from 12 to 13 September 2026. The question box on each locality page went live on 12 September, and this page did not mention it or name Groq until the next day. No question was stored by us in that window, but the page did not tell you where a question goes, and it should have said so before the box appeared. On 13 September the search box also began looking up pincodes and places, and this page was updated in the same change. On 15 September a button to ask us to add a locality was added, and this page was updated in the same change to say what it stores.

On 13 September 2026 optional sign-in was added — to save localities, write private notes and compare them. This page changed in the same commit as the code, before sign-in was switched on. Signing in is the “asking before anything about you is stored” this page promised: nothing is stored until you choose to sign in.

The commitment stands, and now has a record attached to it. If anything else about what is stored changes, this page changes first.

Questions about this policy, or a request about data you believe we hold, can be sent to the address on the listing page for this app.