Privacy Policy

We collect information you provide directly:

• Account information: name, email address, phone number, and role (e.g., parent, nanny).
• Household data: tasks, calendar events, meal plans, shopping lists, handoff notes, time entries, expense records, and uploaded receipts.
• Profile data: emergency contacts, dietary restrictions, and household preferences.

We also collect limited usage data (page visits, feature interactions) to improve the service.

• To provide, operate, and maintain the Homeflow AI service.
• To process your requests and sync data across household members.
• To power the AI assistant feature, which sends anonymized conversation context to OpenAI (see Section 4).
• To sync calendar and task data with Google services when you authorize that integration.
• To send transactional emails such as password resets and account invitations.
• To improve the service through aggregated, anonymized analytics.

We do not sell your personal information to third parties.

Your data is stored securely using Supabase, a cloud database provider with encryption at rest and in transit. Uploaded files (such as receipt images) are stored in Supabase Storage. We implement row-level security controls so users can only access data belonging to their household.

While we take reasonable measures to protect your data, no system is completely secure. You are responsible for maintaining the confidentiality of your account credentials.

Homeflow AI integrates with the following third-party services:

• Supabase — authentication, database, and file storage. See Supabase Privacy Policy.
• OpenAI— powers the AI assistant. Conversation messages are sent to OpenAI's API. We do not use your data to train OpenAI models under our API agreement. See OpenAI Privacy Policy.
• Google APIs — optional integration for Google Calendar and Google Tasks. Only enabled when you explicitly authorize it. We request only the minimum scopes required. See Google Privacy Policy.

We do not share your personal data with third parties except as described in this policy (service providers listed above) or as required by law. Household data is shared only among members of your household account, as configured by the household administrator.

Homeflow AI may store information about children as part of household management (e.g., school schedules, dietary needs). This information is provided by the household's adult account holders and is used solely to provide the service. We do not knowingly collect personal information directly from children.

You may request to:

• Access a copy of the personal data we hold about you.
• Correct inaccurate data.
• Delete your account and associated data.
• Export your data in a portable format.

To exercise these rights, contact us at the email below. We will respond within 30 days.

We retain your data for as long as your account is active. If you delete your account, we will delete your personal data within 30 days, except where retention is required by law.

We may update this Privacy Policy from time to time. We will notify you of material changes by posting the new policy with an updated date. Continued use of the service after changes constitutes acceptance of the revised policy.

For privacy-related questions or requests, contact us at: privacy@homeflow.ai