Privacy Policy

Household OS is a household management application that helps people who live together manage finances, tasks, and notes in one shared workspace. Contact: hello@householdos.app.

We collect only the data required to operate the service:

• Account data email address and display name provided at registration.
• Household content expenses, tasks, notes, and recurring bills created inside the app.
• Session data encrypted session tokens stored in httpOnly cookies.
• Push subscription browser or device push endpoint and keys, only after permission is granted.
• Technical logs server-side error logs used for debugging and reliability.
• Native cache encrypted on-device cache (AsyncStorage on mobile, sessionStorage on web) for offline access, retained for up to 7 days.

We do not use personal data for advertising, profiling, or automated decisions that produce legal or similarly significant effects.

• Authenticate you and maintain your session.
• Store and synchronize household content across devices.
• Deliver task reminders and notifications you explicitly enable.
• Diagnose errors and keep the service reliable.

Where GDPR, LGPD, CCPA/CPRA, PIPEDA, the Australian Privacy Act, POPIA, PDPA, or PDPL applies, we rely on contract performance to provide the service, legitimate interests for security and reliability, and consent for optional push notifications.

We do not sell or share personal information for cross-context behavioural advertising.

We use essential cookies and local storage for authentication, theme, language, and cookie consent. We do not use advertising cookies, tracking pixels, or third-party analytics cookies.

We share data only with sub-processors required to operate the service: Convex (database and real-time backend), Vercel (web hosting and serverless functions), Sentry (error monitoring), and Brevo (transactional email). Push notifications are delivered via the relevant browser or device push gateway.

We do not sell, rent, or trade personal data with third parties.

Account and household content is kept while your account is active. If you delete your account, associated personal data is permanently removed within 30 days unless law requires retention. Server-side error logs are retained for up to 90 days.

• Account data retained while account is active; deleted within 30 days of account deletion.
• Household content expenses, tasks, notes, recurring bills — retained while account is active; deleted with account.
• Session data 30 days (web), or until logout (mobile).
• Push subscriptions retained until permission revoked or account deleted.
• Native cache up to 7 days on device, then automatically purged.
• Error logs up to 90 days for debugging and reliability.
• Consent records retained for the lifetime of the account as proof of consent.

We use TLS in transit, httpOnly and Secure session cookies, Scrypt password hashing, encryption for sensitive financial data, and role-based household access controls. No system is risk-free; affected users will be notified promptly if a breach occurs.

Android auto-backup is disabled to prevent household data from being copied to Google Drive.

Depending on your jurisdiction, you may request access, correction, deletion, portability, restriction, objection, withdrawal of consent, or complaint support. To exercise a right, email hello@householdos.app. We respond within 30 days.

Household OS is not directed to children under 13, or under 16 in the EEA. We do not knowingly collect personal data from minors.

Data is stored on Convex infrastructure in the EU West region. If data is transferred outside your jurisdiction, we use appropriate safeguards such as standard contractual clauses, adequacy decisions, or equivalent legal mechanisms.

We may update this policy from time to time. For material changes, we will notify you through the app or by email before the change takes effect.

See our Terms of Service at /terms and Acceptable Use Policy at /acceptable-use.

For privacy questions or requests, contact hello@householdos.app.