Privacy Policy

Our privacy pledge

We do not sell your data. We do not show ads. We do not use third-party trackers or analytics.

HomeOps exists to help you look after your home. We only collect what is needed to do that, we never share it for marketing, and you can export or erase it whenever you like. This policy is written to follow the spirit of data-protection principles such as Malaysia's Personal Data Protection Act 2010 and Singapore's Personal Data Protection Act 2012: collect only what is necessary, use it only for the purpose you gave it, keep it secure, and let you access, correct and delete it.

What data we collect

Account information

• Your e-mail address and, optionally, a display name.
• Your sign-in credentials. Passwords are never stored in readable form: we keep only a salted one-way hash. If you turn on two-factor authentication we store its secret in encrypted form and your recovery codes as hashes.
• If you choose to sign in with Google or Apple (optional features): your name and e-mail address (and, for Google, profile picture) as provided by them.
• If you turn on push notifications (optional): a technical address for each device you allow, used only to deliver your reminders.
• Abuse protection and diagnostics: short-lived request counters (keyed by a one-way hash of your IP address or e-mail, deleted automatically) to limit repeated attempts, and technical error reports (message, page route, stack trace, never your personal data) stored in our own database to fix bugs.
• Your preferences, such as reminder e-mail and push settings.

Household data you choose to add

• Your home's name and, optionally, its address.
• Asset records: names, categories, make, model, serial numbers, install and warranty dates, notes, and service history including provider names and costs.
• Files you upload: receipt photos or PDFs, appliance manuals and photos of your items.
• Maintenance tasks, their schedules and completion dates, and the members you invite to share a home.
• Records you add in the document vault (titles, categories, expiry dates, notes and the files themselves), your contractors (names, trades and any phone numbers, e-mail addresses or notes you enter), utility bills and amounts, and purchase prices. These are visible to the members of the home they belong to; a contractor you attach to several homes is visible to the members of each of them.

Technical data

• Standard server and security logs kept by our hosting provider (for example IP address, browser type and the pages requested). We use these only to run, secure and debug the service.

Donations

• If you donate, payment is handled entirely by Stripe. HomeOps never sees or stores your card details. Stripe may share the donor name, e-mail address and amount with the HomeOps owner through the Stripe dashboard, which is used to say thank you and for accounting.

How we use your data

We use your data solely to:

• provide, maintain and secure your household dashboard and shared homes;
• send account e-mails you ask for (confirming your address, resetting your password) and maintenance reminders, but only if you turn reminders on;
• generate your Home Passport link, which you control;
• read a receipt when you press Scan receipt (the file is sent to our AI provider, Anthropic, solely to extract details such as the product name and dates. Nothing is scanned unless you choose to);
• detect and prevent abuse, and meet legal obligations.

We do not use your data for advertising, profiling, or to train our own models, and we do not sell or rent it to anyone.

Service providers we rely on

HomeOps is run on a small number of trusted services. They process data on our behalf, only to provide their service to us:

• Vercel: website hosting and file storage (Vercel Blob) for uploaded receipts and manuals.
• Neon: the encrypted Postgres database that stores your account and household records.
• Resend: delivers account and reminder e-mails (receives your e-mail address and the message).
• Stripe: processes optional donations.
• Anthropic: reads receipts on request (see above).
• Apple: optional “Sign in with Apple”. Apple tells us your name (first time only) and an e-mail address, which may be Apple's private relay address if you choose to hide yours.
• Your browser's push service (Google, Apple or Mozilla): only if you turn on push notifications. It carries the notification to your device.
• Cloudflare Turnstile: when enabled by the site owner, a privacy-friendly security check on sign-up, sign-in and password-reset forms, used to block automated abuse. It receives your IP address and basic browser signals; there is no advertising or tracking.
• Google: optional sign-in. In addition, to show brand logos on your assets, your browser asks Google's public favicon service for the logo of the brand's website. This tells Google that your browser requested that logo, together with your IP address, but nothing from your account. If a logo can't load, a letter tile is shown instead.

Other messaging channels, such as WhatsApp, are not available today and we do not collect phone numbers for reminders. If we add one, we will update this policy first and ask for your consent before collecting a number.

These providers may process data in countries other than Malaysia or Singapore, including the United States. By using HomeOps you understand your data may be transferred there; we choose providers that protect data in line with recognised industry standards.

Cookies and local storage

HomeOps uses only the cookies and browser storage it needs to work. There are no advertising or tracking cookies.

• Session cookie: keeps you signed in.
• Active-home cookie: remembers which of your homes you are viewing.
• Passport access cookie: remembers that a visitor entered a password-protected passport's password, for 7 days.
• Local storage: your theme (day or night), accent colour and sidebar choice, kept on your device only.
• Offline cache: the installable app stores a few static files so it loads quickly.

Storage and security

• Data is transmitted over encrypted connections (HTTPS) and stored in a managed Neon Postgres database that is encrypted at rest by the provider.
• Passwords are hashed with scrypt; two-factor secrets are encrypted; accounts lock temporarily after repeated failed sign-ins; changing your password signs out every other session.
• Uploaded receipts, manuals and item photos are stored in a private Vercel Blob bucket. They have no public web address: a file can only be opened by a signed-in member of the household it belongs to. Files are removed when you replace them, delete the asset or home, or delete your account (see “Your rights”). The only uploads that are publicly viewable are brand logos added by the site owner.
• No online service can be guaranteed perfectly secure. If a breach affecting your data occurs, we will tell affected users and the relevant authorities where the law requires.

Public Home Passports

A Home Service Passport is a read-only page you can share with a buyer, agent or tenant. You decide whether it exists: you can protect it with a password, replace its link, or switch sharing off at any time from Dashboard → Passport.

It shows: your home's name, the address only if you entered one, each asset's name, category, make, model, install and warranty dates and health score, service descriptions with dates and costs, and the completed maintenance log.

It never shows: your e-mail address, your name, other members, serial numbers, notes, receipts, manuals, item photos or any account details.

How long we keep data

We keep your data for as long as your account is open. When you delete your account, your records are erased from our live systems immediately. Copies may persist for a short, limited period in our database provider's automatic backups before they are overwritten. Sign-in and reset links expire within an hour, and hosting providers keep routine security logs for a limited time under their own policies.

Your rights

• Access and export. Download everything you can see, as JSON or a spreadsheet of your assets, any time in Settings → Privacy & data.
• Correction. Edit your profile, homes, assets and tasks directly in the app.
• Withdraw consent. Turn reminder e-mails off in Settings, or switch off Home Passport sharing.
• Deletion. Settings → Privacy & data → Delete my account permanently erases your account and personal data right away. Homes only you belong to, with their assets, receipts and history, are erased completely. If you share a home with other people, it is not destroyed: ownership passes to another member and only your own membership and account are removed.
• Questions or complaints. Write to me@khaw.cc. We will respond promptly, and you may also contact your local data-protection authority.

Remember that everyone you invite to a shared home can see that home's records, so only invite people you trust.

Children

HomeOps is meant for adults managing a household. It is not directed at anyone under 18, and we do not knowingly collect their data. If you believe a child has given us personal data, contact us and we will delete it.

Changes and contact

If we change this policy in a meaningful way we will update the date at the top and, where practical, tell you in the app or by e-mail. Questions about privacy? Contact me@khaw.cc. See also our Terms of Service.