Privacy policy

The short version

• Homewright keeps only what a member of your household chooses to share: short posts like notes, decisions, tasks and shopping-list items.
• Homewright never reads your conversations, chat history, files or your AI app's memory. It sees only the post your AI sends after you approve it.
• Homewright runs no chat model of its own. Your posts reach an AI app only when someone in your household uses that app to ask Homewright for them.
• We don't sell your data, show ads or use your posts to train AI models.

What we collect

• Account: your email address, your display name, and the ID our sign-in provider assigns you.
• Household: its name and time zone, who belongs to it and each member's role, and invites (including an invitee's email if you send the invite by email).
• Posts you share: title, summary, details, type, tags, task assignee, due date, status and quantity, who can see it, who wrote it, which AI app or the website it came from, and when it was created and changed.
• Connected AI apps: which apps you connected (for example ChatGPT or Claude), an app identifier, and when each was first and last used.
• Activity records: a log of when posts were created, edited or deleted and by whom (without the post's content), plus usage and rate-limit counters.
• Billing, if you pay: a customer and subscription ID from our payment processor. We never see or store your card number.
• Search index: to make posts searchable we split their text into pieces and compute numeric representations of it on our own servers.

Homewright refuses to save card numbers, Social Security numbers, bank account details, passwords, keys and one-time codes. Please don't share health records or other sensitive personal details in posts.

What your AI app receives from Homewright

When you or another member asks an AI app to use Homewright, it can receive posts you are allowed to see, including their content, author name, type, tags, dates, task status and assignee, plus each household member's display name and role, and identifiers for posts and members so it can open or update the right one. It does not receive anyone's email address. What the AI app does with that information is covered by that app's own privacy policy, such as OpenAI's for ChatGPT or Anthropic's for Claude.

How we use it

• To store your household's posts and show them to the members (and their AI apps) who are allowed to see them.
• To sign you in, send invites, task notices and the optional weekly digest email, and run billing.
• To keep Homewright secure: preventing abuse, enforcing limits, and investigating problems.

Who we share it with

Members of your household see posts according to each post's visibility. We use these service providers to run Homewright, and they process data only on our behalf:

• WorkOS (sign-in)
• Supabase (database)
• Fly.io (hosting)
• Postmark (email delivery)
• Stripe (payments, if you subscribe)

We share information with others only if the law requires it or to protect people's safety, and we'll tell you when we're allowed to.

How long we keep it

• Posts, including completed tasks and bought shopping-list items, stay until a member deletes them. A deleted post leaves search immediately and is permanently erased after 30 days.
• If you delete your account, your account and posts are erased within 30 days. If an owner deletes a household, members get 7 days to export, then everything is erased within 30 days.
• Activity records are kept for about 13 months. Rate-limit counters expire within hours.

Your choices

• Edit or delete any post you wrote, from your AI app or the website.
• Download your posts as JSON or Markdown from Your data.
• Disconnect an AI app at any time from Settings → Connected AI apps.
• Turn off emails in Settings.
• Leave a household, or delete your account, from Your data.
• Ask us for a copy of your data, a correction or deletion by writing to support@gethomewright.com.

Security

Data is encrypted in transit and at rest. Each household's data is kept separate in the database, so one household can't read another's. Our staff don't read your posts unless the household owner grants time-limited support access, and every read during that window is logged.

Children

Homewright accounts are for adults 18 and over. Homewright is not directed to children, and we don't knowingly collect information from children under 13. If you think a child has given us information, write to us and we'll delete it.

Changes

If we change this policy in a way that matters, we'll email account holders before it takes effect and update the date at the top.