Privacy Policy

We collect the information needed to give every member of your household a working, shared home hub:

• Account details — your name, email address, a hashed password, and a profile photo if you choose to add one. If you sign in with Apple and choose Hide My Email, Apple gives us a private relay address (ending in @privaterelay.appleid.com) instead of your real email; we store and use it exactly as we would any account email, and messages we send are forwarded to you by Apple.
• Household content — the tasks, shopping lists, notes, reminders, calendar events, and the documents and receipts you upload — plus basic details about your household and its members.
• Subscription details — if you subscribe to a paid plan, your subscription status and limited billing metadata. Payments are handled by our payment providers — Lemon Squeezy on the web, and the Apple App Store or Google Play inside the mobile apps — so we never see or store your full card number.
• Notification tokens — if you turn on reminders, a push token for the device or browser you enabled them on. In the Android app this is a Firebase Cloud Messaging (FCM) token; in the iPhone and iPad app it is an Apple Push Notification service (APNs) token.
• Photos & camera captures — when you photograph or upload a receipt, flyer, recipe, or document, we process that image to pull out the details you asked for.
• Voice input — if you use voice quick-add on the web or on iPhone, your device’s built-in speech recognition turns speech into text and we receive only that text. On Android, the app records your request as a short audio clip and sends it to Google’s Gemini service to be transcribed; the clip is used only to produce the text, is not stored by us, and is not used to train Google’s models.
• Location — to show local weather we need to know roughly where you are. By default that comes from your connection’s IP address, which our servers receive with every request and which is only accurate to around a city. You can also choose to share your device’s location from the weather card. If you do, your device first rounds it to roughly 11 km, and only that approximate position leaves it — we save it in a cookie on that device (for up to a year, so you are not asked again) and it reaches our server when the weather card loads. You can clear it at any time by clearing the site’s data, and we use it only to fetch your forecast. Whichever source is used, neither we nor our weather provider ever receive a precise position.
• Connected accounts — if you connect your Google account, the Google Calendar events, Google Tasks, and Drive files you choose to sync — used only to provide those integrations, and revocable anytime.
• Technical data — basic server logs, app performance and crash diagnostics, and your approximate language and region — used to keep HomyIQ running well.

We use your information only to:

• Run the features you use — and keep them in sync across everyone in your household.
• Send the reminders you ask for — and deliver notifications you’ve opted into.
• Process subscriptions — and manage your plan.
• Power optional AI features — such as reading a receipt or flyer you photograph, parsing a recipe, or sorting a forwarded email — only when you choose to use them, and only after you allow it. The first time you use an AI feature, the app names the AI services below and asks your permission; you can withdraw it anytime in Settings under AI features.
• Keep HomyIQ secure — diagnose problems, and fix bugs.

We do not sell your data, use it for cross-site advertising, or use your household’s content to train AI models.

We work with a small set of trusted providers. Each one only processes data to deliver its service to us:

