Privacy Policy

This Privacy Policy applies to everyone who uses YardRun at yardrunapp.com or through the installed YardRun app, including:

• Visitors who browse the site without an account.
• Customers (property owners, renters with permission, and property managers).
• Independent service providers who create a provider profile or submit quotes.
• Administrators and staff members who operate the platform.

It explains what YardRun collects, why, who can see it, how long it is kept, and the choices you have.

YardRun is a marketplace. Customers post outdoor and property jobs, and eligible independent providers decide whether to submit a quote. The customer chooses who does the work.

Providers are independent businesses. They set their own service territory, schedule, pricing, and equipment. YardRun does not dispatch, assign, employ, or control providers. Because of that, a provider you hire handles some of your information directly, as their own business, once a job is booked.

When you create an account, YardRun collects:

• Your name.
• Your email address.
• A password, stored only in a hashed (irreversible) form.
• Optionally, a phone number and mailing ZIP code.
• Account role and status, and basic sign-in activity.

Before a job is booked, providers see a privacy-safe version of your name — a first name and last initial, such as “Sarah M.” Your surname, email address, and phone number are not shown to providers who are bidding.

To match a job with providers who cover the area, YardRun collects:

• The property address you enter for the job.
• County and approximate location derived from that address.
• Property details you choose to provide, such as lot size or terrain notes.
• Access information you choose to provide, such as gate codes, dog warnings, parking notes, or where to find a spigot.

Before booking, providers see only an approximate area — not your exact street address. See Exact address and access-information controls.

YardRun records the information needed to run a job from posting to completion:

• Service category, job description, scope, and requested timing.
• Questions and answers exchanged before a quote.
• Quotes, price changes, acceptances, declines, and reservations.
• Booking status, confirmations, arrival and completion updates.
• Cancellations, no-shows, disputes, and their outcomes.
• Simulated or test payment records during the pilot.

Providers give YardRun more information than customers, because trust requires it:

• Legal or business name, business structure, and contact details.
• Service territory, availability, service categories, and equipment.
• Licensing or certification details where a service calls for them.
• Insurance information a provider chooses to supply.
• Identity-verification information, which may include a government-issued ID.
• Payout and tax information, which is collected and held by our payment processor rather than stored in full by YardRun.

A provider's legal identity, exact location, contact details, website, and social accounts are not shown publicly or to customers who are still comparing quotes. Real identity is released to a customer only after that customer selects the provider and the booking is confirmed.

Reviews follow verified job completion. Both sides can write a review, and reviews stay hidden for a blind period of 14 days so neither side writes in reaction to the other. An open dispute holds publication until it is resolved.

Published provider reviews are visible to customers, shown under the provider's public alias along with objective reliability data. A provider with fewer than three reviews is labeled “New to YardRun” with an exact count rather than a star summary. Reviews customers receive are used internally for safety and reliability and are not published as a public customer rating.

Payment card details are entered with, and held by, a third-party payment processor. Card numbers do not pass through YardRun's own storage.

The owner of YardRun does not receive or have access to users' complete payment-card numbers.

YardRun receives limited records from the processor — an amount, a status, a timestamp, a transaction reference, and at most a card brand and last four digits — so a booking, refund, payout, or dispute can be reconciled. Card payments are not yet active on YardRun; pilot payment activity is simulated or in test mode.

Messages, questions, answers, and support requests sent through YardRun are stored so both sides have a record and so YardRun can resolve disputes, investigate safety reports, and enforce its rules.

Private communications are not used for unrelated advertising, and they are not read routinely. They are accessed only for a legitimate support, safety, fraud, dispute, verification, or legal purpose.

Operating the app produces routine technical data:

• IP address, browser or app version, and device type.
• Pages or screens opened, and timestamps.
• Error and crash information.
• Security signals such as repeated failed sign-in attempts.

This data keeps the app working on weak rural connections, helps diagnose defects, and helps detect abuse.

A ZIP code entered in the service-area checker is used to tell you whether YardRun covers your county. It is an intake aid; a confirmed property address inside an enabled county is what actually determines coverage.

If you join the waitlist, YardRun stores your email address, the interest you selected (homeowner or provider), and the date. That email is used to tell you when YardRun opens near you. It is not sold, rented, or shared for marketing by anyone else.

• Directly from you, when you type it into a form or upload a file.
• Automatically, from your device and browser as you use the app.
• From the other side of a job — for example, a provider marking work complete on your job.
• From service partners, such as the payment processor confirming a transaction status, or an address lookup confirming a county.

