Privacy Policy

Last updated 25 July 2026

Homestead is a household organisation app (calendar, upkeep, budget, meals, pantry and shopping). This page explains what we collect, why, and how you can get it removed.

What we collect

Account details:for email/password accounts, your email address and a securely hashed password (we never see or store your plain-text password — that's handled entirely by our authentication provider, Supabase Auth). For household members who sign in with a username and PIN instead of an email, we store the username and a salted, hashed PIN — never the PIN itself.
Household content: whatever you and your household enter — calendar events, upkeep tasks, budget transactions and categories, recipes and meal plans, pantry and shopping items, and any photos you upload against them (e.g. a recipe photo or a profile photo).
Basic usage data: aggregated, privacy-friendly page-view analytics via Vercel Analytics (no cross-site tracking, no ad identifiers, no cookies used for this).
Diagnostics: technical crash and performance information through Sentry, used to find and fix faults. Homestead does not deliberately attach your name, email address or household content to these reports.
Push notifications:if you enable calendar reminders on an Apple device, we store the device's push token against your account so Apple Push Notification service can deliver the reminder. You can disable notifications in your device settings.
Billing:Stripe handles subscriptions and payment details on the web. Homestead stores Stripe's customer/subscription references and subscription status, but never receives or stores your complete card number.

Who can see it

Your household's data is visible to the members of that household, scoped by the role and permissions the household Owner sets. It is not visible to other households, and we don't share it with advertisers or data brokers. A small number of things are deliberately public if you choose to share them — for example, a recipe or routine you publish via a permanent share link, or a calendar event you explicitly share — and only those specific items, never your whole household.

Where it's stored

Data lives in a Postgres database and file storage operated by Supabase, protected by row-level security so one household's data isn't reachable through another's. The app itself is hosted on Vercel. Account-related emails (confirmation, password reset) are sent via Resend. Payments are handled by Stripe, technical errors by Sentry, and enabled iOS reminders are delivered through Apple Push Notification service. We also keep private daily database and storage backups for disaster recovery. The active backup branch keeps the latest 30 snapshots; older versions may remain in the private repository's history until maintenance permanently removes them.

Your choices

Delete your account at any time from Your menu → Delete account — this immediately removes your sign-in, household membership(s), personal preferences, push tokens and private photos. Disaster-recovery backups age out through the retention process described above and are not used to restore an individually deleted account. See Supportfor how to request deletion if you can't sign in.
Export or ask about your data by emailing haus.homestead@gmail.com.

Changes

If this policy changes materially, we'll update the date at the top of this page. Continued use of Homestead after a change means you accept the updated policy.

Contact

Questions about this policy or your data: haus.homestead@gmail.com.