Privacy Policy

MyHouseKeep LLC ("we," "us," or "our") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, share, retain, and protect your personal information when you use the MyHouseKeep application and related services (collectively, the "Service").

By creating an account or using the Service, you agree to the collection and use of information as described in this policy. If you do not agree, do not use the Service.

This policy applies to information collected through the MyHouseKeep mobile app and associated pages at myhousekeep.com.

Information you provide directly:

• Account: email address, full name, password (stored as a one-way hash — we never store your plaintext password)
• Home details: property address, year built, square footage, property type (house, condo, townhouse, rental)
• Systems: type, brand, model, serial number, estimated age, purchase or install date, technical specifications
• Maintenance records: completion dates, costs, notes, service provider names
• Photos: system photos and nameplate images you upload or capture within the app
• Contact (optional): phone number, if you choose to enable SMS reminders
• Renter information (optional): lease dates and public property-management office information, stored with your home
• Financial data (optional): monthly rent amount, if entered — stored solely for your personal reference and never shared
• Support communications: messages, emails, or requests you send to us
• Access requests: name and email submitted via the signup/request access form

Information collected automatically:

• Usage data: features accessed, pages viewed, actions taken within the app
• Device information: browser type, operating system, screen resolution
• Server logs: IP address, access timestamps, and error logs (used for debugging and security only, not for profiling)
• Account activity: the most recent sign-in timestamp, visible only to authorized administrators for account support and security. This does not track each time you open the app.
• Session data: stored in browser local storage and session storage to maintain your authenticated session and app preferences

Information from third parties:

• Property data from public records when you enter your home address
• Current and forecast weather data for your home's location
• FEMA disaster declaration data for your area

We use your information only to:

• Create and manage your account
• Provide the core Service — system tracking, maintenance reminders, and step-by-step guidance
• Generate personalized maintenance recommendations for your specific home and systems
• Send maintenance reminders via email and/or SMS (with your explicit consent)
• Respond to your support requests
• Improve the Service through aggregated, anonymized analysis (individual user data is not used for this purpose)
• Maintain security, prevent fraud, and enforce our Terms of Service
• Comply with legal obligations including data subject rights requests
• Notify you of material changes to this policy or our Terms

We do NOT:

• Sell, rent, or license your personal information to any third party
• Use your information to deliver advertising from third parties
• Share your home address, system data, or maintenance records with contractors without your explicit, direct action
• Use your data to train AI models (data transmitted to AI API providers is governed by their own policies — see Section 10)
• Use your phone number for any purpose other than delivering maintenance reminders you have consented to receive
• Use your financial data (rent amount) for any purpose other than displaying it back to you

We share your information only in the following limited circumstances:

Service providers (under data processing agreements):

• Supabase — database hosting, authentication, and file storage. All of your account data, home data, system records, and uploaded photos are stored on Supabase infrastructure. Data is encrypted at rest and in transit.
• Vercel — application hosting and serverless API function execution. Your requests pass through Vercel's infrastructure.
• Resend — email delivery for maintenance reminders, confirmation emails, and transactional notifications. Your email address and message content are transmitted to Resend for delivery.
• Twilio — SMS delivery for maintenance reminders. If you enable SMS, your phone number and reminder message text are transmitted to Twilio. Twilio may retain delivery logs per their own retention policy.
• Anthropic (Claude) — AI-generated guidance. When you use features that generate step-by-step guides, diagnoses, or maintenance analysis, descriptions of your home systems (type, brand, model, age, symptoms, maintenance history) may be transmitted to Anthropic's API. Anthropic's use of this data is governed by Anthropic's Privacy Policy.
• OpenAI — AI features including appliance and system photo identification. Images you upload for nameplate scanning and system descriptions are transmitted to OpenAI's API. OpenAI's use of this data is governed by OpenAI's Privacy Policy.
• Google (Gemini and Maps) — AI features and local business search. Persistent weather coordinates are obtained separately from Census. System descriptions and your address may be transmitted. Governed by Google's Privacy Policy.

Sub-Processors — Formal Table (GDPR Article 28 / CCPA)

Legal requirements: We may disclose your information if required by law, regulation, valid legal process (such as a court order or subpoena), or government request. We will attempt to notify you of such requests unless prohibited by law.

Business transfers: If MyHouseKeep is involved in a merger, acquisition, or sale of all or substantially all of its assets, your information may be transferred to the acquiring entity. We will notify you by email and/or prominent in-app notice at least 30 days before your data is transferred and becomes subject to a different privacy policy.

Home transfers (with your explicit action): If you use the Home Transfer feature to send a maintenance record to a new home buyer, you explicitly authorize us to transmit that record to the email address you specify. The recipient is not added to any mailing list.

