Home Manager Privacy Policy

Effective date: October 16, 2026

Home Manager ("the App") is a household management application developed by Advanced Software ("we", "us", "our"). It helps you catalog household products by scanning barcodes and share expenses, budgets, events, shopping lists, and documents with the members of your household.

This Privacy Policy explains what information the App collects, how it is used, with whom it is shared, and the choices you have. By using the App you agree to the practices described here.

1. Information We Collect

1.1 Account information

When you create an account we collect and store:

• your email address (used as your login and account identifier);
• your password — stored only as a cryptographic hash on our authentication server, never in readable form;
• an optional full name (displayed to other members of your household);
• your preferred language and account tier (free or premium).

1.2 Household content

The data you and your household members create in the App — households, member lists and roles, products (names, barcodes, estimated costs, stores), expenses, budgets, events and invitees, shopping lists, documents, and receipt data (merchant, date, totals, line items). We also keep a household activity log recording which member created, changed, or deleted shared items and when.

1.3 Photos and documents (end-to-end encrypted)

Images you attach (receipts, documents) are chosen from your device's photo library and encrypted on your device before upload using AES-256-GCM with a key that never leaves your household in readable form. Our servers store only the encrypted bytes plus the minimum metadata needed to operate the service: file title, media type, size, timestamps, and which household members hold (wrapped) decryption keys. We cannot read your encrypted images.

1.4 Receipt scanning (OCR)

When you scan a paper receipt, the App sends a downscaled copy of the receipt photo through our server to Google's Gemini API to extract the merchant, date, totals, and line items. This is the only case where image content leaves your device in readable form: the image is processed just-in-time, is never logged or stored on our servers, and the original photo is saved only through the end-to-end encrypted pipeline described in section 1.3. The extracted text and amounts are saved as your expense and receipt data.

1.5 Purchases

If you buy the premium upgrade, the purchase and payment are processed by Google Play; we never see your payment card or financial details. To verify and grant the purchase we receive and store: the Google Play order ID, purchase token, product ID, and the resulting entitlement state.

1.6 Notifications

If you enable notifications, we store this device's Expo push token (and platform) so reminders and household notifications can be delivered to you. You can withdraw this at any time in your device settings.

1.7 Diagnostics

The App uses Expo's EAS Observe service to help us keep it stable. When the App crashes, errors occur, or performance is measured, we may receive: crash/error traces, app version, device model, operating system version, and screen/route timing. This data does not include your household content or account password.

1.8 Encryption keys and recovery

End-to-end encryption relies on key material we store and process:

• your public key (safe to share by design);
• a backup of your private key, stored on our servers only in encrypted form — sealed with an industry-standard key derivation of your login password and, separately, of a random recovery code that only you can view. Your password and recovery code are never stored on our servers in any form.
• on your device, the private key is kept in the hardware-backed secure storage (Android Keystore).

1.9 Data stored only on your device

• If you opt in to biometric sign-in, your email and password are saved in the device's secure storage so the App can sign you in after a fingerprint/face check. This credential never leaves the device, and your biometric data is handled exclusively by your operating system — we never collect, receive, or store biometric measurements.
• Language and theme preferences, app caches (including temporarily decrypted files in the App's cache directory), and session information.

2. How We Use Information

We use the information above to:

1. provide the service: authenticate you, sync your household data across your and your members' devices, and display shared content;
2. verify purchases and manage your plan and household storage quota;
3. deliver notifications you have enabled;
4. keep the App working: diagnose crashes, measure performance, and fix bugs;
5. protect the service: secure accounts, enforce access rules, prevent abuse;
6. meet legal obligations.

We do not use your information for advertising, profiling, or sale, and we do not embed advertising or third-party tracking SDKs.

3. App Permissions

• Camera — used only to read product barcodes live in the scanning view. The camera never captures or saves photos.
• Photos / media — accessed only when you explicitly pick an image (for example a receipt or document) using the system picker.
• Notifications — optional; used to deliver reminders and household notifications.
• Biometrics — optional; on-device authentication only (see 1.9).

4. How We Share Information

We do not sell, rent, or trade your personal information. We share it only with the processors below, strictly to operate the service:

Your account and household data are hosted on backend infrastructure operated by us (self-hosted, at supabase.advancedsoftware.io). We may also disclose information if required by law or to protect our rights, and in connection with a merger or acquisition (with notice to you).

Because Google and Expo operate internationally, your data may be processed outside your country of residence. We take measures — contract terms and, where applicable, data-transfer mechanisms — to ensure appropriate protection.

5. Data Retention and Deletion

• Household content is kept until you (or a household admin) delete it in the App, or until the household is deleted.
• Account data is kept while your account is active. To delete your account and personal data, contact us at the email in section 8; we will remove your profile, membership, key backups, push tokens, and purchase records. Encrypted attachments you uploaded are deleted (or become permanently unreadable, since their keys are destroyed).
• Push tokens are removed when you sign out or can be pruned when no longer valid.
• Diagnostics are retained by Expo's EAS service according to its retention settings.
• Receipt images sent for OCR are not retained at all (section 1.4).

6. Your Rights

Depending on your jurisdiction (for example under the GDPR or the CCPA), you may have rights to: access the personal data we hold about you; correct or delete it; export it in a portable format; object to or restrict processing; and withdraw consent (for example for notifications or biometric sign-in — both can be turned off in the App or device settings). To exercise any of these rights, contact us at the email below. We respond within the timeframe required by applicable law.

7. Children

The App is intended for general audiences managing a household and is not directed at children. We do not knowingly collect personal information from children under 13 (or under 16 in the European Economic Area). If you believe a child has provided us personal information, contact us and we will delete it.

8. Contact Us

Advanced Software Email: عنوان البريد الإلكتروني هذا محمي من روبوتات السبام. يجب عليك تفعيل الجافاسكربت لرؤيته.

For any privacy question, data request, or account deletion request, email us and include the email address of your Home Manager account.

9. Changes to This Policy

We may update this Privacy Policy as the App evolves. Material changes will be reflected by the "Effective date" above (and, where appropriate, announced in the App). Continued use after an update means you accept the revised policy.