HomeDash Privacy Policy

Information we collect

Google account information

HomeDash uses Sign in with Google. When you sign in, Google and Firebase provide or create basic account information such as:

• your email address;
• your display name and profile photo, if available;
• a unique account identifier; and
• authentication information needed to keep you signed in and protect your account.

HomeDash displays your email address in the account screen. It does not use your Google profile information for advertising or marketing.

Household information

HomeDash stores information that you choose to add, including:

• your household name;
• household members' names and optional nicknames;
• grocery items and their checked status;
• tasks, completion status, and assignments;
• events, dates, times, attendees, and recurrence details; and
• changes or cancellations made to recurring events.

Household-member records may describe people who do not have a HomeDash account. Only add another person's information if you are authorized to do so.

Early-access information

The HomeDash website lets you provide an email address to request an early-access invitation. The form asks only for your email address. We use it to manage early-access invitations, not as a newsletter or general marketing subscription.

The website submits the address to Formspree, which validates the submission, filters spam, stores the submission, and sends a notification to authorized personnel operating HomeDash. Formspree may also process technical information such as your IP address, browser type, access time, and referring website to operate and secure its service.

HomeDash does not send an automatic confirmation email. The submission is not sent to Firebase and is not automatically connected to a current or future HomeDash account.

Technical information

Google and Firebase may process technical information needed to provide and secure HomeDash, including:

• IP addresses;
• app, device, and software information;
• account, app-installation, and device identifiers;
• the time and type of requests made to HomeDash services; and
• service and error information used for security and troubleshooting.

HomeDash uses Firebase Crashlytics to identify and diagnose crashes and reliability problems. Crashlytics processes crash and diagnostic information, including stack traces, app, device and session information, and app-installation identifiers. HomeDash adds limited technical context and does not intentionally add direct account or household identifiers or household content to crash reports.

HomeDash does not request access to your device's location. Firebase Analytics uses a masked IP address to derive approximate location and also processes automatic app, device, installation, and session context. Other Firebase services may receive IP addresses to provide, protect, and troubleshoot their services.

Usage analytics

HomeDash uses Google Analytics for Firebase to understand whether onboarding works and which main features are used. Usage Analytics collection is on by default and may begin before you reach the setting. You can stop future collection, or turn it back on, from Manage Household -> Account -> Allow usage analytics. Turning it off does not affect any HomeDash feature.

This includes limited information about:

• first launch, app sessions, successful Google sign-in, and creation of a new HomeDash profile;
• onboarding start, progress, and completion, including a broad range for how many household members were added; and
• successful event, task, or grocery creation and whether the add flow was opened from the dashboard or its dedicated feature screen.

HomeDash does not add HomeDash account, household, member, or document IDs to Analytics, and it never sends names, email addresses, household content, dates, times, route information, free-form errors, or other user-entered values. For example, HomeDash may record that a task was successfully created and that its add flow opened from the dashboard, but never the task title such as Clean house or any other task contents.

Firebase creates an app-instance ID that can generally correlate Analytics activity from the same app installation. HomeDash does not set an Analytics user ID or user property, so Analytics does not establish that activity from different installations or devices belongs to the same HomeDash account or person. Firebase also processes automatic session, device, app, and masked-IP approximate-location context. Because of that technical context, this collection is limited but not fully anonymous.

Analytics event and user data is retained for up to fourteen months. Access is limited to authorized administrators who need access to Analytics. HomeDash has disabled Advertising ID collection, ad-personalization signals, granular location and device reporting, and automatic screen reporting. It does not use Analytics for advertising, cross-app tracking, or behavioral profiling and does not connect Analytics to Google Ads or BigQuery.

Turning Analytics off first stops future collection on that tablet and then resets local Analytics data and the app-instance ID. Account deletion also resets local Analytics data before requesting deletion of the Firebase Installation ID. The on/off preference belongs to the tablet installation and survives sign-out and account deletion. A local reset does not retroactively delete Analytics events that Google has already received or incorporated into aggregate reporting.

Information stored on your device

HomeDash keeps some household information in an app-private cache so the dashboard can load quickly and continue working during temporary connectivity problems. HomeDash disables Android app-data backup and device-to-device transfer for this information.

How we use information

We use information to:

• sign you in and manage your account;
• create and protect your household;
• display and synchronize household information;
• let you add, edit, complete, remove, and delete supported items;
• associate tasks and events with household members;
• provide recurring events;
• manage early-access invitations when you submit the website form;
• maintain the reliability and security of HomeDash; and
• respond to support, privacy, and account-deletion requests.

HomeDash does not sell personal information. It does not use personal information for advertising, cross-app tracking, or behavioral profiling. The current app does not include advertising SDKs. It uses limited Firebase Analytics for aggregate product usage and Firebase Crashlytics for app stability and troubleshooting as described above.

Service providers and disclosure

HomeDash uses Sign in with Google and Google Firebase for account authentication, data storage, synchronization, backend operations, usage analytics, and crash reporting. Google processes account information, household information, Analytics information, and technical information on our behalf to provide these services and may use its own subprocessors.

