Privacy notice

What is collected

Your name and email address when you create an account or accept an invite, and the password you choose, which is stored as a hash and never readable by anyone.

If you are a boarder, the name your owner typed for you, the room you are in, the dates you were in it, and the deposit held.

If your owner has your email address or phone number, whichever of them he entered. Neither is checked, neither signs you in, and nothing is sent to either of them today. When reminders by mail or message arrive, these are where they would go.

Meter readings, the amounts you owe and have paid, how you paid and any reference you gave.

If you are an owner, the house name and the rules you publish at the house rules link.

When you turn notifications on, the address your phone gives us to deliver them.

The address your requests come from, kept briefly to stop abuse of public forms and of sign in.

If you left your email on the home page to hear about the app, that address and nothing else with it. Nothing is sent to it until there is something to say.

How it is used

To bill each boarder for the month, show how each number was made, record what was paid, and remind you before a bill is due. Nothing is used for advertising and nothing is sold.

How long it is kept

Account data stays until you delete your account from its settings page, or ask for it to be removed. A boarder's name, contact details, bills and payments stay with the house as its records after the account is gone, because the owner needs the evidence to outlast a boarder leaving. Readings stay as long as the house does. Sent messages are logged for thirty days and then purged. Abuse counters last a day. Notification addresses stay until you turn notifications off or the phone stops answering. A deletion request is kept for a year as the record that it was made and handled. An address left on the home page to hear about the app is kept until the app ships or you ask for it to go.

Who can see it

The owner of the house sees everything in it. A boarder sees only their own bills, payments and deposit settlement. A shared charge shows how many people it was divided by, and nothing else about them. The team that runs the product, when needed to keep it running. Nobody else.

Four services help run it, each under its own notice. Neon holds the database. Vercel serves the pages and counts visits without cookies or a profile. Resend delivers password resets. Sentry receives error reports, which are set up to carry no personal data.

Your rights

Under the Data Privacy Act of 2012 you can ask what is held about you, ask for it to be corrected, or ask for it to be deleted. Use the deletion request form. Requests are answered within fifteen working days. Deleting your account removes your name, email and password. The house keeps its bills and readings as the owner's record.