Privacy policy
Homeboard · last updated 27 October 2026
The short version: Homeboard stores what you and your household put into it, so you can all see it on your phones. It isn’t shown to anyone outside your household, it isn’t sold, and there are no adverts, analytics or tracking. You can leave a household or delete your account from inside the app at any time.
Who is responsible
Homeboard is run by Michael Howes, an individual in the United Kingdom, who is the data controller for the information described here. For anything about your data, email privacy@homeboard.org.uk.
What Homeboard stores
- Your account: your email address and password. The password is stored only as a secure hash, so nobody can read it.
- Your name in the household: the display name you choose when you create or join a household.
- What your household adds: tasks and reminders, shopping lists, meals and recipes, cars, children, plants, gift ideas, freezer contents, packing lists, trips, weekend ideas and notes.
- Documents and photos you attach: for example passport photo pages, insurance certificates and receipts. These are kept in private storage that only your household can open.
- Information about children: adults can add their children’s first names, school reminders, shoe sizes and documents. Children don’t use Homeboard themselves.
- A notification token for your phone: this lets Homeboard tell your phone to refresh its reminders when someone else changes a task. It doesn’t identify you by name.
- Failed invite codes: when someone enters a wrong invite code, the time and their account are recorded to stop codes being guessed. These records are deleted after a day.
Your phone also keeps a copy of your household’s data so the app opens quickly, plus your notification settings and the reminders it has scheduled. These stay on the phone. The copy of your data and the reminders are cleared when you sign out.
What Homeboard doesn’t do
- No adverts, analytics, tracking or crash-reporting tools.
- Your data isn’t sold or shared for marketing.
- Your data isn’t used to train AI.
- Homeboard doesn’t ask for your location, contacts or microphone.
Who can see your data
- Your household: everyone who joins with your household’s invite code can see and change the household’s data and files. You can make a new invite code at any time, and the old one stops working.
- Calendar link, if you turn it on: anyone with the link can see your tasks’ titles, dates and the first name of whoever each one is for, but not your notes. You can reset or turn off the link in the app.
- Recipe links: when you import a recipe from a web link, your phone opens that page directly, as a browser would. The recipe website sees an ordinary visit from your phone.
- The service providers below, only to run the app.
Service providers
| Provider | What they do | Where |
|---|---|---|
| Supabase | Hosts the database, sign-in and file storage | Data stored in London, UK |
| Resend | Sends sign-up and password-reset emails (receives your email address) | Sent from Ireland; company based in the US |
| Expo | Delivers app updates and passes on refresh notifications, which contain no personal content | US |
| Google (Firebase Cloud Messaging) | Delivers those notifications to Android phones | US |
Each provider handles data under its own data protection terms, including safeguards for transfers outside the UK.
Why it’s used (legal basis)
- To provide the app you signed up for: storing and syncing your household’s data, and sending sign-in and reset emails.
- Legitimate interests: keeping the service secure, for example limiting wrong invite codes.
How long it’s kept, and deleting it
- Your data is kept while your account exists.
- Leave household (on the household screen) removes you, and tasks assigned to you become shared. If you’re the last member, the household and everything in it, files included, is deleted.
- Delete account (on the More tab) leaves every household as above, then deletes your login and email address.
- Deleted data may stay in the hosting provider’s backups for a short time until those backups expire.
Your rights
Under UK data protection law you can:
- ask for a copy of your data
- have it corrected (most of it you can edit in the app)
- have it deleted
- object to how it’s used
Email privacy@homeboard.org.uk for any of these. You can also complain to the Information Commissioner’s Office at ico.org.uk.
Children
Homeboard is for adults running a household. Accounts are not for under-18s. Information about children is added by their parents or carers, and only their household can see it.
Security
Data is encrypted in transit. Database rules mean each household can only reach its own data, and files are kept in private storage. No system is perfectly secure: if something goes wrong that affects your data, you’ll be told.
Changes
If this policy changes, this page will be updated and the date at the top will change.