YardRun collects only the information reasonably necessary to operate, protect, and improve the platform. Specifically, to:

• Create and secure your account.
• Show a posted job to providers whose territory covers the property.
• Let providers ask questions and submit quotes.
• Let customers compare and select a provider.
• Confirm bookings, release the address at the right stage, and track completion.
• Process payments, refunds, and payouts through the payment processor.
• Handle cancellations, no-shows, disputes, and reviews.
• Verify provider eligibility, licensing, and insurance claims.
• Detect fraud, abuse, contact-sharing attempts, and safety risks.
• Provide support and answer your questions.
• Fix defects and improve the product.
• Meet legal, tax, and recordkeeping obligations.

Access inside YardRun is role-based. Administrators and staff members receive only the permissions their job requires, and sensitive fields are restricted at the database level rather than merely hidden in the interface.

Even the owner of YardRun does not have unrestricted access to users' sensitive personal information.

The owner of YardRun cannot view users' passwords in readable form.

The owner of YardRun, administrators, staff members, and service providers are not permitted to browse personal information out of curiosity or use it for unrelated purposes.

Passwords are stored as one-way hashes by the authentication system, so a stored password cannot be turned back into the original text. Internal access to personal information is limited to legitimate booking, support, safety, fraud, dispute, verification, and legal purposes, and administrative actions on roles and permissions are recorded in an audit log.

While a job is open for quotes, providers see an approximate area — county and general vicinity. The exact street address and any access information you entered, such as gate codes or dog warnings, are released only after you select a provider, the provider confirms, and the booking reaches an approved payment state.

That release rule is enforced by the database, not only by the screen. Exact service addresses are never displayed publicly or to providers who were not selected.

Job photos are stored in private storage. They are not publicly browsable and are not indexed by search engines. Viewing a photo requires a short-lived signed link issued only after YardRun confirms the viewer is authorized for that job at that stage.

Photos can reveal more than you intend — house numbers, vehicles, license plates, mail, documents, or people. Upload only what a provider needs to see in order to quote or complete the work.

Before a job is booked, both sides stay anonymous. To keep that promise, YardRun screens job descriptions, questions, answers, quote notes, profile text, filenames, and captions for phone numbers, email addresses, links, social handles, off-app payment references, and attempts to move a job off the platform.

Screening is automated and best-effort. It is not proof of wrongdoing, and a clean result is not proof of compliance. Flagged text goes to an internal review queue where a person decides what happens next. Screening exists to protect privacy and platform protections — not to read private conversations for any other reason.

YardRun shares personal information only in these situations:

• With the other side of a job, at the stage the workflow allows — an alias and job details while quoting, and identity plus exact address after a confirmed booking.
• With service providers that operate the platform, such as hosting, database, email delivery, mapping or address lookup, and payment processing — limited to what each needs to perform its function.
• For safety and fraud prevention, where sharing is necessary to protect a person or investigate misuse.
• For legal reasons, in response to a valid legal request, or to establish, exercise, or defend legal claims.
• In a business transfer, if YardRun is involved in a merger, acquisition, or sale of assets, with this policy continuing to apply to the transferred information.
• With your direction, when you ask YardRun to share something.

• YardRun does not sell personal information.
• YardRun does not rent customer or provider lists.
• YardRun does not publicly disclose exact service addresses or provider legal identities.
• YardRun does not use private job details, access information, identity documents, or private communications for unrelated advertising.
• YardRun does not pretend that any internet service can guarantee perfect security. No online platform can make that promise honestly, and YardRun will not make it.

YardRun uses browser storage for a small number of practical purposes:

• Keeping you signed in.
• Remembering an in-progress job draft so a dropped signal does not lose your work.
• Offline and installed-app behavior, including cached pages for weak coverage.
• Basic security protections.

YardRun does not use third-party advertising cookies or cross-site advertising trackers. Clearing site data signs you out and discards saved drafts.

YardRun sends messages tied to your use of the platform:

• Account emails, such as confirmation and password reset.
• Job activity alerts, such as a new quote, a confirmation, or a status change.
• Support replies.
• Waitlist updates, if you joined the waitlist.

Transactional messages about your account and active jobs are part of the service and cannot be turned off while your account is active. Optional and waitlist messages can be stopped by unsubscribing or by contacting us. Text messages are not sent during the pilot.

Information is kept for as long as there is a reason to keep it:

• Account information: while your account is active.
• Job, booking, quote, and payment records: retained after completion for tax, accounting, dispute, and legal recordkeeping.
• Identity, licensing, and insurance verification records: retained while the provider is active and for a limited period afterward.
• Safety, fraud, and moderation records: retained as long as needed to protect users.
• Technical logs: retained for a short operational period.
• Waitlist emails: retained until launch in your area or until you ask to be removed.

When information no longer has a purpose, it is deleted or de-identified.

