AskMyHome ("AskMyHome", "we", "us", "our") provides a consumer software service that helps you store, organize, and search documents about your home. This Privacy Policy explains what personal information we collect, how we use and share it, the choices you have, and the rights available to you under laws such as the EU/UK GDPR, the California Consumer Privacy Act (CCPA/CPRA), and similar US state laws (Virginia, Colorado, Connecticut, Utah, Texas, Oregon, and others).
By using AskMyHome you agree to this Policy. If you do not agree, please do not use the service. Questions or requests: privacy@askmyhome.app.
1. Who is responsible for your data
AskMyHome is the "controller" of the personal information you provide directly to us (GDPR terminology) and the "business" that determines the purposes and means of processing (CCPA terminology). Our service providers listed below act as "processors" / "service providers" on our behalf.
2. Information we collect
- Account data — name, email address, password hash or third‑party sign‑in identifier (e.g. Google), preferences, and role within a household.
- Home content — the documents, photos, receipts, manuals, warranties, appliance details, timelines, notes, questions, and other content you or your invited household members upload or type into AskMyHome. This may include information about people other than you (for example, a contractor's name on an invoice); you are responsible for ensuring you have the right to share it.
- Emergency Vault entries — utility shut‑off notes, insurance policy numbers, and emergency contacts you choose to record.
- Sharing & invites — email addresses of people you invite to your home, and the role you assign them.
- Usage & diagnostics — pages viewed, features used, request timing, error reports, approximate location derived from IP, browser and device type, and referral source.
- Billing data — subscription status, plan, and the last four digits and brand of your payment card. Full card numbers are handled directly by Stripe; we never see or store them.
- Communications — messages you send us (including replies to system emails processed by Postmark), and product feedback.
Sensitive information. AskMyHome is a consumer home organization tool. We ask that you do not upload government identifiers (SSN, passport), protected health information, sensitive biometric data, precise geolocation, or payment card scans. If you do, you understand it will be stored, indexed, and processed like any other document you upload. Some current and future add‑on vaults (for example a future Medical Vault) may allow you to store health‑adjacent documents; AskMyHome is not a HIPAA "covered entity" or "business associate", is not a health record system, and must not be relied upon for clinical, insurance, or emergency medical decisions.
3. How we use your information
- Provide the service — OCR, embedding, search, timelines, reminders, sharing, and Q&A.
- Send transactional email (receipts, trial notices, reminders, invites, security alerts).
- Bill and collect subscription fees, and prevent payment fraud.
- Secure the service, investigate abuse, and enforce our Terms.
- Measure product performance, forecast infrastructure cost, and improve features.
- Send occasional product updates. You can opt out of marketing at any time.
- Comply with legal obligations and respond to lawful requests.
We do not sell your personal information, and we do not use it for cross‑context behavioral advertising. We do not permit third‑party AI providers to train foundation models on your content.
4. Legal bases (GDPR / UK GDPR)
- Contract — to provide the service you signed up for.
- Legitimate interests — to secure the service, prevent fraud, and improve the product, balanced against your rights.
- Consent — for optional marketing communications and any optional analytics beyond what is strictly necessary.
- Legal obligation — to keep tax records and respond to lawful requests.
5. Service providers & subprocessors
We rely on a small set of vetted vendors under written data‑protection terms. It is standard practice — and we think important — to list them openly:
- Lovable Cloud / Supabase — application hosting, Postgres database, object storage, and authentication.
- Cloudflare — edge compute, DNS, and DDoS protection.
- Stripe — payment processing and subscription billing.
- Postmark — transactional email delivery and inbound email ingestion at
notify.askmyhome.app. - Google Cloud (Gemini) — AI extraction and Q&A over your documents.
- OpenAI — text embeddings for semantic search.
- AWS Textract — OCR on scanned documents and photos.
- PostHog — first‑party, privacy‑respecting product analytics.
- Rewardful — affiliate attribution for partners who refer paying customers.
We will update this list when we materially change subprocessors. For a current, dated list, email privacy@askmyhome.app.
6. International data transfers
AskMyHome is operated from the United States. If you access the service from the European Economic Area, the United Kingdom, Switzerland, Canada, or elsewhere outside the US, your information will be transferred to and processed in the US and other countries where our service providers operate. Where required, we rely on the European Commission's Standard Contractual Clauses, the UK International Data Transfer Addendum, and equivalent safeguards.
7. Retention & deletion
We keep your home content while your account is active. When you delete a document it is soft‑deleted for 30 days and then permanently removed from primary storage; encrypted backups roll off within 60 days. Deleting your account removes your content within 30 days, except where we must retain limited records (for example, invoices for tax purposes, or logs required to investigate abuse) for up to 7 years.
8. Your rights
Depending on where you live, you may have the right to:
- Access the personal information we hold about you.
- Correct inaccurate information.
- Delete your information (subject to limited legal exceptions).
- Export your information in a portable format.
- Object to or restrict certain processing.
- Withdraw consent where processing is based on consent.
- Opt out of "sale" or "sharing" of personal information — we do not do either, but you may still submit a request.
- Appeal a decision we make about your rights request (VA, CO, CT residents).
- Lodge a complaint with your local data protection authority (EU/UK).
You can exercise these rights from Settings, or by emailing privacy@askmyhome.app. We will verify your identity through your account email and respond within the time period required by applicable law (typically 30–45 days). You may authorize an agent to act on your behalf; we will verify both of you.
Do Not Track / Global Privacy Control. We honor GPC signals as an opt‑out of any optional analytics.
9. Security
- All traffic is encrypted in transit with TLS 1.2+.
- Documents and metadata are encrypted at rest by our cloud storage and database providers.
- Row‑level security enforces that only you and the household members you invite can read your home's content.
- Passwords are hashed with modern algorithms; we support Google Sign‑In and encourage strong, unique passwords.
- We log administrative access and monitor for abuse.
No system is perfectly secure. If you believe your account has been compromised, email security@askmyhome.app immediately.
10. Household sharing
When you invite someone to your home, they can see the content of that home according to the role you grant (Viewer, Editor, or Owner). You are responsible for who you invite. You can remove members at any time from the property page.
11. Children
AskMyHome is not directed to children under 13 (or under 16 in the EEA and UK). We do not knowingly collect personal information from children. If you believe a child has provided us with information, email privacy@askmyhome.app and we will delete it.
12. Cookies & similar technologies
See our Cookie Policy for details on what we set and how to control it.
13. Accessibility
We design AskMyHome to be usable with keyboards and modern screen readers, and we aim to meet WCAG 2.1 AA. See our Accessibility Statement for how to report an issue or request an alternative format.
14. Changes to this Policy
We will post any changes on this page and update the "Last updated" date. If changes are material we will notify you by email at least 14 days before they take effect.
15. Contact
Privacy questions and rights requests: privacy@askmyhome.app.
General support: support@askmyhome.app.
Security issues: security@askmyhome.app.