With your explicit consent: All other sharing only occurs with your affirmative consent at the time of sharing.

The Service uses browser local storage and session storage to maintain your authentication session and store app preferences (such as your last viewed home or system). We do not use third-party advertising cookies or cross-site tracking cookies.

We may use essential, strictly necessary cookies required for authentication and security. These cannot be disabled without preventing you from using the Service.

You can clear local storage through your browser settings at any time, which will log you out of the Service. Clearing storage does not delete your data from our servers.

We implement industry-standard security measures, including:

• TLS encryption for all data transmitted between your device and our servers
• Encryption at rest for data stored in Supabase
• Row-level security (RLS) policies ensuring each user can only access their own data
• Service role keys stored only in server-side environment variables, never exposed to the browser
• Password hashing — your password is never stored in recoverable form

No method of transmission over the internet or electronic storage is 100% secure. We cannot guarantee absolute security. If you believe your account has been compromised, contact us immediately at support@myhousekeep.com.

Data breach notification: In the event of a data breach that affects your personal information, we will notify you by email within 72 hours of becoming aware of the breach, to the extent required by applicable law. Our notification will describe the nature of the breach, the categories of data affected, and steps we are taking to address it.

We retain your personal information for as long as your account is active and as needed to provide the Service. Specifically:

• Account data (name, email): retained until you delete your account, then deleted within 30 days
• Home and system records: retained until you delete the home or your account, then deleted within 30 days
• Maintenance records and notes: deleted with your home or account, within 30 days
• Uploaded photos: deleted from our file storage within 30 days of account or home deletion
• Phone number: deleted within 30 days of account deletion or removal of phone from your account
• Server logs (IP, access times): retained for up to 90 days for security and debugging, then deleted
• Anonymized, aggregated data (no personal identifiers): may be retained indefinitely for service improvement
• Legal hold: certain records may be retained longer than the above periods if required by applicable law or active legal proceedings

To request deletion of your account and all associated data, contact support@myhousekeep.com. We will complete deletion within 30 days and confirm by email.

Depending on your location, you may have the following rights regarding your personal information:

• Access: Request a copy of the personal information we hold about you
• Correction: Request correction of inaccurate or incomplete data
• Deletion: Request deletion of your account and all associated personal data
• Portability: Request a machine-readable export of your data (available via the Export Data feature in the app)
• Restriction: Request that we restrict processing of your data in certain circumstances
• Objection: Object to our processing of your data where we rely on legitimate interests
• Opt-out of email reminders: Settings → Notifications → toggle off email reminders
• Opt-out of SMS: Reply STOP to any message, or Settings → Account → Notifications → toggle off SMS

California residents (CCPA / California Privacy Rights Act): You have the right to know what personal information we collect, use, disclose, and sell (we do not sell). You have the right to delete your information, correct inaccurate information, and opt out of sale (not applicable — we do not sell). You have the right to non-discrimination for exercising your rights. Under the California "Shine the Light" law, you may request information about sharing of personal information with third parties for their own direct marketing purposes (we do not do this). To exercise California rights, contact us at support@myhousekeep.com. We respond within 45 days.

EU/UK residents (GDPR / UK GDPR): Our legal basis for processing your personal data is the performance of a contract (providing the Service you signed up for) and your explicit consent (for optional features like SMS). You have rights of access, rectification, erasure, restriction, portability, and objection. You also have the right to withdraw consent at any time without affecting the lawfulness of prior processing. You may lodge a complaint with your local supervisory authority (for EU: your national DPA; for UK: the ICO at ico.org.uk).

California CPRA — Sensitive Personal Information (SPI): The California Privacy Rights Act (CPRA) defines a special category of "sensitive personal information." MyHouseKeep does not collect Social Security numbers, driver's license numbers, financial account credentials, precise geolocation (only city-level), racial or ethnic origin, religious beliefs, health data, or biometric data. Monthly rent amount is stored solely at your request for personal reference and is not used for any other purpose.

Do Not Sell or Share My Personal Information: MyHouseKeep does not sell your personal information, and does not share your personal information for cross-context behavioral advertising as defined by CCPA/CPRA. No opt-out mechanism is required because we do not engage in these practices. If this changes, we will update this policy and provide an opt-out mechanism before doing so.

To exercise any of these rights, contact: support@myhousekeep.com. We will respond within 30 days (or 45 days for CCPA). You will not face discrimination for exercising any privacy right.

The Service is not directed to individuals under 18 years of age. We do not knowingly collect personal information from anyone under 18. If you are under 18, do not use the Service or provide any information to us.

