Privacy

Who this covers

This policy explains what Homa collects, why, who helps us run it, and the choices you have. It applies to the Homa app and the website at homa.house.

Our Terms are the agreement that governs using Homa; the two documents work together, and this policy is part of that agreement.

What we collect

Account — your email address, so we can send you a sign-in link, and the first name you choose so the house can speak to you warmly.

Household — the name you give your home and who belongs to it (a household holds at most two adults).

What you capture — the text of what you say or type, the items Homa sorts it into, and any dates or details attached to them.

Notifications — if you turn them on, a device token so we can reach your lock screen.

Billing — if you subscribe, your plan status and the identifiers our payment providers give us for your subscription: on the web, your Stripe customer and subscription records; in the iPhone app, the App Store subscription identifier RevenueCat gives us for your household. We never see or store your card number — Stripe and Apple handle payment details.

Referral — if you arrive through a referral link or enter a code, which code referred your household (see “Referrals” below).

Waitlist — if you ask to be notified before you have an account, the email address you give us.

Cookies — a small number of cookies that do one job: keeping you signed in.

We do not collect analytics, behavioral data, location, contacts, photos, or anything for advertising.

Your voice and the mic

When you use the mic, the speech-to-text is done by your own device or browser's dictation feature — the one built into your phone or your browser. Homa itself never receives, hears, or stores your audio; only the finished text arrives, the same text you see on screen.

That dictation feature is provided by your device or browser maker (such as Apple or Google). If it sends audio to its maker to transcribe, that happens under their control and their privacy policy, not ours. If you'd rather not use it, the text box always works.

How we use what we collect

To run the loop Homa exists for: to sign you in, to sort your words into items, to share them with the person you live with, to send the notifications you asked for, and to take payment if you subscribe.

We use your email to reach you about your account and important service news. We don't build advertising profiles, and we never use your content to market to you.

What we never do

We never sell your personal information, and we never share it for cross-context behavioral advertising. We don't run ads, we don't embed third-party trackers or analytics, and we never let one household see another's home. Your content is never used to train AI models.

Referrals

Homa works with partners who share referral codes. If you sign up through a partner's link or enter their code, we record which code referred your household so we can pay that partner a commission on real subscriptions.

Partners only ever receive aggregate numbers — how many households signed up and subscribed, and the resulting revenue and commission. They never receive your name, your email, or anything you capture.

Preventing trial abuse

To stop the same person from repeatedly claiming a fresh free trial, we keep a one-way fingerprint of the email addresses that have already used a trial. It is a salted, non-reversible hash — we cannot turn it back into your email, and it is never used to contact you, profile you, or for anything but this one check.

We store no raw email and no other personal information in this record, and it serves a single purpose: deciding whether a newly created or joined household should receive a fresh free trial. Because that check only works if the fingerprint outlives an account, we keep it indefinitely for ongoing abuse prevention — it has no expiry. Deleting your account still removes your account and content as described above; this minimal fingerprint is what lets the free-trial limit survive a delete-and-rejoin, which is its whole reason to exist.

Who helps us run Homa

A few trusted companies process data on our behalf, only to make Homa work. Each receives only what it needs for its part:

Supabase — stores your data and handles passwordless sign-in.

Google — its Gemini AI reads the words you capture and sorts them into items, through its API; API content is not used to train its models.

Stripe — processes payments and holds your card details (we never do).

RevenueCat — handles your App Store subscription status on iPhones; it never sees card numbers — Apple keeps those.

Vercel — hosts and serves the app.

Resend — delivers your sign-in and account emails (from house@homa.house).

Apple — delivers the push notifications you opt into on iPhone, through its Push Notification service.

Where your data is processed

Homa runs on cloud infrastructure in the United States: your account and household data live with Supabase in Ohio, and the app itself is served by Vercel from Washington, D.C. Some of the processors above may handle data in other countries too.

Homa is run from Manitoba, Canada. So wherever you live, your information is stored in the United States and is subject to the laws there, including lawful requests by US authorities. If you'd rather your data not be held in the US, please don't use Homa — we'd rather say that plainly than bury it.

Where data crosses borders, we rely on the standard safeguards those processors put in place (such as standard contractual clauses).

How long we keep it

Your content lives for as long as your home does. When you delete your account it leaves our live systems right away; if you were the last person in your household, everything the house remembered goes with it. Copies may linger in our providers' encrypted backups for a short while before they roll off — generally within about 30 days.

Two things we keep or can't remove: if you ever paid, Stripe keeps a record of the transaction, because payment processors are legally required to, and it isn't used for anything else; and waitlist emails stay until we've written to you about launch or you ask us to remove yours.

Your rights

Wherever you live, you can ask us to: show you the personal information we hold, correct it, delete it, give you a copy to take elsewhere, limit how we use it, or object to a particular use.

Deletion is built right into the app — Settings → Leave Homa — and takes effect immediately. For anything else, email hello@homa.house and we'll take care of it, usually within 30 days.

Depending on where you live, these rights carry specific legal names, and sometimes extra ones. We honor them regardless of which law applies to you. You also have the right to complain to your local data-protection authority if you think we've got something wrong — though we'd rather you tell us first.

How we protect it

Everything travels over encrypted connections (HTTPS). Sign-in is passwordless by design, so there's no password database to steal. Each household's data is isolated from every other at the database level. The keys that let our servers talk to Stripe, our AI provider, and the rest live only on our servers, never in the app on your phone.

No method is perfect, and we won't pretend otherwise. If a breach ever affects your information, we'll tell you plainly and without games.

Cookies

We use a small number of cookies for one purpose: keeping you signed in. None for ads, none for tracking, nothing that follows you around the web.

Children

Homa is made for adults sharing a household. You must be at least 18 to use it — the same age our Terms require — and it isn't directed at children. We don't knowingly collect information from anyone under 18. If you believe a child has given us their information, contact us and we'll remove it.

Changes to this policy

If we update this policy, we'll change the date at the top, and if a change is significant we'll tell you inside the app.

Contact

Questions, requests, or concerns about privacy? Write to us at hello@homa.house. Homa is run by Lukas-Jonas Phangureh in Manitoba, Canada, who is the data controller for the information described here.