1. Who is responsible
The controller responsible for processing your personal data is Artur Ferreira, Switzerland. For any privacy question or to exercise your rights, contact privacy@hompad.arturf.ch.
2. What data we process
We process the following categories of data:
- Account data: name, email address, and authentication identifiers, handled by our authentication provider (Clerk).
- Household content: inventory items, shopping lists, storage areas, recipes, meal plans, receipts you upload, and household membership — the data you create by using the product.
- Usage & device data: pages viewed, features used, approximate interactions, browser/device type, and similar technical signals (only if analytics are enabled — see section 5).
- Communications: emails and push notifications we send you (e.g. low-stock or expiry reminders) and your related preferences.
3. Why we process it (purposes & legal bases)
- To provide the service and your account — performance of a contract.
- To process receipts and generate recipes/plans you request — performance of a contract.
- To send service notifications you have enabled — consent, withdrawable at any time in settings.
- To keep the service secure, prevent abuse, and improve it — legitimate interest.
- To understand product usage via privacy-respecting analytics, where enabled — legitimate interest or consent depending on your region.
4. AI processing
When you scan a receipt, generate a recipe, or use planning/assistant features, the relevant content (for example the text extracted from a receipt image, or a list of ingredients in your inventory) is sent to our AI providers to produce the result. Hompad uses OpenRouter and OpenAI as AI processors for these features. We do not use your household content to train third-party foundation models, and we send only the data needed to fulfil the specific request.
5. Analytics
Hompad may use PostHog to understand how the product is used so we can improve it. Analytics are only active when explicitly configured for a deployment. Where used, analytics requests are routed through our own domain. We aim to avoid collecting unnecessary personal data and you can object to analytics processing by contacting us.
6. Service providers (processors)
We rely on the following categories of providers, who process data on our behalf under appropriate agreements:
- Authentication & identity (Clerk)
- Application database & backend hosting (Convex)
- Application hosting / delivery (our hosting provider)
- AI processing (OpenRouter, OpenAI)
- Transactional email (Resend)
- Web push notifications (browser push services)
- Product analytics, where enabled (PostHog)
- Product reference data (Open Food Facts) — used to look up product information; this involves product barcodes/names, not your identity.
7. International transfers
Some providers may process data outside Switzerland or the EU/EEA. Where this happens, we rely on appropriate safeguards (such as adequacy decisions or standard contractual clauses) to protect your data. We prefer EU-region processing where a provider offers it.
8. Retention
We keep your account and household data for as long as your account is active. When you delete your account or specific content, we delete or anonymise the associated personal data within a reasonable period, except where we must retain certain records to comply with legal obligations.
9. Your rights
Subject to applicable law, you have the right to access, rectify, delete, and restrict processing of your personal data, to data portability, and to object to certain processing. You may also withdraw consent at any time without affecting prior processing. To exercise any right, contact privacy@hompad.arturf.ch. You also have the right to lodge a complaint with your competent data protection authority (in Switzerland, the FDPIC; in the EU, your national authority).
10. Cookies & local storage
We use strictly necessary cookies and local storage to keep you signed in and to remember preferences (for example your theme). Where analytics are enabled, additional identifiers may be set as described above.
11. Changes to this policy
We may update this policy as the product evolves or legal requirements change. Material changes will be reflected by updating the date at the top of this page.