My Homey — Privacy Policy

1. Scope & Controller

This Privacy Policy explains how My Homey (“My Homey,” “we,” “us,” “our”) collects, uses, and discloses information when you use our websites, apps, and related services (the “Service”). For the purposes of data protection laws (e.g., GDPR), My Homey is the data controller for processing of personal information described here.

2. Information We Collect

• Account Data: name, email, password or authentication tokens, and preferences.
• Property & Content Data: property addresses and details, documents you upload (invoices, receipts, photos, maintenance logs), and notes you enter.
• Diagnostic Interactions: prompts, responses, and metadata generated through the AI Diagnostic Assistant.
• Device & Usage Data: IP address, device identifiers, browser type, pages viewed, referring/exit pages, and timestamps.
• Payment & Transaction Data: if you buy paid features, limited billing info from our payment processor (we do not store full card numbers).
• Cookies & Similar Technologies: see Cookies, Analytics & Ads.

3. Sources of Personal Information

We collect information directly from you, automatically from your devices, and from third parties (e.g., service providers, partners, or publicly available sources) as permitted by law.

4. How We Use Information

• Provide, operate, and maintain the Service (including account, property records, and diagnostics).
• Improve and develop features, including training and evaluating our systems.
• Personalize content and provide customer support and safety/security protections.
• Communicate with you about updates, promotions, and important notices.
• Generate aggregated and anonymized insights for analytics and business intelligence.
• Comply with legal obligations and enforce our Terms.

5. Legal Bases (GDPR)

If you are in the EEA/UK/Switzerland, we rely on the following legal bases: (a) performance of a contract (to provide the Service), (b) legitimate interests (to secure and improve the Service, prevent fraud, analyze usage), (c) consent (for certain cookies/marketing and where required for data sale/sharing), and (d) legal obligations.

6. Sharing & Disclosure

We share information with: (i) service providers who support our operations (hosting, analytics, customer support, payments), (ii) legal authorities when required by law, and (iii) with your direction or consent. We require service providers to handle data consistent with this Policy and applicable law.

7. Sale/Sharing of Personal Information (CCPA)

We do not sell or share your personal information as those terms are defined by the CCPA without your explicit consent. If we ever plan to do so, we will present a clear opt‑in and provide an easy way to opt out at any time.

Do Not Sell or Share My Personal Information

8. Cookies, Analytics & Ads

We use cookies and similar technologies to operate the Service, analyze usage, and (with your consent, where required) for marketing. You can control cookies through your browser settings and via in‑product controls. Some cookies are essential to the Service.

9. Data Retention

We retain personal information for as long as necessary to fulfill the purposes described here, comply with legal obligations, resolve disputes, and enforce agreements. Retention periods vary by data type and context.

10. Security

We implement reasonable and appropriate technical and organizational measures to protect information. No method of transmission or storage is 100% secure; you use the Service at your own risk.

11. International Transfers

Information may be processed in the United States and other countries that may have different data protection laws than your jurisdiction. Where required, we use appropriate safeguards, such as Standard Contractual Clauses (SCCs), for cross‑border transfers.

12. Your Privacy Rights

EEA/UK/Swiss Users (GDPR): you have the right to request access, rectification, erasure, restriction, portability, and to object to processing. You may withdraw consent at any time without affecting prior processing.

California Residents (CCPA/CPRA): you have the right to know, delete, correct, opt out of sale/share, and to limit use/disclosure of sensitive personal information. You will not face discrimination for exercising rights.

To exercise rights, email support@homeyapp.co with the subject “Privacy Request”. We may verify your identity and, where permitted, respond via an authorized agent at your direction.

Opt‑out of sale/share: submit a request via email or your account settings (if available). We will honor Global Privacy Control (GPC) signals where legally required.

13. Children’s Privacy

The Service is not intended for individuals under 18. We do not knowingly collect personal information from children. If you believe a child has provided personal information, contact us and we will take appropriate steps to delete it.

14. Changes to This Policy

We may update this Policy periodically. If changes are material, we will provide notice (e.g., email or in‑product). Your continued use after the effective date signifies acceptance.

15. Contact

Questions or requests? Email us at support@homeyapp.co.