Legal

Privacy Policy

Effective date: September 10, 2026

Who we are and how to contact us

Stay Better is a United States-based business that provides digital guest guide software for vacation rental hosts and property managers at staybetter.io and through the StayBetter iPhone companion. This policy explains what information we collect, how we use it, and the choices you have. For any privacy question or request, email admin@staybetter.io.

Information we collect

We collect the following categories of information when you use Stay Better:

  • Host account information. Your name, email address, account identifier, and sign-in provider. Firebase Authentication handles your password when you use email and password. Google or Apple sign-in shares the account details you authorize, such as your name and email address.
  • Property and guidebook content. Property details, check-in instructions, WiFi credentials, house rules, local recommendations, photos, and other content you add to your guides.
  • Reservation and guest information. Guest names, email addresses, phone numbers, and stay dates that hosts enter, import, or sync from a connected property management system such as Hostaway or Guesty. When a guest unlocks a guide, we collect the phone number and last name they submit so we can match them to the reservation on file.
  • Billing information. Payments are processed by Stripe. We do not store full card numbers; we store your subscription state and the last four digits of your payment method.
  • Concierge questions. Questions guests ask the AI concierge, which we log for rate limiting and abuse prevention.
  • Website analytics and device data. Usage events, anonymous browser identifiers, and coarse device context (device type, browser and operating-system family, language, and time zone), plus marketing attribution parameters (such as UTM, gclid, and fbclid values) held in your browser storage.

The iPhone companion

  • Notes and photos. Unpublished notes and selected photos are saved on your iPhone. Local drafts do not sync between devices and are excluded from the app's device backups. Publishing sends the instruction text, photo description and selected photo to your StayBetter account for your guest guide. The app removes photo location and camera metadata before upload.
  • Dictation. The app's Record control requires on-device speech recognition. The app does not save or upload audio recordings. If on-device recognition is unavailable, you can type instead. Keyboard dictation follows your device settings.
  • Optional writing help. After the in-app disclosure and your agreement, requesting writing help sends your selected written explanation to Google Cloud Vertex AI (Gemini). Your photo and audio are not sent to the AI drafting service. We save the generated draft and request status with your account so a retry can recover the result. You review and edit the instruction before publishing it. You can also use your own words without AI.
  • Account security and operation. Our services and sign-in providers process account identifiers, IP addresses, app and device information, integrity verification data, and request metadata. This supports sign-in, fraud prevention, diagnostics, usage limits and reliable saving. Google Sign-In may estimate a general location from your IP address and collect SDK usage information. The companion does not request GPS access.
  • Advertising. The companion does not contain advertising pixels or the Firebase Analytics SDK. Creating an account in the companion does not send a signup conversion to Meta. If you separately use our website, the website practices described below apply there.

How we use information

We use the information above to operate and improve the service: creating and delivering guest guides, verifying that a guest belongs to a reservation before showing them a private guide, answering guest questions through the AI concierge, sending transactional guide emails to guests, processing subscription payments, preventing abuse, measuring the performance of the service and our advertising, and providing support. Hosts upload and import guest reservation data; Stay Better processes that guest data on the host's behalf to deliver guides for their properties.

Service providers and subprocessors

We rely on a small set of service providers to run Stay Better:

  • Google Firebase and Google Cloud. Our application is hosted on Google Firebase, including Authentication, Cloud Firestore, Cloud Functions, Cloud Storage for host-uploaded property photos, and Firebase Hosting. Guest concierge questions and the relevant guidebook content are sent to Google Cloud Vertex AI (Gemini) to generate answers. Optional host writing help also uses Vertex AI as described above. Firebase App Check and Apple App Attest help verify requests from the iPhone companion.
  • Apple and Google sign-in. These providers verify the identity you choose to use. Their services process sign-in and security information under their own privacy terms.
  • Stripe. Processes all subscription payments.
  • Meta. We use the Meta Pixel and the Meta Conversions API for advertising measurement, as described in the cookies section below.
  • Google Analytics and Google Ads. We use Firebase/Google Analytics and a Google Ads tag to understand usage and measure advertising.
  • Hostaway and Guesty. If you connect one of these property management systems, reservation data (guest name, email, phone, and stay dates) syncs into Stay Better.
  • Transactional email delivery providers. Used to deliver guide emails to guests at the email address on the reservation.

Cookies and advertising tracking

Our marketing pages use the Meta Pixel, which sets the _fbp and _fbc browser identifiers, and Google tags for Google Ads and Google Analytics. For advertising measurement and deduplication, our servers also send conversion events to the Meta Conversions API that include a SHA-hashed version of your email address, an internal identifier, and the same browser identifiers. We do not send Meta your raw email address or your guests' information. Marketing attribution parameters from the link you arrived on are kept in your browser's session storage and cleared when your session ends.

Data retention and deletion

We retain your account, property, and reservation data while your account is active so your guides keep working. To request access to your data, email admin@staybetter.io and we will respond as soon as possible.

You can request account deletion in Settings on the website or in the iPhone companion. Confirmed deletion disables account access and guest guides, cancels the subscription, and schedules account content for permanent deletion after 30 days. Scheduled cleanup retries temporary failures. You can also request deletion through the support email above.

To recover a deletion confirmation after a connection failure, we retain a minimal record containing your account identifier, hashed recovery secrets and completion status for 40 days from the first recovery request, then remove it during scheduled cleanup. It does not contain your notes, photos or password. The companion removes that account's local drafts when it confirms deletion; a device that is offline must reconnect to receive that confirmation.

We also use short-lived hashed IP or stay identifiers to limit photo downloads and deletion-status requests. These records expire after their rate-limit window and cleanup buffer, then are removed during scheduled cleanup. Hosting and sign-in providers may retain separate security and operational logs under their applicable retention policies.

Security

We use industry-standard safeguards to protect your information, including encryption in transit, access rules that restrict each host's data to their own account, and guest verification before a private guide is shown. No method of transmission or storage is completely secure, so we cannot guarantee absolute security.

Children's privacy

Stay Better is a business tool and is not directed to children under 13. We do not knowingly collect personal information from children under 13. If you believe a child has provided us personal information, contact us and we will delete it.

Changes to this policy

We may update this policy from time to time. When we do, we will update the effective date at the top of this page. Material changes will be communicated through the service or by email.