Privacy Policy

Account information. When you sign in with Google, we receive your account identifier and email address through our authentication provider, Supabase. We use this to create and manage your account, show your signed-in status, and associate saved reports with you.

Report inputs. To generate a fit report, you provide a home address, household and transportation preferences, amenity priorities, optional commute destinations, and optional lifestyle notes. You submit this information when you request a report.

Generated reports. When you are signed in, we store the report we generate for you, including scores, summaries, place references, route estimates, and related metadata tied to your account.

Usage and credits. We keep basic account records such as your credit balance and report generation history so we can operate the service and enforce usage limits.

Browser storage on your device. Homeward may store recent report data in your browser's local or session storage to improve your experience, such as restoring a recent report or importing prior local history after you sign in. You can clear this data through your browser settings.

Technical and operational logs. Our servers may record technical information related to report generation, such as timestamps, API usage, and non-sensitive request metadata, for reliability, debugging, and cost monitoring. We do not use third-party advertising or behavioral analytics trackers in the app today.

We use the information described above to:

• authenticate you and maintain your account;
• generate, display, save, and let you manage fit reports;
• deduct credits and enforce service limits;
• operate, secure, troubleshoot, and improve Homeward;
• comply with law and respond to lawful requests.

We do not sell your personal information. We do not use your data for third-party advertising.

Homeward combines the information you provide with data and services from third parties to build your report. This may include geocoding an address, searching nearby places, estimating routes and travel times, rendering maps, and generating plain-language summaries. Those providers process information according to their own terms and privacy policies.

We rely on trusted providers to operate Homeward, including:

• Supabase for authentication, account storage, and saved reports;
• Google for sign-in and Maps Platform services such as geocoding, places search, routing, and map display;
• OpenAI for generating narrative summaries from assembled report data;
• Stripe when payment features are enabled, for processing purchases of report credits.

These providers may process your information on our behalf to deliver the service. Their handling of data is governed by their own policies.

Homeward uses cookies and similar technologies primarily to keep you signed in through Supabase authentication. We do not use cookies for cross-site advertising. You can control cookies through your browser settings, though disabling authentication cookies may prevent you from staying signed in.

We retain account and saved report information for as long as your account is active or as needed to provide the service. You may delete saved reports through the app where that feature is available. If you want account-related information removed, contact us and we will handle your request subject to legal and operational requirements.

Server logs and operational records are kept only as long as reasonably necessary for security, troubleshooting, and billing reconciliation.

We use reasonable administrative, technical, and organizational measures designed to protect your information. No method of transmission or storage is completely secure, and we cannot guarantee absolute security.

Depending on where you live, you may have rights to:

• access personal information we hold about you;
• request correction or deletion of certain information;
• object to or restrict certain processing;
• withdraw consent where processing is based on consent.

To make a privacy request, email privacy@homeward.casa. We may need to verify your identity before responding.

Homeward is not directed to children under 13, and we do not knowingly collect personal information from children under 13. If you believe a child has provided us personal information, contact us and we will take appropriate steps to delete it.

Homeward may process and store information in Canada and in other countries where our service providers operate. By using the service, you understand that your information may be transferred to locations with different data protection laws than your own.

We may update this Privacy Policy from time to time. When we do, we will revise the "Last updated" date above. Material changes may also be communicated through the service or by other reasonable means. Your continued use of Homeward after an update means you accept the revised policy.

Questions about this Privacy Policy or our data practices can be sent to privacy@homeward.casa.