Privacy Policy
Last updated
The privacy of your data, and it is your data, not ours, is a big deal to us. In this policy we lay out what data we collect and why, how your data is handled, and your rights with respect to your data. We promise we never sell your data.
This policy applies to Homera, LLC (“Homera”, “we”, “us”), a Washington limited liability company, and to our website and app at homera.io and app.homera.io.
What we collect and why
Our guiding principle is to collect only what we need.
Identity and access. When you sign up for Homera, we ask for your name and email address, handled through our authentication provider. That is so you can personalize your account, and we can send you the reminders, updates, and other essential information the app is built to send.
Profile information. You can add a profile: an avatar, a banner, a border, and a nickname. This is optional, and it is shown to your housemates.
Your home’s city. We ask for the city your home is in when you set it up. We use it to set your home’s time zone, so reminders arrive at the right local time, and to show information relevant to your area. We store a city only. We do not collect your street address, and a city is not precise location data.
Product interactions. We store the content you and your housemates create, upload, or receive through the Services. This includes bills, totals, splits, deadlines, payment statuses, tasks, grocery lists, and notes. Some of this content is entered by one member of a home about another, so that the shared home can be run. We use this to provide the Services and to send reminders.
Billing information. One person pays for each home, and we ask that person for their billing details. Their payment details are submitted directly to our payment processor and do not touch our servers. We store a record of the purchase and billing history.
Messages we send. We deliver email through our email provider. If you enroll in text messages or push notifications in the future, we collect what is needed to deliver them, such as a phone number you verify.
Website interactions. Like most online services, we collect basic technical and usage information for analytics, and we use cookies to keep you signed in, to remember your preferences, and for measurement. We use Google Analytics for this, and only after you turn Analytics on. It counts which pages and tools get used. It never receives your email, your name, or anything you wrote inside Homera. We use anti-bot measures such as CAPTCHA to help protect accounts. Our Cookie Policy names each cookie category and its purpose, and you can change or withdraw your choices any time from the “Cookie preferences” control in the footer.
How the app gets used. We use a product analytics provider, PostHog, to understand which parts of Homera people actually use, so we can improve them and see whether Homera is worth what it costs a home. There are two halves to this, and they are treated differently:
- In your browser. Counting which screens get opened, and whether you opened Homera yourself or because a reminder brought you. This sets storage on your device, so it happens only after you turn Analytics on, and never before. Say no and the tool is never loaded at all.
- On our servers. Counting things you have already done in Homera: a bill was paid, a task was ticked off, someone joined the home. This uses no cookies and nothing on your device, so it is not part of the cookie choice. It is covered by this policy and by your rights below, including your right to have your information deleted.
In both halves we count, we do not read. We never send the contents of your bills, notes, lists, or messages to an analytics provider, we do not record your screen, and we do not use this to build a profile of you for advertising.
Analytics and advertising are separate choices. Google Analytics is in the Analytics category, but Google can also use what it measures for ads. So we tell Google both of your answers. Allow Analytics and refuse Advertising, and Google counts your visit and is not allowed to use it for ads. If your browser sends a Global Privacy Control signal, that is what happens on its own.
Using your information to train and improve models
We use information from your use of Homera to operate, improve, and develop the Services, including to train and improve the automated systems and models behind features such as reminders and suggestions. Here is how we do it, and the choices you have:
- Wherever we can, we train on information that has been aggregated or de-identified.
- You can email us to opt out of the use of information that identifies you for model training. Some features may work less well if you do.
- We do not use information about a person who does not have a Homera account to train our models in a way that identifies them.
- If we ever send your information to a third-party model or service to provide a feature, we will say so here, and that provider’s terms will also apply.
- We will tell you before we use your information in a materially new way, and where the law requires your consent, we will ask for it. We will never expand how we use your data by a quiet, after-the-fact change to this policy.
When we access or share your information
We take access to your information seriously, and we share it only in the limited situations below.
- To provide the Services, using the third-party vendors listed under Subprocessors, who act on our behalf and may not use your data for their own purposes.
- To help you with support, when you ask us to, and with your express permission.
- To fix a technical problem, when an automated process fails and we need to look at a minimal amount of data to fix it.
- To protect Homera and its users, by reviewing logs and metadata and investigating abuse.
- When required by law, only in response to a valid, binding legal request. Where we are legally allowed to, we will notify you before we disclose your data.
- In connection with a change of business ownership, such as a merger or acquisition, in which case we would make reasonable efforts to notify you.
- In an aggregated or de-identified form that cannot reasonably be used to identify you.
We do not sell your personal information.
Subprocessors
We use trusted third parties to run Homera. Each processes personal data only to provide the Services to us: our authentication provider, our payment processor, our email provider, our product analytics provider (PostHog, which receives counts of activity and no content), our website analytics provider (Google, which receives counts of page views and clicks and no content), and our hosting provider (in the United States). We add text-message and push- notification providers to this list when those features ship. We will keep this list current.
Your rights with respect to your information
You have the right to know what information we hold about you and to access it, to correct information that is wrong, to delete your information (subject to the retention notes below, and to shared-home records that your housemates still rely on), to export a copy in a portable format, and to object to or restrict certain uses. To exercise any of these, email us at the address below. We will never discriminate against you, or charge you a different price, for exercising any of these rights.
How we secure your data
All data is encrypted in transit. We take measures to protect and secure your data through backups, redundancies, and encryption. No method of transmission or storage is perfectly secure, so we cannot guarantee absolute security.
How long we keep your information
When you cancel your account, your content becomes inaccessible right away, is permanently deleted from active systems within 30 days, and is deleted from backups within 60 days. Some information tied to a shared home may remain visible to the other members after you leave, for example a bill you still owe on. We keep the minimum billing records we are required to keep for tax and accounting.
Location of our Services
Homera is a US company, and we store data in the United States. Homera is offered in the United States.
California privacy (CCPA)
If you are a California resident: in the past 12 months we collect the categories of personal information described above, including identifiers (name, email), account and profile information, geolocation information (your home’s city only, which is not precise geolocation), commercial information (plan and payment history), and internet activity (usage and device data). We collect it for the purposes described above. We do not sell your personal information. You have the right to know, to delete, to correct, and to opt out of any “sale” or “sharing”, and we will not discriminate against you for exercising these rights.
Changes and questions
We may update this policy as needed so that it stays current and accurate. When we make a significant change, we will refresh the date at the top and, for a material change, notify you before it takes effect. Have any questions, comments, or concerns about this policy, your data, or your rights? Email us at hello@homera.io.
Adapted from the 37signals open-source policies under CC BY 4.0.