Privacy

Nobody under 13 has an account

A date of birth is asked for before anything else, and under 13 is a hard stop rather than a warning. If a birthday later shows that an account holder is under 13, the sign-in link is severed automatically and the account cannot be used. A younger child can still do the work, on a listing their parent owns and runs, with the parent as the account holder.

What is collected from a grown-up

The account holder gives a name and an email, and optionally a phone number. A neighbor who wants to hire also gives a home address, because a stranger asking a child to come to their house should be somebody we can place at that address.

• Name, email, and a phone number if you add one.
• For hiring: your street address, and the block it sits on.
• A card, if you subscribe or order printed goods. Stripe holds it, we never see it.
• What you write: messages, job details, reviews, and reports.

What is collected about a child

A parent sets up a kid, and the parent decides what is on their public page. The date of birth is used to decide what the account is allowed to do, and is never published.

• Their name, and the shorter form shown publicly if the parent picks one.
• Date of birth. Used for the age rules, shown to nobody.
• What they offer, when they are free, and where they will work.
• Photos they attach when finishing a job, which the hiring neighbor and the parents can see.

Addresses, which is the part that matters most

A street line is stored so that an address can be verified, and then it stays behind a wall. The listings, the search results and the public job board are all built from views that do not select the street line at all, so there is no setting to get wrong and no bug that can leak it: a column a view never mentions cannot come out of it.

• Everyone browsing sees a block label, never a house number.
• The house number is released at the moment a job is booked, to the kid and their parents.
• A kid can list a place that is not their home, such as a grandparent’s house.
• Coordinates are stored for the block, not for the doorstep.

Who can see what

Access is decided by the database, on every single query, using row level security. It is not a check that a page remembers to make: a page that forgot would be refused by Postgres rather than quietly showing something. There is a test suite whose whole job is to sign in as each kind of account and confirm it cannot reach what it should not.

• Parents see everything about their own kids, and nothing about anybody else’s.
• A co-parent sees only the kids they were given access to.
• A neighbor sees a kid’s public page, and their own jobs and messages.
• Every thread involving a child is visible to that child’s parents. The neighbor is told this before they send anything.
• Signed out, there is no directory of adults anywhere in the product.

What staff can see, and what that costs them

Staff can read what they need to investigate a report, including private messages. The trade is that every one of those looks is written down: who looked, at what, and when. That record is append-only. Staff cannot edit it and cannot delete it, and neither can anybody else, because there is no code path that does so. If you want to know whether a person at NaborJobs read something of yours, you can ask, and the answer comes from that log.

Money

What a job pays never passes through this product. A neighbor pays the kid directly, in cash or however they agree. Afterwards each side says whether it was paid, and if the two answers differ, the product says so rather than picking a side. The amount is recorded; the money is not held, moved, or taken a cut of.

• Subscriptions and printed goods are paid through Stripe. Card details go to Stripe, not to us.
• Job pay is between the neighbor and the family.

Who else your information touches

The product runs on other companies’ infrastructure, and each of them sees only what its job requires.

• Supabase stores the database and handles sign-in.
• Google, only if you choose “Continue with Google”: it confirms who you are, and we receive your name and email from it, nothing else.
• Vercel serves the site.
• Stripe processes subscription and print-shop payments.
• Printify prints and posts anything ordered from the shop.
• Resend sends email.
• Mapbox turns an address into a block.

What this product does not do

Some of this is worth stating plainly, because so many products do the opposite and people have learned to assume the worst. None of the following is a setting you have to find and switch off. They are not built.

• Nothing is sold or rented to anybody.
• There is no advertising, and no advertising profile is built.
• There are no third-party analytics, no tracking pixels and no session recording. NaborJobs sets four cookies of its own and none of them follows you anywhere: one keeps you signed in, one remembers which half of the product you were last looking at, one carries a join code across signing up and then expires after half an hour, and one remembers where a new account was headed until its email is confirmed, for a day at most. On the screens that take a card, Stripe, which handles the payment, sets its own cookies to spot fraud, and says it never uses that information for advertising or sells it.
• A child is never messaged without a parent receiving the same thing.

Getting a copy, or getting it deleted

Your account has both. “Download a copy” gives you a file of everything that is yours, made when you press it and kept nowhere. “Delete your account” hides the account at once and erases it fourteen days later; signing in before then keeps it. A kid with a login can download their own copy, and a parent deletes a kid’s page, from the page’s Manage screen. Deleting an account removes the profiles, listings, messages and addresses on it: the other side of a conversation keeps their own words, and yours read “Message removed”. Some things survive on purpose: entries in the staff audit log, because a record of who read what is worthless if the subject can erase it; the other side’s own account of a job, because it is theirs and not yours; and questions and reports you sent to staff, which they are obliged to keep. Anything else, write to privacy@naborjobs.com.

Asking us something

Write to privacy@naborjobs.com. If something has gone wrong with a job or a person rather than with data, Safety and help is the faster route.

Last updated October 2026.