Privacy Policy

Account

Your email address is the only sign-in identifier—there is no password, because we send you a sign-in link instead. You may also add a first and last name, a display name, a profile photo, and preferences such as time zone, date format, units, and theme.

Households and properties

Household name and settings; and for each property, the details you enter—including its full street address, city, region, postal code, and country, plus characteristics such as year built, size, number of floors, foundation, heating and cooling type, water and wastewater type, and whether it has a pool, irrigation, fireplace, or generator. Your postal code is also used to estimate a climate zone; this is a lookup against a table inside our own database, not a call to an outside service.

Home records

Whatever you choose to record: assets and equipment (including manufacturer, model, serial numbers, purchase price, and warranty dates), areas, materials and supplies, tasks and their completion history, projects, issues, service records (including costs), notes, tags, and custom fields.

Files you upload

Documents such as manuals, warranties, and receipts, plus photos of properties, assets, and profile and household avatars. Files are stored privately and served through short-lived signed links.

Information about other people

If you record a contractor, you are storing someone else's details—name, company, phone, email, address, licence number, and your notes about them. You choose to enter this, and you are responsible for having the right to.

Device setup codes

You can store smart-home setup codes. These are encrypted before they are stored; the plaintext is never written to our database and we cannot read it. We also keep a record of when a code was revealed and by whom—never the code itself.

Feedback you send

If you use the in-app feedback button we receive your message and, to help us reproduce the problem, the page you were on, your browser's user-agent string, your window size, and the app version—plus a screenshot only if you attach one.

Activity records

We record actions taken in a household—who changed what and when—so owners can review their own household's activity, and so we have an audit trail for security-relevant events such as revealing a stored code or granting support access.

Your household

The people in your household can see its records, according to their role. Properties marked restricted are visible only to owners, co-owners, and people explicitly granted access. Members can see each other's display names and profile photos; member email addresses are not exposed to other members.

Gerefa support—only if you invite us in

Our staff cannotread your household's records by default. A household owner—not a co-owner, and not us—can grant support access from their own settings. That access is read-only, expires automatically after 24 hours, can be revoked at any time, cannot reveal stored setup codes, cannot see restricted properties, and is recorded in your household's own activity log.

Gerefa administration

To operate the service, our administrators can see account-level information without entering your data: household names, owner email addresses, counts (of members, properties, assets, documents), storage used, AI spend, and lifecycle dates. They cannot see the contents of records—not a document title, not an asset name, not a property address. Administrators can also read feedback submitted through the in-app feedback button, including any screenshot you attach.

Legal and safety

We may disclose information if legally required, or where necessary to protect the rights, property, or safety of users, the public, or Honeycutt Inc..

Supabase

Database, authentication, and file storage.

Vercel

Application hosting and scheduled jobs.

Resend

Delivery of transactional email.

Anthropic

AI processing, only when you use an AI feature (section 6).

While your account is open

We keep your records so the service works. Activity and audit records are kept for as long as the household exists; we do not currently expire them on a fixed schedule.

Deleting your account

A deletion request starts a 30-day period during which you can cancel simply by signing in. After it elapses, your account and personal data are removed the next time the request is processed. If you are the sole owner of a household you must first transfer or delete it.

Deleting a household

An owner can request deletion; the household is purged after a 30-day window by a daily job.

Uploads that were never attached

Files uploaded but never saved to a record are cleaned up automatically after about a day.

Records we keep afterwards

Our administrative log—which records actions our staff took, such as a suspension or a purge, and why—is deliberately kept after the thing it describes is deleted, so there is a durable account of what was done. It contains identifiers and reasons, not your household's contents. We may also retain information where we are legally required to, including under a legal hold, which pauses deletion.

Export

You can export your data at any time from your settings, as machine-readable files. An export covers your properties, areas, assets, contractors, materials and supplies, tasks, projects, issues, service records, tags, and your document metadata. It excludes stored setup codes—by design, an export must never carry credential material—and does not include the uploaded files themselves, which you can download from the app.

Correction and deletion

You can edit or delete individual records in the app, and delete your account from your settings (section 10).

Communication preferences

Manage reminders and digests in your notification settings.

Statutory rights

Depending on where you live, you may have rights to access, correct, delete, or receive a copy of your personal information, and to appeal a refusal. We honour these regardless of where you live—most are self-service above, and you can reach us at gerefa@honeycutt.com. We will not discriminate against you for exercising them. We do not sell or share personal information as those terms are used in US state privacy laws.