Homebase Privacy Policy

Effective date: 27 October 2026
Who we are: Silicon, Chennai 600119, India (“we”, “us”). We run the Homebase app.
Contact for privacy questions: developers.silicon@gmail.com

This policy is written in plain language. Please read it together with our Terms of Service.

1. The short version

2. What we collect

Information you give us

WhatWhyNotes
Email addressTo sign you in and send the 6-digit sign-in codeNot used for children's accounts, which have none
Name, colour, optional photoTo show who added or owns whatIf you sign in with Google, we may use your Google profile photo
Family content: events, chores, lists and items, recipes, meal plans, pantry, birthdays, contacts, documents (names and expiry dates), notesTo provide the servicePlease keep passwords, ID numbers and card numbers out of Homebase
Health-related notes: diet, allergies, medical notes, the emergency cardOnly if you choose to add them, so the family can see themVisible to the people in your family. Add only what you are comfortable sharing with them
Points and allowance recordsTo run the chores rewards feature
Messages you paste, share or forward to your family's Homebase addressTo find dates, forms and things to bring, which you then confirmRead on your phone. A forwarded message is kept only until a family phone has collected it

Children's accounts

A parent or guardian who is an admin creates a child's account. A child has a username and a PIN or password, no email, and a first name. Children's accounts are not used for analytics or advertising.

Collected automatically

Stored on your phone

Homebase keeps a copy of your family's data on your phone so it works offline. It syncs when you are online.

3. How we use it

Our legal bases (UK/EU): performing our contract with you (running the app), our legitimate interests (security, fixing problems, preventing abuse), your consent (analytics and advertising measurement, which you can withdraw at any time in Family settings), and legal obligation.

4. Reading messages, and AI

When you paste or share a message, or forward an email to your family's address, Homebase looks for dates, forms and things to bring using basic rules on your phone, and you confirm before anything is added. Reading photos and PDFs, and reading recipes from photos, is switched off for now, and we do not send your content to any AI service. If we turn AI features on in future, we will update this policy first, tell you in the app, and describe the provider and what is sent.

5. Analytics and advertising measurement (only if you allow it)

When you first open Today, we ask whether you will “Help improve Homebase”. If you tap Allow, we use:

These tools receive a random account identifier (Meta receives a hash of it), your device type and the actions listed above. They do not receive your name, email, or anything your family writes. If you tap No tracking, none of this is collected. You can change your mind in Family settings > Help improve Homebase. Children's accounts are never tracked.

6. Who we share data with

We use service providers who handle data for us under contract. We do not sell personal data.

ProviderWhat forData involved
SupabaseDatabase, sign-in and server functionsEverything you store in Homebase
Google (Sign-In, Firebase Cloud Messaging, Firebase Analytics)Sign-in, push notifications, analytics (with consent)Email, push token, analytics events
Apple and Google (app stores)Payments and subscriptionsHandled by them
AdaptySubscription managementA family identifier, an account identifier, purchase status
PostHogAnalytics (with consent)Random identifier, usage events
MetaInstall and ad measurement (with consent)Hashed identifier, install and sign-up events
Email provider(s)Delivering your sign-in code, and receiving mail you forwardYour email address, forwarded messages
Hosting for our web pagesShowing invite and share pagesTechnical data

Other people. Everyone in your family sees the family's shared data. Admins can see more (for example, who is in the family and manage their settings). If you use “Share a day”, anyone with that link can see only the items you chose until it expires or you stop sharing.

We may disclose data if the law requires it, to protect people's safety, or in a sale or merger of our business (we would tell you).

7. International transfers

Our providers may process data outside the UK or EU, including in the United States. Where required, we rely on safeguards such as the UK International Data Transfer Agreement or addendum, the EU Standard Contractual Clauses, or the Data Privacy Framework. Our main database is hosted in the United States (Amazon Web Services, western US region).

8. How long we keep data

9. Your choices and rights

Depending on where you live (UK/EU GDPR, California and other US state laws), you may also have the right to access your data, correct it, delete it, restrict or object to its use, move it to another service, and withdraw consent. To use these rights, contact developers.silicon@gmail.com. We will answer within one month (UK/EU) or 45 days (California). You can complain to the UK Information Commissioner's Office (ico.org.uk), your local EU authority, or your state attorney general. We do not discriminate against you for using your rights. We do not sell personal information. Whether Meta's install and sign-up measurement counts as “sharing” for cross-context advertising under California law has not been decided yet [LAWYER TO CONFIRM]; it only happens if you tap Allow, and you can switch it off at any time. Users in India can also use their rights under the Digital Personal Data Protection Act, 2023; our grievance contact is developers.silicon@gmail.com.

10. Children

Homebase is for families. We do not offer accounts to children without a parent or guardian: a child's account is created by an admin who is their parent or guardian, who is responsible for it and who gives us permission to process the child's information for this purpose. We collect only a first name, username and the content added to that child's chores, lists and points. Children's accounts have no email, no analytics and no advertising.

A parent can review, change or delete their child's information, or reset or remove their sign-in, from the Family page, or by contacting developers.silicon@gmail.com. We follow the US Children's Online Privacy Protection Act and the UK Age Appropriate Design Code (“Children's Code”) in how we build these accounts. If you believe a child has an account without a parent's permission, contact us and we will delete it.

11. Security

Data is encrypted in transit and stored with our hosting provider. Sign-in is protected by emailed codes or Google sign-in, and access to a family's data is limited to its members by rules enforced on the server. No system is perfectly secure, so please use a strong password or PIN for children and keep your invite codes private. If we learn of a breach affecting you, we will tell you and the regulators as the law requires.

12. Changes

We may update this policy. If a change is important, we will tell you in the app or by email before it starts. The date at the top shows the latest version.

13. Contact

Silicon, Chennai 600119, India
Privacy: developers.silicon@gmail.com
[UK/EU REPRESENTATIVE, if required]
Grievance contact (India): developers.silicon@gmail.com