PRIVACY POLICY

Last updated 18 May 2026

This Privacy Policy describes how Homepact ("we", "us", "our") accesses, collects, stores, uses, and shares your personal information when you use the Homepact mobile application.

Questions or concerns? Contact us at support@homepact.app.

1. WHO WE ARE

Homepact is a UK household-coordination app for couples and families. We are the data controller for the personal information processed through the app. You can reach us at support@homepact.app or by post at the address in Section 12.

2. WHAT INFORMATION WE COLLECT

Account information. When you sign up we collect your email address and a display name. If you sign in with Apple or Google, we receive a basic identifier and email from that provider.

Household data you enter. Homepact stores the household information you and your household members create: bills and their details, lists and list items, calendar events, Pact (responsibility) cards and reviews. This data is shared with the other members of your household.

Limited information about children. If you add a child to your household, we store only their first name and an age band. We deliberately do NOT collect children's health data, education records, or any identifying detail beyond first name and age band.

What we deliberately do not collect. We do not collect financial transaction streams or bank data (bills are entered manually), third-party medical or appointment detail, or children's health or educational records.

Support correspondence. If you email us, we receive your email address and the contents of your message.

Payment data. Subscriptions are processed by Apple and by our payments processor RevenueCat. We do not receive or store your card details.

3. HOW WE STORE YOUR INFORMATION

Homepact uses Supabase as its backend (database, authentication, and realtime sync). Your account and household data are stored on Supabase infrastructure hosted in the European Union (Frankfurt, Germany region). Data syncs in real time between the devices of members of the same household.

4. HOW WE USE YOUR INFORMATION

We process your information to provide the service (accounts, household coordination, sync), to communicate with you for support, to maintain stability and security (see Section 6), to process subscriptions, and to comply with our legal obligations.

5. LAWFUL BASIS (UK GDPR)

We process your information on the basis of: performance of a contract (providing the app you signed up for); our legitimate interests (keeping the app secure and stable, preventing misuse); your consent where required (e.g. optional notifications); and compliance with legal obligations.

6. CRASH AND ANALYTICS PROCESSING

To fix bugs and improve stability we use Sentry for error reporting, configured in a privacy-conscious way: error tracking runs in production builds, personal identifying information is scrubbed, and no session replay is enabled. Sentry data is stored in the European Union.

We may also use PostHog (EU-hosted) for anonymous, aggregate product analytics, with an opt-out available in the app. Analytics are anonymous by default.

7. WHO WE SHARE INFORMATION WITH

We do not sell your personal information. We share information only with processors that help us run the service:

- Supabase — backend hosting, database, authentication and sync (EU region).
- Sentry — error/crash diagnostics (EU region).
- PostHog — anonymous analytics (EU region), where enabled.
- RevenueCat and Apple/Google — subscription and sign-in processing.
- Other household members — data you enter into a shared household is visible to the other members of that household.
- Business transfers — we may share information in connection with a merger or acquisition.

8. HOW LONG WE KEEP YOUR INFORMATION

We keep your account and household data for as long as your account exists. If you delete your account (see Section 10), your profile and membership are removed immediately and irreversibly. Sentry diagnostics are retained per Sentry's default retention (90 days). Support correspondence is kept as long as needed to resolve your query.

9. KEEPING YOUR INFORMATION SAFE

We use appropriate technical and organisational measures to protect your information, including access controls and row-level security so household data is only visible to that household's members. No internet transmission can be guaranteed 100% secure.

10. YOUR RIGHTS

Under UK GDPR you have rights to access, rectify, erase, port, and object to processing of your personal information. Homepact provides self-service tools for two of these directly in the app:

- Erasure: Settings → Delete account permanently removes your account and data.
- Portability: Settings → Export my data produces a structured JSON copy of your data.

For any other request, contact support@homepact.app. If you are in the UK or EEA and believe we process your data unlawfully, you may complain to your local data protection authority (in the UK, the Information Commissioner's Office).

11. CHILDREN

Homepact is for adults (18+). The only children's data in the app is a first name and age band, entered by an adult household member to coordinate family logistics. We do not knowingly allow under-18s to create accounts. If you believe a child has created an account, contact support@homepact.app.

12. CONTACT US

Questions or comments about this policy: support@homepact.app, or by post:

[Homepact trading name]
11 Stoneybeck
Bishop Middleham
Durham DL17 9BL
United Kingdom

13. UPDATES TO THIS POLICY

We may update this policy from time to time. The updated version is indicated by the "Last updated" date above. Please review it periodically.