Who We Are
Mennonite Your Way is a Christian hospitality platform that connects travelers with hosts in the Mennonite and broader Christian community. We are committed to handling your personal information with care and respect.
Information We Collect
- Account information — your name and email address when you register with an email and password. If you sign in with Google, we receive your name and email address from Google as provided by your Google account.
- Registration details — to complete registration, including when you sign in with Google, we ask for your town and state, your mailing address, and your church affiliation. Your mailing address must be complete before you can book a stay, and it is not shown to other members. Your church affiliation is visible only to you and to Mennonite Your Way administrators; it is not shown to hosts, guests or other members.
- Profile information — a biography and profile photo that you choose to add to your account.
- Phone number — you can add a phone number to your account. It is optional for guests, hosts are asked to add one, and administrators must provide one. If you opt in to SMS notifications, we use your phone number to send you booking-related text messages; SMS is entirely optional. Some listings managed through Streamline (see Third-Party Service Providers) require a phone number to book.
- Listing information — property details, photos, pricing, availability rules, and calendar data that hosts submit when creating and managing listings.
- Booking information — check-in and check-out dates, guest and host identities, payment amounts, and communication associated with bookings.
- Gift card information— when purchasing a gift card, we collect the recipient's name and email address, and any personal message you choose to include.
- Payment information — payments are processed by Stripe. We do not store full card numbers. Stripe may collect and store payment details subject to their own privacy policy.
- Host payout verification— when hosts set up payouts, they provide the information Stripe may require to verify their identity and send payouts (which can include, for example, legal name, date of birth, address and bank account details) directly to Stripe. If Stripe requires a photo of an identity document, it may ask for access to your device's camera. This information goes to Stripe under Stripe's privacy policy; we do not receive copies of identity documents or bank account details. We store only the identifier of your Stripe account and whether payout setup is complete.
- Usage data — standard server logs and session cookies required for authentication and site functionality.
- Page views— when you open a page on our website or in the app, we record the page address, the page you came from, your browser's user-agent string, a one-way hash of your IP address (we do not store the IP address itself), and a random visitor identifier kept in a first-party cookie for up to one year. If you are signed in, the page view is also linked to your account. We use this to understand how the platform is used, through internal reports available only to our administrators.
Our Android App
The Mennonite Your Way Android app shows the Mennonite Your Way website inside the app, so everything in this policy applies to the app as well. In addition:
- Signing in— you sign in with the same account as on the website. If you choose Google, sign-in opens in your device's browser and then returns to the app; we receive the same name and email address described above.
- On your device — the app keeps your sign-in session and a few app settings on your device. They are not included in device backups and are removed when you uninstall the app.
- Push notifications — notifications may not be available in every version of the app. If the app offers them and you allow them, the app registers your device with Google Firebase Cloud Messaging, which issues a device token. We store that token with a randomly generated app installation identifier and the device platform, linked to your account, so that we can notify that device about activity such as new messages. Each notification contains a general alert and an internal reference that opens the right page in the app, not names, message text or booking details. The registration is removed when you sign out of the app or delete your account, and you can turn notifications off at any time in your device settings.
- Host payouts — if you set up payouts in the app, you enter that information directly with Stripe. If Stripe asks for a photo of an identity document, the app may ask for camera access; the photo goes to Stripe, not to us.
How We Use Your Information
- To operate the platform and facilitate bookings between guests and hosts.
- To send transactional emails such as booking confirmations, host notifications, and check-in reminders via our email delivery provider.
- To send SMS notifications for booking events, if you have opted in and provided a phone number.
- To deliver automated messages configured by hosts at key points in the booking lifecycle (booking confirmation, check-in reminder, checkout morning, and post-departure).
- To process payments through Stripe Connect.
- To administer accounts and respond to support requests.
- To improve the platform and ensure its security.
- To display your name and profile photo to hosts or guests as part of the booking and review process.
Third-Party Service Providers
We do not sell your personal information. We share information only as necessary to operate the platform, with the following service providers:
- Stripe — payment processing and host payout services via Stripe Connect, including any identity verification Stripe may require for host payouts.
- Supabase — authentication and database hosting. Your account credentials and data are stored on Supabase infrastructure.
- Vercel — website hosting and delivery.
- Google — if you choose to sign in with Google, your authentication is handled by Google OAuth. We receive only the name and email address associated with your Google account.
- Resend — transactional email delivery. Booking confirmation and notification emails are sent via Resend on our behalf.
- Twilio — SMS delivery for booking notifications. Your phone number and message content are transmitted to Twilio only if you have opted in to SMS notifications.
- Streamline — property-management software used for some listings. When you book one of these listings, we send your name, email address, phone number and mailing address to Streamline to create your reservation.
- Cloudflare Turnstile — bot protection on our sign-in, registration, and password-reset forms. Cloudflare processes a brief challenge to verify that form submissions are from a human. No account data is shared with Cloudflare.
- Google Firebase Cloud Messaging— delivers push notifications to the Android app, only if you allow notifications. Firebase receives your device token and each notification's general alert and internal page reference.
Information Shared Between Users
When a booking is confirmed, the guest and host each receive the contact details necessary to coordinate their stay, including name and email address.
Data Retention
We retain account and booking records for as long as your account is active and as required for financial and legal compliance. You can delete your account yourself in Account Settings, on the website or in the Android app, or ask us to delete it. See Delete Your Account for the steps and for what is kept after deletion.
Your Rights
You may request access to, correction of, or deletion of your personal data by contacting us. We will respond to reasonable requests in a timely manner.
Cookies
We use cookies for authentication — to keep you signed in via a secure session managed by Supabase. If you allow notifications in the Android app, a cookie also holds the app installation identifier described above. We also use one first-party cookie, the visitor identifier described under Page views, to count visits. We do not use advertising cookies or third-party analytics or tracking cookies.
Effective October 26, 2026