Homebase Privacy Policy
Effective date: 27 October 2026
Who we are: Silicon, Chennai 600119, India (“we”, “us”). We run the Homebase app.
Contact for privacy questions: developers.silicon@gmail.com
This policy is written in plain language. Please read it together with our Terms of Service.
1. The short version
- Homebase is a shared organiser for a family: a calendar, chores, shopping lists, recipes, records and a few more things.
- We keep your family's data so that every phone in the family sees the same thing. We do not sell it, and we do not show ads inside the app.
- We do not use AI services at the moment. Messages you paste or forward are read on your phone, with basic rules, and nothing is sent to an AI provider.
- We only measure how the app is used (with PostHog, Firebase Analytics and Meta) if you say yes. We never do it for children's accounts.
- You can export everything, and you can delete your account or your whole family from inside the app.
2. What we collect
Information you give us
| What | Why | Notes |
|---|---|---|
| Email address | To sign you in and send the 6-digit sign-in code | Not used for children's accounts, which have none |
| Name, colour, optional photo | To show who added or owns what | If you sign in with Google, we may use your Google profile photo |
| Family content: events, chores, lists and items, recipes, meal plans, pantry, birthdays, contacts, documents (names and expiry dates), notes | To provide the service | Please keep passwords, ID numbers and card numbers out of Homebase |
| Health-related notes: diet, allergies, medical notes, the emergency card | Only if you choose to add them, so the family can see them | Visible to the people in your family. Add only what you are comfortable sharing with them |
| Points and allowance records | To run the chores rewards feature | |
| Messages you paste, share or forward to your family's Homebase address | To find dates, forms and things to bring, which you then confirm | Read on your phone. A forwarded message is kept only until a family phone has collected it |
Children's accounts
A parent or guardian who is an admin creates a child's account. A child has a username and a PIN or password, no email, and a first name. Children's accounts are not used for analytics or advertising.
Collected automatically
- Device and app data: a device identifier used for syncing, a push-notification token (so we can send reminders and updates), your app version and operating system, and basic technical logs.
- Subscription status: whether your family is on a trial, Plus or Premium, and until when. Payment itself is handled by the Apple App Store or Google Play; we never see your card number.
- Usage analytics (only with your consent): the screens and actions used, such as “created a family” or “started a trial”, linked to a random account identifier. Meta receives only a one-way hash of that identifier. See section 5.
Stored on your phone
Homebase keeps a copy of your family's data on your phone so it works offline. It syncs when you are online.
3. How we use it
- To run Homebase: sign you in, sync your family's data, send reminders and notifications.
- To find dates and things to bring in messages you give it, when you ask (done on your phone).
- To run the trial and subscriptions and to prevent abuse (for example, limiting how often codes and sign-ins can be tried).
- To keep the service secure and fix problems.
- With your consent: to understand how the app is used and to measure whether our own advertising works.
- To meet legal obligations.
Our legal bases (UK/EU): performing our contract with you (running the app), our legitimate interests (security, fixing problems, preventing abuse), your consent (analytics and advertising measurement, which you can withdraw at any time in Family settings), and legal obligation.
4. Reading messages, and AI
When you paste or share a message, or forward an email to your family's address, Homebase looks for dates, forms and things to bring using basic rules on your phone, and you confirm before anything is added. Reading photos and PDFs, and reading recipes from photos, is switched off for now, and we do not send your content to any AI service. If we turn AI features on in future, we will update this policy first, tell you in the app, and describe the provider and what is sent.
5. Analytics and advertising measurement (only if you allow it)
When you first open Today, we ask whether you will “Help improve Homebase”. If you tap Allow, we use:
- PostHog (product analytics),
- Google Firebase Analytics (app usage statistics), and
- Meta (to measure whether our ads led to installs and sign-ups).
These tools receive a random account identifier (Meta receives a hash of it), your device type and the actions listed above. They do not receive your name, email, or anything your family writes. If you tap No tracking, none of this is collected. You can change your mind in Family settings > Help improve Homebase. Children's accounts are never tracked.
