Privacy Policy
This describes what HomeMind actually does, so it's accurate — but it hasn't been reviewed by a lawyer yet and shouldn't be treated as final. See docs/legal/privacy-policy.md in the repository for the source of truth.
What we collect
- Account data: email, display name, password (stored as an Argon2id hash), optional phone number.
- Household data: appliance records you or a household member enters or confirms.
- Documents: photos and PDFs you upload — stored privately, never publicly accessible.
- Device data: a push-notification token, if you enable notifications.
- Usage analytics: product events and IDs only — never document content or free-text field values.
How we use it
To operate the core product — storing your appliances and documents, computing warranty status, sending reminders and the monthly digest — and to extract structured data from a photographed invoice, which is always proposed to you for confirmation, never saved automatically.
Who we share it with
- Google (Gemini API) — only the document image, if AI extraction is enabled, never your profile.
- Firebase (Google) — for push notification delivery.
- Meta (WhatsApp Business API) — only if you link a phone number.
- Your household — every member can see all household appliances, documents and reminders.
We do not sell your data.
Your rights
Export a full copy of your household's data at any time. Delete your account at any time — documents are purged from storage within 30 days.
Security
All traffic is encrypted in transit. Documents are stored in private object storage, served only via short-lived signed links. Passwords are hashed with Argon2id; refresh tokens rotate and detect reuse.
Contact
[Support contact to be added before publishing.]