YardRun protects information with layered, practical measures:

• Encrypted connections in transit and encryption of stored data at the host level.
• Passwords stored only as one-way hashes.
• Database-level authorization rules that restrict who can read or change each row.
• Role-based staff permissions with an audit trail for permission changes.
• Private photo storage with short-lived, authorization-checked links.
• Stage-gated release of exact addresses and provider identity.
• Card data handled by a third-party payment processor.

No internet service can be guaranteed completely secure, and YardRun makes no such guarantee. Protecting your account also depends on you: use a strong, unique password and tell us promptly if you suspect unauthorized access.

If YardRun becomes aware of a security incident affecting personal information, we investigate, work to contain it, and take steps to reduce harm. Where notice is required by law or where notice would let you protect yourself, we notify affected users and the appropriate authorities, describing what we know, what we are doing, and what you can do.

Regardless of where you live, you can:

• Clear eligible personal data yourself, or permanently delete your account yourself, using the orange “Delete Account & Data” item in the app menu when you are signed in. You do not need to ask us, open a support ticket, or wait.
• Ask us to tell you what personal information we hold about you.
• Ask us for a copy of it.
• Correct information that is inaccurate.
• Stop optional messages.
• Ask us to explain a decision or an automated screening result that affected you.

For anything we handle by hand, contact us using the details in Contact information. We verify who you are before acting on a request, and we respond promptly. Some records — completed transactions, payment, payout and tax records, disputes, fraud, safety, moderation and audit history — are retained or deidentified where the law or a legitimate protective purpose requires it. YardRun does not penalize you for exercising a privacy right.

Deletion is in your hands. When you are signed in, the orange “Delete Account & Data” item in the app menu gives you two direct choices, each carried out immediately by our systems:

• Clear My Personal Data — your sign-in stays active while we delete or anonymize eligible personal data: profile contact details we no longer need, uploaded photos, drafts, open or cancellable jobs, your quotes, your questions, your alerts, and the written text of reviews you left.
• Delete My Account — everything above, plus your profile, provider record and your authentication login. Your access is revoked and you are signed out.

We block either action only when a genuine obligation is unresolved — work still in progress, a payment authorized but not settled, or an open dispute — and we tell you the exact reason.

Certain records are retained after deletion, in deidentified form wherever operationally possible: completed and cancelled bookings, payment, fee, payout and tax records, price-change history, disputes and their outcomes, ratings and reliability history, moderation and fraud or safety flags, and audit history including the deletion event itself. In those records your direct identifiers are replaced with a random reference, they are disconnected from any active public profile, and they are restricted to legal, financial, fraud, safety, moderation, dispute and audit purposes. Because of this, we do not claim that every trace of your data is erased — we tell you exactly what was deleted, what was anonymized, and what was retained as soon as the operation finishes.

Once a customer's address and access details are released to you, you become responsible for handling them as your own business:

• Use customer information only to quote, schedule, and complete that job.
• Do not share, publish, resell, or add customer contact details to any marketing list.
• Do not photograph or record beyond what the job requires.
• Do not keep access information, such as gate codes, longer than the job needs.
• Follow the laws that apply to your own business records.

Misusing customer information is grounds for removal from YardRun.

YardRun is intended for adults. Accounts require you to be at least 18 years old, and YardRun does not knowingly collect personal information from children. If we learn that a minor created an account or that a child's information reached us, we delete that information and close the account. A parent or guardian who believes a child's information was submitted can contact us and we will remove it.

YardRun relies on a small set of service partners to operate:

• Cloud hosting and database services.
• Authentication and password handling.
• Email delivery for account and job notifications.
• Address lookup and mapping for service-area checks and route estimates.
• Payment processing and provider payouts.

These partners receive only what they need for their function and are required to protect it. Their own policies govern what they do with information they collect directly from you, such as card details entered with the payment processor. Route and travel estimates shown in the app are estimates confirmed by the provider, not guarantees of arrival.

YardRun uses automated processing in limited, specific ways:

• Matching a posted job to providers whose territory covers the property.
• Screening text and filenames for contact-sharing and off-platform attempts.
• Flagging unusual sign-in, quoting, or payment patterns.
• Calculating reliability indicators and route estimates.

Automated flags are signals, not verdicts. A person reviews consequential decisions such as restricting or removing an account, and you can ask us to explain and reconsider a decision that affected you.

YardRun updates this policy as the platform changes — for example, when card payments become active. When we make a material change, we update the Last Updated date and give notice in the app or by email before the change takes effect where notice is appropriate. Continuing to use YardRun after a change takes effect means the updated policy applies to you. Earlier versions are available on request.

Questions, requests, or privacy concerns can be sent to:

• Email: privacy@yardrunapp.com
• Website: yardrunapp.com
• YardRun, Kentucky, United States

Write “Privacy Request” in the subject line so it reaches the right place quickly. Suspected unauthorized access to an account is treated as urgent — contact us right away.