Privacy Policy

We collect the information needed to give every member of your household a working, shared home hub:

• Account details — your name, email address, a hashed password, and a profile photo if you choose to add one. If you sign in with Apple and choose Hide My Email, Apple gives us a private relay address (ending in @privaterelay.appleid.com) instead of your real email; we store and use it exactly as we would any account email, and messages we send are forwarded to you by Apple.
• Household content — the tasks, shopping lists, notes, reminders, calendar events, and the documents and receipts you upload — plus basic details about your household and its members.
• Subscription details — if you subscribe to a paid plan, your subscription status and limited billing metadata. Payments are handled by our payment providers — Lemon Squeezy on the web, and the Apple App Store or Google Play inside the mobile apps — so we never see or store your full card number.
• Notification tokens — if you turn on reminders, a push token for the device or browser you enabled them on. In the mobile app this is a Firebase Cloud Messaging (FCM) token.
• Photos & camera captures — when you photograph or upload a receipt, flyer, recipe, or document, we process that image to pull out the details you asked for.
• Voice input — if you use voice quick-add, your device’s built-in speech recognition turns speech into text — we receive only the resulting text, never an audio recording.
• Approximate location — to show local weather, we use an approximate, city-level location. By default it is derived from your connection’s IP address (which our servers receive with every request); you can optionally share your device’s precise location from the weather card to refine it. Either way the coordinates are coarse (rounded to roughly 11 km), used only to fetch the forecast, never stored, and never linked to your identity.
• Place lookups — when you add a location to an errand, the address text you type is sent to Google Maps Platform to suggest matching places.
• Connected accounts — if you connect your Google account, the Google Calendar events, Google Tasks, and Drive files you choose to sync — used only to provide those integrations, and revocable anytime.
• Technical data — basic server logs, app performance and crash diagnostics, and your approximate language and region — used to keep HomyIQ running well.

We use your information only to:

• Run the features you use — and keep them in sync across everyone in your household.
• Send the reminders you ask for — and deliver notifications you’ve opted into.
• Process subscriptions — and manage your plan.
• Power optional AI features — such as reading a receipt or flyer you photograph, parsing a recipe, or sorting a forwarded email — only when you choose to use them.
• Keep HomyIQ secure — diagnose problems, and fix bugs.

We do not sell your data, use it for cross-site advertising, or use your household’s content to train AI models.

We work with a small set of trusted providers. Each one only processes data to deliver its service to us:

• Supabase — our database, sign-in, and file storage. Your account and household data live here, protected by row-level security so only your household can read it.
• Lemon Squeezy — our payment provider and merchant of record for web subscriptions. Lemon Squeezy handles card data directly and collects any applicable tax; we receive only your subscription status.
• Apple App Store & Google Play — process subscriptions purchased inside the iOS and Android apps as the merchant of record. We receive only your subscription status — never your card details.
• RevenueCat — manages mobile subscription state and receipts. It receives an anonymized household identifier, never your name or card number.
• Web push services — your browser’s push service (operated by Apple, Google, or Mozilla) delivers reminder notifications when you opt in.
• Vercel — hosting, plus privacy-friendly, cookieless analytics and performance metrics that are aggregated and not tied to your identity.
• Sentry — error and crash diagnostics. To help reproduce problems, Sentry records occasional diagnostic session replays of how the interface is used — with all text and inputs masked by default.
• Anthropic (Claude) — powers our AI features. When you use them, only the content needed — a receipt or flyer image, a recipe, or the text of an email you forward — is sent to Anthropic to produce the result. It is not used to train Anthropic’s models.
• Google AI (Document AI & Gemini) — additional optical-character-recognition and AI processing for the receipts and documents you capture.
• Google account integrations (Calendar, Tasks & Drive) — only if you connect them: we access the Google Calendar events, Google Tasks, and Drive files you choose to sync. You can disconnect at any time.
• Google Maps Platform — powers address autocomplete for errand locations. When you type a place, the text is sent to Google to suggest matches.
• Firebase Cloud Messaging (Google) — delivers push notifications to the mobile app. It receives a device push token, not your content.
• PostHog — privacy-conscious product analytics that help us see which features are used so we can improve them.
• Open-Meteo — the weather service behind the weather card. It receives only coarse coordinates — never your identity.

We keep things lean. HomyIQ uses only essential cookies and local storage — to keep you signed in, remember your language, theme, and accessibility preferences, and (in shopping mode) hold changes you make while offline until you reconnect.

We do not use advertising or cross-site tracking cookies.

• Access & export — request a copy of the data we hold about you.
• Correction — edit your profile and household content directly in the app, anytime.
• Deletion — delete your account anytime from in-app settings, from the public deletion page at homyiq.com/delete-account, or by emailing support@homyiq.com. This removes your personal data and, where you’re the last member, your household’s data.
• Notifications — turn reminder categories on or off in the app, or revoke push permission in your browser at any time.

Depending on where you live — for example under the EU/UK GDPR or California’s CCPA — you may have additional rights. Contact us and we’ll help you exercise them.

We keep your data while your account is active. When you delete your account, we remove your personal data within 30 days — except limited records (such as payment history) we’re legally required to retain.

Your data is encrypted in transit, and access is restricted by authentication and row-level security. No system is perfectly secure, but we work hard to protect your information and will notify you of any serious incident as required by law.

HomyIQ is built for adults managing a household. It is not directed at children under 13 (or the minimum age in your country), and we do not knowingly collect their personal data.

HomyIQ is available worldwide, so your data may be processed in a country other than your own. Where required, we rely on appropriate legal safeguards to protect it during these transfers.

We’ll update this page whenever our practices change and revise the “last updated” date above. If a change is significant, we’ll highlight it inside the app.

Questions about your privacy, or want to make a request? We’re happy to help.

support@homyiq.com