If we become aware that we have inadvertently collected personal information from a person under 18, we will delete it from our systems within 30 days. If you believe we have collected data from a minor, please contact us immediately at support@myhousekeep.com.

Certain features of the Service transmit information about your home systems to AI providers to generate personalized guidance. Specifically:

• What is transmitted: System type, brand, model, estimated age, symptoms you describe, prior maintenance records (text only), and — for photo identification — images of system nameplates or equipment.
• What is NOT transmitted: Your full home address, your name, your email, your phone number, or any other account-level personal identifier.
• Purpose: Data is transmitted solely to generate your real-time response. It is not stored by us after the API call completes.
• AI provider policies: Each AI provider (Anthropic, OpenAI, Google) has its own privacy policy and data retention practices governing what they do with API data. We encourage you to review their policies. Provider terms, retention settings and data-use practices apply to the configured services. Review their policies for details; we do not promise a universal provider retention or training policy.
• Minimum data: We transmit only the minimum information necessary to generate a useful response.

Renters may store lease details and public property-management office information. The app no longer offers fields for a private landlord's name or personal phone number. Do not upload another person's private contact information without their knowledge and permission. Home records:

• Is stored with the home and can be visible to authorized household members
• Is not automatically sent to landlords or property management companies; service providers process data as described in this policy
• Is deleted when you delete your account or remove the home from your account
• May contain legacy records created before this change. Existing records can be exported or removed; contact support for help removing legacy personal information.

If you provide your phone number and enable SMS notifications, you expressly consent to receive automated maintenance reminder messages from MyHouseKeep via Twilio. Providing your phone number is entirely optional. Consent is not a condition of using the Service.

• Storage: Your phone number is stored securely in our database, encrypted at rest, and transmitted to Twilio to deliver messages covered by your consent.
• Use: Your phone number is used for opted-in reminders and household-requested lists and notes — never for marketing, advertising, or sharing with third parties other than Twilio as the delivery carrier.
• Opt-out: Reply STOP to any message to unsubscribe immediately. You can also disable SMS in Settings → Account → Phone and Notifications.
• No sharing: Your phone number is never sold, rented, or otherwise disclosed to any third party other than Twilio as a data processor acting on our behalf.
• Deletion: When you delete your account or remove your phone number from your account, we delete it from our systems within 30 days subject to applicable retention needs. Twilio separately retains delivery records under its policies.

MyHouseKeep is operated from the United States. Our infrastructure (Supabase, Vercel) is primarily hosted in the United States. If you access the Service from outside the United States, your information will be transferred to and processed in the United States, where data protection laws may differ from those in your country.

For EU/UK users: Data transferred to the United States is transferred in reliance on Standard Contractual Clauses (SCCs) or other appropriate safeguards as required by GDPR/UK GDPR. The AI providers we use (Anthropic, OpenAI, Google) each have their own international data transfer mechanisms.

By using the Service from outside the United States, you acknowledge that your information will be processed in the United States.

The Service may contain links to third-party websites including Amazon product searches, contractor directories, manual databases, and external resources. We are not responsible for the privacy practices, security, or content of those sites. Review their privacy policies before providing any personal information.

We may update this Privacy Policy periodically. We will notify you of material changes via in-app notification and/or email at least 14 days before the change takes effect. The updated policy will always be accessible within the app. Your continued use of the Service after the effective date of a change constitutes your acceptance of the updated policy. If you do not agree to the updated policy, you must stop using the Service and may request account deletion.

For users in the European Union or United Kingdom, we are required to identify a legal basis for each category of data processing under GDPR Article 13:

Where we rely on legitimate interests, you have the right to object to that processing. Where we rely on consent, you may withdraw it at any time without affecting the lawfulness of prior processing. To lodge a complaint with your supervisory authority: EU users — contact your national data protection authority; UK users — contact the ICO at ico.org.uk.

If you have questions, concerns, or requests regarding this Privacy Policy or our data practices, contact us:

MyHouseKeep LLC
Email: support@myhousekeep.com
Website: https://www.myhousekeep.com
Mailing address: MyHouseKeep LLC · 432 NW 6th Ter · Cape Coral, FL 33993

Privacy requests: To submit a data access, correction, deletion, or portability request, email support@myhousekeep.com with subject line "Privacy Request" and describe the action you are requesting. Include your account email so we can verify your identity. We will respond within 30 days (GDPR) or 45 days (CCPA).

We will respond to all privacy inquiries within 30 days. For CCPA requests, we will respond within 45 days. For GDPR requests, we will respond within 30 days. You will not be discriminated against for exercising any privacy right.