Privacy Policy

Account information. When you sign in with Apple, we receive your name and an email address — which may be the private, Apple-generated relay address if you choose to hide your real one — from Apple. If you sign up with email instead, we collect the email address and password you provide. Authentication is handled by our database provider, Supabase. Passwords are stored only as salted cryptographic hashes; we never hold a password in a form we can read.

Home and property information.Your home’s address, and information about its appliances and other assets (such as brand, model, and serial number), documents (manuals, warranties, and closing documents), and maintenance items. This information may be entered by your builder before you claim the home, by you after you claim it, or by both.

Photos.If you photograph an appliance or a document (for example, a warranty card or nameplate) to add it to your home, that photo is analyzed by Google’s Gemini API to extract details like brand, model, and serial number, and is stored in our Supabase Storage account.

Builder intake submissions.Builders can send us a home’s starting information through an online intake form hosted by JotForm, including photos and documents for the home. We retrieve each submission, create the draft home from it, and then delete the submission from JotForm.

Notifications. If you enable push notifications, we store an Apple Push Notification service (APNs) device token so we can send you maintenance and warranty reminders. We also use your email address to send reminders by email.

Activity and usage data. We log basic activity — your user ID, the action taken, and a timestamp — to keep the service secure, diagnose problems, and enforce rate limits (for example, to prevent abuse of photo-upload or claim-code features).

What we don’t collect.We don’t collect precise geolocation, your contacts, your photo library beyond the images you choose to add, payment card numbers, or biometric information. We don’t use third-party advertising or cross-site tracking technologies.

• To operate the service: show you your home’s assets, documents, and maintenance items, and let builders prefill that information for a home before it’s claimed.
• To process photos you upload through Google’s Gemini API and extract structured details (like model and serial numbers) so you don’t have to type them in by hand.
• To look up manuals and support information for your appliances, and to show helpful links on your asset pages — for example, to a manufacturer’s site, a YouTube search for a repair tutorial, or an Amazon search for a replacement part (see “Third-party links” in our Terms of Service for how those links work).
• To send maintenance and warranty reminders by push notification or email.
• To send household invitations you ask us to send, and to let invited members access the home.
• To keep HomeSetup secure and working correctly, including rate limiting and fraud/abuse prevention.
• To respond to your support requests, and to meet our legal obligations and enforce our Terms.

We do not use your information to serve ads, and we do not sell your personal information. We do not use your information to train third-party artificial intelligence models — the Gemini API is used only to read the specific photo or document you submitted, so we can fill in its details.

HomeSetup is shared by design, so it’s worth being clear about who sees what.

• Before a home is claimed,the builder who created it can see and edit the home’s information.
• After you claim it,the home belongs to your account. Anyone you invite as a household member can see and change the home’s information, so invite only people you trust.
• Your builder may continue to see records associated with homes it created, for its own warranty and service records. Your builder is a separate business and handles that information under its own privacy practices, not ours.

We share information only with the service providers that help us run HomeSetup, under agreements that limit what they can do with it. We do not sell your data or share it for advertising.

• Supabase — our database, file storage, and authentication provider. Your account, home, asset, document, and photo data is stored with Supabase.
• Vercel — hosts the HomeSetup web application and API.
• Google— photos you submit for extraction are sent to Google’s Gemini API for analysis.
• Apple — provides Sign in with Apple and delivers push notifications (APNs) to the HomeSetup app.
• Resend — delivers our email, including household invitations and reminder emails.
• Inngest — runs our background jobs, such as warranty analysis, reminder scheduling, and intake processing.
• JotForm — hosts the builder intake form and temporarily holds a submission until we retrieve it and delete it.

We also use an internal alerting service to tell our own team when a builder submission needs review. Those alerts are deliberately limited to non-identifying operational details and never include a homeowner’s email address.

We may also disclose information if required by law, or to protect the rights, property, or safety of HomeSetup, our users, or others. Where we are legally permitted, we’ll make reasonable efforts to notify you first. If HomeSetup is involved in a merger, acquisition, financing, or sale of assets, your information may transfer as part of that transaction, and we’ll notify you of any material change to this policy before it applies to you.

We use reasonable technical and organizational measures designed to protect your information, including encryption in transit using TLS, encryption at rest through our storage and database provider, salted password hashing, row-level access controls so one household’s data isn’t reachable from another account, rate limiting on sensitive actions such as claim-code entry and photo upload, and access controls that limit internal access to people who need it.

No system is perfectly secure, and we can’t guarantee absolute security. Keep your account credentials and your claim code private, and tell us right away if you think your account has been accessed without permission. If we become aware of a breach affecting your personal information, we’ll notify you and any regulator as required by law.

We keep your information for as long as your account is active so we can provide the service. You can permanently delete your account at any time from within the app (Settings → Delete Account). Deleting your account removes your account and associated personal data from our systems, other than information we’re required to retain for legal, security, or accounting purposes.

A few specifics. Deletion is permanent and we can’t restore a deleted account, so export or record anything you want to keep first. Builder intake submissions are deleted from JotForm once we’ve created the home from them. Security and activity logs are kept for a limited operational period and then discarded or aggregated. Backups are kept on a rolling schedule and overwritten in the ordinary course, so information deleted from the live system may persist in a backup until that backup expires. Records associated with a home that a builder created may remain in that builder’s own records, which we don’t control.

• Delete your account at any time from Settings in the app.
• Control notifications— turn push notifications on or off in your device’s notification settings, or from HomeSetup’s in-app notification settings.
• Access, correct, or exportyour information — you can edit your home’s information directly in the app, and you can ask us for a copy of what we hold.
• Remove household members you previously invited.
• Contact us to ask questions about your data or request changes, using the details below.

Depending on where you live, you may also have the right to know what personal information we collect and who we disclose it to, to have it corrected or deleted, to receive it in a portable format, to opt out of the sale or sharing of personal information, and not to be treated differently for exercising any of these rights. We don’t sell or share personal information, so there’s nothing to opt out of, but we honor Global Privacy Control and similar browser signals as an opt-out request.

Residents of California and of other states with comprehensive privacy laws — including Virginia, Colorado, Connecticut, Utah, Texas, Oregon, and Montana, and others as those laws take effect — have these rights. To exercise them, email us with “Privacy Request” in the subject line. We verify a request by confirming control of the email address on the account, and we’ll respond within the time the law requires, generally 45 days, with one extension where permitted. An authorized agent may submit a request with written proof of authority. If we deny a request and your state gives you a right to appeal, you may appeal by replying to our decision.

HomeSetup is intended for adult homeowners and builder staff in the United States and is not directed to, and should not be used by, children under 13. We do not knowingly collect personal information from children under 13. If you believe a child has given us personal information, contact us and we’ll delete it.

HomeSetup is operated from the United States and is intended for users in the United States. If you use it from another country, you understand that your information will be transferred to, stored in, and processed in the United States, where privacy laws may differ from those where you live. Our service providers may process information in other countries on our behalf under contractual protections.

We may update this Privacy Policy from time to time. If we make material changes, we’ll update the “Last updated” date at the top of this page. Continuing to use HomeSetup after a change takes effect means you accept the updated policy. If a change materially reduces your rights or expands how we use information you already gave us, we’ll give notice by email or in the service before it takes effect, and where the law requires it, we’ll ask for your consent.

Questions about this policy or your data? Email us at jrogero578@gmail.com. HomeSetup is operated by Axis Affiliates LLC, a Georgia limited liability company. If you’re not satisfied with our response, you may have the right to complain to your state attorney general or another supervisory authority.