This policy describes what information Household Calendar (the "Service") collects, how it is used, and the choices you have. The short version: we collect what's needed to run a shared household organizer, we don't sell your data, and we don't show ads.
Account: email address, name, and a password (stored hashed). Household content: calendar events, chores, recipes, trips, home-maintenance records, people you add, notes, and photos or attachments you upload. Content in a household is shared with that household's members.
The Service offers optional end-to-end encryption for household content. When enabled, that content is encrypted on your devices with keys we do not hold, and our servers store only ciphertext. Some AI features work by your device sending the relevant decrypted text directly to the AI processing step at your request; it is used only to produce the response and is not used to train models.
Text you send to the AI assistants (and the household content needed to answer, such as relevant events or recipes) is processed by Anthropic's Claude models under an agreement that does not permit training on your data. AI usage is metered per week to enforce plan limits; we store usage counters, not transcripts of your prompts beyond your own chat history.
Payments are processed by Apple or Google — we never see your payment details. Our subscription partner RevenueCat sends us your household's subscription status (plan tier and an anonymous purchase identifier) so we can unlock the features you paid for.
We use a small set of processors to operate the Service: Render (application hosting), MongoDB Atlas (database), Anthropic (AI processing), RevenueCat (subscription management), Expo (push-notification delivery), and Migadu (transactional email such as invitations and password resets). Optional features may send specific data to additional providers — for example, address autocomplete queries to Google Places. Each provider receives only what its function requires.
We do not sell or rent your personal information, we do not show third-party advertising, and we do not use tracking SDKs for advertising purposes.
Your data is retained while your account is active. Deleting your account removes your personal data from our production systems; residual copies in encrypted backups expire on a rolling basis. You can also remove individual content at any time in the app.
Data is encrypted in transit (TLS) and at rest, passwords are hashed, and optional end-to-end encryption protects household content with keys only your devices hold. No system is perfectly secure — use a strong, unique password and enable a passkey where available.
The Service is not directed at children under 13, and we do not knowingly collect personal information from them. Household members you invite must meet the minimum age in our Terms of Use.
We may update this policy; material changes will be communicated in the app or by email. Questions or data requests: support@householdcalendar.com.