Privacy

Nothing here is collected in the background. Every category below is either something you typed, something you chose to switch on, or something a server has to write down to answer a request at all.

Your account

Your email address, the display name you choose, the colour assigned to you in the household, your role, and when the account was created. If you sign up with an email and password, the password is stored only as a hash by Supabase Auth — Haushold never sees it. If you sign in with Google, we receive your email address, your name and your Google account identifier from Google, and no password exists at all.

It is what signs you in and what puts your name and your colour on the things you add, so the rest of your household can tell who did what.

What you and your household put into the app

Calendar events (title, description, location, times and any repeat rule). Grocery lists and their items. Recipes and meal plans. Tasks, including descriptions, due dates, who a task is assigned to, who completed it, and any photos attached. Bills and expenses — name, amount, due date, category, notes, who paid and who it is split between. Inventory items, including quantity and where in the house they are kept. Maintenance jobs and the log of when each was last done. Wiki pages. Announcements. Links you save to documents held elsewhere (the title and the URL — Haushold does not open or store the document).

It is the product. This is the content the app exists to show the people you live with.

Your household

The household's name, its unit system, which plan it is on, when a trial ends, and — if the household has ever paid — the Stripe customer and subscription identifiers and the date the current period ends. When you invite somebody, we store the email address you typed, who sent the invitation, and a token that expires after seven days.

It is what groups you with the right people, what decides which features are switched on, and what lets an invitation be accepted by the person it was meant for.

AI assistant usage

A count of how many assistant messages you have sent, per person, per day. That is a number and a date. Haushold does not store the conversation: what you type to the assistant lives in the browser tab or app screen you typed it in and is gone when you close it, and there is no table in the database that holds it.

It is how the daily allowance is enforced, and it is the smallest thing that can enforce it.

Devices, if you turn on notifications

A push token issued by Expo for the phone you enabled notifications on, and which platform it is. A push token identifies a device installation, not you personally, and it changes when the app is reinstalled.

There is no way to send a notification to a phone without something that addresses it.

Voice assistants, if you link one

If you link Haushold to Alexa, we store a short-lived linking code and a Supabase refresh token that lets the skill act on your account when you speak to it. Linking is entirely optional and nothing is stored unless you complete it.

It is what lets you add something to the grocery list without opening the app.

Server logs

Our hosting providers keep ordinary server request logs, which include IP addresses, timestamps and browser user-agent strings. These are generated by the infrastructure rather than by Haushold, are retained for a short period, and are not joined to your household's content or used to build a profile of you.

Diagnosing errors and abuse. It is the minimum any hosted service produces.

The waitlist, if you join it

If you leave an email address on the Haushold home page, that address, where on the site you left it, and the time you left it are stored. Nothing else is asked for and nothing else is kept: no name, no IP address and no cookie. To stop the form being used to send bulk traffic, a salted one-way hash of the requesting network address is written to a separate table for 24 hours and then deleted — the salt never leaves the server, the address itself is never stored, and that table is not linked to the addresses on the list.

So we can send you one email when the mobile apps are released. The list is not a newsletter, is not used for anything else, and is never shared or sold.

Said explicitly, because most of what a privacy policy usually has to explain simply does not happen here, and an absence is easier to trust when it is named:

• —No advertising. Haushold shows no ads and has no advertising identifiers.
• —No analytics or tracking SDK of any kind, first-party or third-party. There is no Google Analytics, no tag manager, no product-telemetry library, and no tracking pixel anywhere in the app.
• —No tracking across other apps or websites, and nothing is shared with data brokers. Your data is never sold, and it is never shared for advertising.
• —No location. Haushold never asks for or reads your device location — a location on a calendar event is text you typed.
• —No contacts, no photo library, no microphone. A task photo is a single file you pick or take, at the moment you tap the button.
• —No card numbers. Payment details are entered on Stripe's own pages and Haushold never sees or stores them.

Your household can see everything in it. That is the product, not a side effect: Haushold exists so that the people you live with can read and change the same calendar, the same grocery list and the same set of bills. Anything you add is visible to every member of your household, with your name and your colour on it, and any of them can edit or delete it. Somebody who joins your household later can see what was added before they arrived.

Groups narrow it, and only ever narrow it. A group is a subset of your household — housemates on one lease, one couple within a shared house. Calendar events, tasks, bills, expenses and wiki pages can be scoped to a group, and when they are, only that group’s members can see them. Everything else stays visible to the whole household. A group can never widen access beyond your household, and being in a group never reveals what other groups exist or who is in them.

Nobody outside your household can read your data through the app. This is enforced in the database itself with row-level security rather than in app code, so a request for another household’s rows is refused by Postgres regardless of what asked for it.

One exception, stated plainly: photos on tasks. A photo you attach to a task is stored in a public storage bucket, which means anyone holding the exact URL can open it without signing in. The URL contains the task’s random identifier and is not listed or linked anywhere outside your household, but it is a link rather than a lock. If a photo would be sensitive were it forwarded, do not attach it.

We do not sell your data, we do not share it for advertising, and we do not give it to anyone except the service providers listed below, each of which processes it only to do the job named. We will disclose data if the law actually requires it.