6. Who we share data with
We use service providers who handle data for us under contract. We do not sell personal data.
| Provider | What for | Data involved |
|---|---|---|
| Supabase | Database, sign-in and server functions | Everything you store in Homebase |
| Google (Sign-In, Firebase Cloud Messaging, Firebase Analytics) | Sign-in, push notifications, analytics (with consent) | Email, push token, analytics events |
| Apple and Google (app stores) | Payments and subscriptions | Handled by them |
| Adapty | Subscription management | A family identifier, an account identifier, purchase status |
| PostHog | Analytics (with consent) | Random identifier, usage events |
| Meta | Install and ad measurement (with consent) | Hashed identifier, install and sign-up events |
| Email provider(s) | Delivering your sign-in code, and receiving mail you forward | Your email address, forwarded messages |
| Hosting for our web pages | Showing invite and share pages | Technical data |
Other people. Everyone in your family sees the family's shared data. Admins can see more (for example, who is in the family and manage their settings). If you use “Share a day”, anyone with that link can see only the items you chose until it expires or you stop sharing.
We may disclose data if the law requires it, to protect people's safety, or in a sale or merger of our business (we would tell you).
7. International transfers
Our providers may process data outside the UK or EU, including in the United States. Where required, we rely on safeguards such as the UK International Data Transfer Agreement or addendum, the EU Standard Contractual Clauses, or the Data Privacy Framework. Our main database is hosted in the United States (Amazon Web Services, western US region).
8. How long we keep data
- Your account and family data: until you delete it, or the family or account is deleted.
- Things you delete inside Homebase stay in the family's Version history, so they can be restored, until the family or account is deleted.
- Forwarded messages: only until a family phone collects them.
- Backups: removed on a rolling cycle of up to [BACKUP PERIOD, depends on the Supabase plan].
- Subscription and billing records: as long as the tax and accounting rules require.
9. Your choices and rights
- Export: More > Export everything gives you your calendar (.ics) and lists (.csv) at any time.
- Edit or delete content: inside the app.
- Delete your account or delete your whole family: Family page. An admin who is the only admin of a family with other people must first hand over the role or delete the family.
- Withdraw consent to analytics: Family settings.
- Notifications: your phone's settings or More > Notifications.
Depending on where you live (UK/EU GDPR, California and other US state laws), you may also have the right to access your data, correct it, delete it, restrict or object to its use, move it to another service, and withdraw consent. To use these rights, contact developers.silicon@gmail.com. We will answer within one month (UK/EU) or 45 days (California). You can complain to the UK Information Commissioner's Office (ico.org.uk), your local EU authority, or your state attorney general. We do not discriminate against you for using your rights. We do not sell personal information. Whether Meta's install and sign-up measurement counts as “sharing” for cross-context advertising under California law has not been decided yet [LAWYER TO CONFIRM]; it only happens if you tap Allow, and you can switch it off at any time. Users in India can also use their rights under the Digital Personal Data Protection Act, 2023; our grievance contact is developers.silicon@gmail.com.
10. Children
Homebase is for families. We do not offer accounts to children without a parent or guardian: a child's account is created by an admin who is their parent or guardian, who is responsible for it and who gives us permission to process the child's information for this purpose. We collect only a first name, username and the content added to that child's chores, lists and points. Children's accounts have no email, no analytics and no advertising.
A parent can review, change or delete their child's information, or reset or remove their sign-in, from the Family page, or by contacting developers.silicon@gmail.com. We follow the US Children's Online Privacy Protection Act and the UK Age Appropriate Design Code (“Children's Code”) in how we build these accounts. If you believe a child has an account without a parent's permission, contact us and we will delete it.
11. Security
Data is encrypted in transit and stored with our hosting provider. Sign-in is protected by emailed codes or Google sign-in, and access to a family's data is limited to its members by rules enforced on the server. No system is perfectly secure, so please use a strong password or PIN for children and keep your invite codes private. If we learn of a breach affecting you, we will tell you and the regulators as the law requires.
12. Changes
We may update this policy. If a change is important, we will tell you in the app or by email before it starts. The date at the top shows the latest version.
13. Contact
Silicon, Chennai 600119, IndiaPrivacy: developers.silicon@gmail.com
[UK/EU REPRESENTATIVE, if required]
Grievance contact (India): developers.silicon@gmail.com