HomeDash uses Formspree to process early-access form submissions. Formspree performs server-side validation and spam filtering, stores submissions, and delivers notification emails on our behalf. Formspree may use its own service providers to operate its services.

Information may also be seen by:

• people whose accounts are authorized to access the same household;
• the HomeDash developer and any authorized personnel operating HomeDash, only when reasonably necessary to operate the service, investigate problems, secure HomeDash, or respond to a request; and
• government authorities or other parties when disclosure is required by law or reasonably necessary to protect HomeDash, its users, or others.

HomeDash does not provide personal information to advertisers, data brokers, or marketing partners.

For more information about these providers' practices, see Firebase Privacy and Security, Google's Privacy Policy, and Formspree's Privacy Policy.

Where information is processed

Personal information may be stored or processed in Canada, the United States, and other countries where Google, Formspree, or their subprocessors operate. Information processed outside Canada may be subject to the laws of that jurisdiction and may be accessible to courts, law enforcement, or government authorities there.

How long information is kept

Account and household information is generally kept while your HomeDash account remains active, unless you delete an item sooner.

• Deleting a grocery, task, or event removes the active item from HomeDash.
• Cancelling one occurrence of a recurring event keeps a cancellation record so the occurrence remains hidden.
• Removing a household member keeps their name in the household's records so historical tasks and events can still identify them. The member record is deleted when the household is deleted.
• Signing out does not delete your account or household information.

Google may retain limited backup, security, and operational records after information is deleted, in accordance with its service policies and legal obligations. These records are not part of your active HomeDash account and are deleted or expire under Google's retention practices.

Firebase states that Crashlytics keeps crash stack traces and associated installation identifiers for 90 days before beginning removal from its live and backup systems. Deleting your HomeDash account does not immediately delete an already submitted crash report.

Firebase Analytics event and user data is configured for up to fourteen-month retention. Turning Analytics off or deleting your HomeDash account resets local Analytics data, but it does not retroactively remove events already received or incorporated into aggregate reporting.

Under HomeDash's current Formspree plan, early-access submissions remain in the Formspree dashboard for 30 days. Formspree may retain limited security, operational, backup, or legally required records under its own retention practices.

HomeDash retains early-access notification emails and invitation records until an invitation is sent, the early-access program ends, you request removal, or two years pass after submission—whichever occurs first.

Information cached on your device may remain after you sign out or delete your account. It is no longer available through the normal signed-out HomeDash interface and can be removed by clearing HomeDash's app data or uninstalling the app.

Your choices

You can edit household and member details and manage groceries, tasks, and events using the controls in HomeDash. You can also turn future usage Analytics collection off or back on, sign out, or delete your account from the account screen.

To request access, correction, deletion, or another privacy right available in your jurisdiction, contact [email protected]. HomeDash does not currently provide a self-service data export feature.

If you submitted the early-access form, you can ask us to remove your address. We will apply the request to the submission held by Formspree and to any operational notification or invitation records controlled by HomeDash. Early-access submissions are not automatically connected to HomeDash accounts, so removing an early-access address does not delete a HomeDash account.

Delete your HomeDash account

Delete your account in the app

Open the HomeDash account screen, select Delete account, and follow the confirmation steps. Account deletion removes:

• your HomeDash account;
• the household owned by your account;
• the household members, groceries, tasks, and events stored in that household; and
• the active Firebase account associated with your HomeDash account.

Limited cached, backup, security, and operational records may remain for the periods described in How long information is kept.

After the server confirms deletion, HomeDash resets local Analytics data and its app-instance ID, then requests deletion of the Firebase Installation ID before signing out. The tablet's Analytics on/off preference is not account data and remains unchanged. These local steps do not retroactively delete Analytics events or Crashlytics reports already received by Google.

Request deletion without the app

If you no longer have access to HomeDash, email [email protected] with the subject Delete my HomeDash account and include the Google email address used to sign in. Do not send your password, authentication codes, or authentication tokens.

An email request does not authorize deletion by itself. To protect your account, we will send a verification message to the Google email address associated with the HomeDash account. We will process the deletion only after control of that address has been confirmed. If you no longer control the address, contact us to ask whether another reliable verification method is available.

We aim to complete verified deletion requests within 30 days and will send confirmation when the request is complete.

Deleting your HomeDash account does not delete your Google Account or automatically revoke HomeDash in your Google Account's third-party access settings. You can manage that access separately through Google.

Security

HomeDash uses Google sign-in, authenticated requests, household-access controls, and backend ownership checks. Google states that the Firebase services used by HomeDash encrypt information in transit and at rest. No internet service can guarantee absolute security.

Children

HomeDash is intended for adults managing a household and is not directed to children.

HomeDash lets an account holder enter household-member names, which may include information about children. HomeDash does not ask household members to create accounts and does not collect their age directly.

Changes to this policy

We may update this policy when HomeDash, its providers, or legal requirements change. We will update the effective date and provide any additional notice required by law.