Haushold’s AI assistant runs on Claude, a model made by Anthropic. When — and only when — you send the assistant a message, the following is transmitted to Anthropic’s API so it can answer:

• —The messages in your current assistant conversation.
• —Your display name, and the display names of everyone in your household.
• —Your device's timezone, and today's date and time in it.
• —Your household's open tasks — title, priority, due date, and who each is assigned to (up to 20).
• —Upcoming calendar events — title, description, location and times (up to 10).
• —Unchecked grocery items across your active lists, and the names of those lists (up to 60 items).
• —Unpaid bills that are not yet overdue — name, amount and due date (up to 10).
• —Your household's wiki pages — title, category, and the first 200 characters of each (up to 20).

That is more than the sentence you typed, deliberately — the assistant can only answer “what’s left to buy?” if it has been given the list. It is worth reading the list above before you use the feature, and the feature is entirely optional: if you never open the assistant, none of it is ever sent.

When you import a recipe and the page does not publish structured recipe data, the text of that page — or the text you pasted, up to about 12,000 characters — is sent to Anthropic so the ingredients and steps can be pulled out of it. Nothing about your household is sent with it.

The assistant can also act for you when you ask it to — adding a grocery item, checking one off, creating or completing a task, adding a calendar event, or marking a bill paid. Those changes are written to your household by Haushold, and they are visible to your household exactly as if you had made them by hand.

Haushold does not keep your conversations. There is no table in our database that stores assistant messages. What we retain is a count of how many you have sent today, so the daily allowance can be enforced. Anthropic handles what it receives under its own terms — it processes API content to return a response and for safety purposes, and under its commercial terms does not use it to train its models. Anthropic’s privacy policy is the authority on their handling, and it is worth reading if this feature matters to you.

Haushold is a small operation and does not run its own infrastructure. These are every company that receives data because Haushold sent it to them, what each one does, and where their own policy is:

Supabase

Hosts the database, the sign-in system and the file storage. Everything in the app is stored here.

Vercel

Hosts and serves the web app. Handles the requests your browser makes.

Anthropic

Runs the model behind the AI assistant and recipe import. Receives the content listed above when you use those features, and nothing at any other time.

Stripe

Takes payment for Haushold Plus. Receives your payment details directly — they do not pass through Haushold — and gives us back an identifier for your subscription.

Google

Only if you choose to sign in with Google. Google confirms who you are and gives us your email address and name.

Expo

Only if you turn on notifications in the mobile app. Delivers push notifications to your phone, and receives the notification's title and text on the way to Apple or Google.

Resend

Sends household invitation emails. Receives the email address you are inviting and the name of your household.

Your household's content

Kept until somebody deletes it or the household itself is deleted. We do not expire it and we do not archive it.

History older than 90 days on the free plan

Hidden, not deleted. The free plan stops showing entries older than 90 days. Every one of those rows is still in the database, untouched, and all of it becomes visible again the moment the household is on Plus.

Your account, when you delete it

Removed immediately. There is no waiting period, no grace period and no undo.

Assistant conversations

Never stored by Haushold at all. They exist in the screen you typed them in until you close it.

Assistant usage counts

A count per person per day. Deleted with your account.

Invitations

The invitation link stops working after seven days. The record that it was sent stays with the household until the household is deleted.

Server logs

Held for a short period by Supabase and Vercel under their own retention schedules, then discarded.

A waitlist address

Kept until the launch email has been sent, or until you ask for it to be removed — write to the support address and it is deleted. The abuse-prevention hashes that sit beside it are deleted automatically after 24 hours.

The 90-day line above is the one most often misread, so to be unambiguous: it is a limit on what the free plan shows, not a limit on what Haushold keeps. Nothing is deleted when a trial ends or a subscription lapses.

You can ask for everything Haushold holds about you and we will send it to you in a machine-readable format. Email support@haushold.app from the address on your account and say what you want. Requests are handled within 30 days, and usually much sooner.

There is no self-service export button yet. That is a real gap rather than a policy, it is said here rather than left for you to discover in Settings, and the email route above is a working answer in the meantime — not a formality.

Open Settings, scroll to Account, and use Delete account. It asks you to type a confirmation phrase first. There is no waiting period and no undo.

What goes. Your sign-in, your profile, your notifications, your saved devices, your assistant usage counts and any linked voice assistant are deleted with the account, immediately, and are not recoverable.

What stays. The household’s own content is not yours alone and does not leave with you: the grocery lists, calendar events, tasks, recipes, meal plans, bills, inventory, maintenance records, wiki pages and announcements stay with the household for the people still living there. What is removed from them is your name — anything you made is still there, shown in a neutral grey instead of your colour and with no one credited. A housemate leaving should not empty the shared calendar of everyone who stayed.

If you are the last member of your household and you want the household and everything in it removed as well, email support@haushold.app from the address on the account and say so. Deleting your account does not delete the household on its own, because there is normally somebody left in it. Requests handled by hand are done within 30 days.

Depending on where you live you may also have the right to correct your data, object to how it is processed, or complain to a data protection authority. Write to the address above and we will help; we will not ask you to prove anything beyond that you can receive email at the account’s address.

Haushold is built for adults sharing a home — partners, housemates, co-owners — and is not directed at children. We do not knowingly collect data from anyone under 13. If a child’s data has ended up here, write to support@haushold.app and we will remove it.

If this policy changes, the date at the top changes with it. If a change means Haushold starts collecting something it does not collect today, or sending something somewhere new, we will say so in the app rather than only here.

Email support@haushold.app. That address reaches a person, and privacy questions go to the same place as everything else — there is no separate queue and no form. If you think this page is wrong about something the app does, that is the most useful message you could send, and it will be treated as a bug.