• Supabase — our database, sign-in, and file storage. Your account and household data live here, protected by row-level security so only your household can read it. Recipe photos and profile photos are the exception: they are served from unlisted links that anyone who has the link can open. A profile photo is deleted when you remove it or delete your account; recipe photos are deleted with your household.
• Google Gemini (Google AI) — our main AI provider, used under Google’s paid API terms. When you use an AI feature — Quick Add by voice or text, a forwarded email, a photo or document you capture, a voice request on Android, a recipe page or video you import, or suggestions — only the content needed for that request is sent to Gemini. It is not used to train Google’s models. Google may keep it for a short time for abuse monitoring, and a video you import can sit briefly in Google’s temporary file storage while it is processed.
• Google Document AI — optical character recognition for some of the receipts and documents you capture.
• Anthropic (Claude) — our automatic fallback when Gemini is unavailable, and the provider for some recipe-photo and receipt lanes. It receives only the content needed for that request and does not use it to train its models.
• Lemon Squeezy — our payment provider and merchant of record for web subscriptions. Lemon Squeezy handles card data directly and collects any applicable tax; we receive only your subscription status.
• Apple App Store & Google Play — process subscriptions purchased inside the iOS and Android apps as the merchant of record. We receive only your subscription status — never your card details.
• RevenueCat — manages mobile subscription state and receipts. It receives a pseudonymous household identifier, never your name or card number.
• Resend — sends our emails — sign-in and confirmation links, household invitations, reminders, digests and trial notices. It receives the recipient’s email address and the content of that email.
• Google Workspace (email forwarding) — if you forward an email to your HomyIQ address, it passes through a Google Workspace mailbox we operate on its way into HomyIQ, where it is read to create the item you asked for.
• Web push services — your browser’s push service (operated by Apple, Google, or Mozilla) delivers reminder notifications when you opt in.
• Apple Push Notification service — delivers push notifications to the iPhone and iPad app. It receives a device push token, not your content.
• Firebase Cloud Messaging (Google) — delivers push notifications to the Android app. It receives a device push token, not your content.
• Vercel — hosting, plus privacy-friendly, cookieless analytics and performance metrics that are aggregated and not tied to your identity.
• Sentry — error and crash diagnostics. To help reproduce problems, Sentry records occasional diagnostic session replays of how the interface is used — with all text and inputs masked by default.
• Google account integrations (Calendar, Tasks & Drive) — only if you connect them: we access the Google Calendar events, Google Tasks, and Drive files you choose to sync. You can disconnect at any time.
• Open-Meteo — the weather service behind the weather card. It receives only coarse coordinates — never your identity.
• Recipe link fetchers (ScrapeCreators, Bright Data, the Internet Archive, YouTube & TikTok) — when you import a recipe from a link, these services fetch the public page or video for us. They receive only the public link you asked us to import — never your identity.

We also keep our own first-party usage analytics: a record of which features are used (for example, that a list was created), linked to your account ID and stored in our own database. We use it only to understand and improve HomyIQ — never for advertising, and we never sell it.

We keep things lean. HomyIQ uses cookies and local storage to run the service — to keep you signed in, remember your language, theme, and accessibility preferences, remember the location you chose for the weather card.

Our crash-diagnostics provider, Sentry, also keeps a short-lived record in your browser’s session storage while HomyIQ is open, so we can reproduce errors; it is cleared when you close the tab. Our Vercel analytics are cookieless.

We do not use advertising or cross-site tracking cookies.

• Access & export — request a copy of the data we hold about you.
• Correction — edit your profile and household content directly in the app, anytime.
• Deletion — delete your account anytime from in-app settings, from the public deletion page at homyiq.com/delete-account, or by emailing support@homyiq.com. This removes your personal data and, where you’re the last member, your household’s data.
• Notifications — turn reminder categories on or off in the app, or revoke push permission in your browser at any time.

Depending on where you live — for example under the EU/UK GDPR or California’s CCPA — you may have additional rights. Contact us and we’ll help you exercise them.

We keep your data while your account is active. When you delete your account, we remove your personal data within 30 days — except limited records (such as payment history) we’re legally required to retain.

Your data is encrypted in transit, and access is restricted by authentication and row-level security (recipe and profile photos use the unlisted links described above). No system is perfectly secure, but we work hard to protect your information and will notify you of any serious incident as required by law.

HomyIQ is built for adults managing a household. It is not directed at children under 13 (or the minimum age in your country), and we do not knowingly collect their personal data.

Your account and household data are stored in Canada, in Supabase’s Montréal (ca-central-1) region. Our hosting (Vercel), AI providers (Google and Anthropic), email (Resend), crash diagnostics (Sentry) and the other providers listed above process data in the United States, and HomyIQ is available worldwide, so your data may be processed in a country other than your own. Where required, we rely on appropriate legal safeguards to protect it during these transfers.

We’ll update this page whenever our practices change and revise the “last updated” date above. If a change is significant, we’ll highlight it inside the app.

HomyIQ is based in Edmonton, Alberta, Canada. Our Privacy Officer is accountable for how we handle your personal information and can be reached at the address below.

Questions about your privacy, or want to make a request? We’re happy to help. If you are in Canada and not satisfied with our answer, you can also complain to the Office of the Privacy Commissioner of Canada or, in Alberta, the Office of the Information and Privacy Commissioner of Alberta.

support@homyiq.com