Privacy Policy

Introduction

HearthStack is operated by [LEGAL/OPERATOR NAME] ("we" or "us"). This policy covers the HearthStack website and household application. It describes current product practices. If you have questions, contact [PRIVACY/SUPPORT EMAIL].

Information we collect

We handle account and authentication information, information adults enter or upload to organize their households, and technical information needed to operate the website and application. What we receive depends on the features you use and what other authorized household members add.

Information you provide

Account holders provide an email address, password, and optionally a display name. Supabase Auth processes sign-in and account recovery. Household setup includes names and settings such as currency, locale, and time zone. Owners may enter an adult invitee’s email address and share a generated invitation link with them; the current product does not email household invitations.

For optional restricted child sign-in, the household owner provides an invitation email address for an existing child household member. The child uses the normal email and password authentication flow; the signed-in email must match the invitation before that login is linked to the existing child member. This does not create a separate adult household member.

Household content can include shopping lists, items, stores and prices; Tasks, assignments and descriptions; HearthSignal questions, responses, decisions, notes and photos; and Money buckets and balances, income and expense entries, transfers, allocation rules, categories and transaction notes. If you choose to import a supported financial-history CSV, its selected transaction data can become household Money records. HearthStack does not provide bank synchronization or request bank-login credentials in the current product. Payment-card details for subscriptions are collected through the third-party payment processor’s checkout.

Household and shared information

A household can include multiple members. Adults with accounts can add people represented in household records without giving them a login. Kids supports adult-managed child profiles with or without optional restricted child sign-in. Child profile information includes a display name and an avatar choice, which may be a character, initials, or an uploaded profile photo. Adults may also provide an optional birthday month and day and an optional birth year. A child profile does not require a login.

Household members with access can create or change shared content according to their permissions. Some information is shared with other authorized adult account holders in the household; other records have narrower visibility. Please avoid entering sensitive information about yourself or another person unless you are comfortable with everyone authorized to see that record having access to it.

Information collected automatically

When you visit or use the service, your browser and our infrastructure may process network and device information, such as IP address, browser details, requests, and error information, to deliver pages, authenticate requests, and help maintain security and reliability. We do not claim a particular production hosting-log format or retention period. Optional camera, barcode-scanning, and voice-capture features use device capabilities when you choose to use them.

Photos and uploaded content

You can upload or capture photos for HearthSignal. The application stores those images in private Supabase Storage and relates them to the Signal; authorized viewers of that Signal may see its photos. Removing a photo is supported, but removal of a photo does not by itself delete all related household records. Do not upload images you do not have permission to share with the selected audience.

How we use information

We use information to create and secure accounts, verify email and support password recovery; maintain household membership and permissions; display and update the records you and other authorized members enter; perform requested calculations, imports and product lookups; respond to requests; and operate, troubleshoot and protect the service. We do not use household sharing as an advertising-data exchange.

How household members see information

Access depends on active household membership and the record’s controls, not merely on knowing a link. Shopping content and household-scoped Money records are available to authorized adults in household context; Money also supports individually owned buckets with narrower access. Task lists can be household-visible, visible to selected adult account holders, or private to the list owner. HearthSignal questions can be visible to household adult account holders or a selected audience, with the submitter retaining access. Child HearthSignal access requires authorization and explicit inclusion under the household or selected-member audience controls. Responses and photos follow the relevant Signal’s access controls. Being the household owner does not automatically override a selected or private Task or Signal audience.

Child Money access is limited to balances explicitly shared with that child, not household transactions, ledger history, or Money configuration. Enabling child sign-in does not grant adult household administration or billing access. An adult can open supervised Kid View while remaining signed in as the adult, without creating or requiring a child login. Supervised Kid View does not include HearthSignal.

Non-login members, including managed minors, cannot sign in to view records. Other authorized account holders may nevertheless see information about them in records that those account holders are permitted to access. A change in membership or audience can change who can see a record; it cannot undo a copy someone has already seen or made.

Service providers and external services

Supabase provides authentication, application database services, private photo storage, and server-side functions. Supabase Auth handles confirmation and recovery email flows; delivery may depend on the service’s email infrastructure. If you request optional voice transcription, audio is sent through a Supabase function to xAI for transcription. If you use barcode product lookup and a result is not already cached, a product barcode is sent through a Supabase function to Open Food Facts; product lookup results can be cached by the service.

We use providers to perform these functions, not as a sale of household data. The current application and website do not implement sale of personal information or sharing for cross-context behavioral advertising. A third-party payment processor handles subscription payments. If we add other providers, we will update this policy as appropriate.

Cookies and local storage

The application uses browser storage to keep a Supabase Auth session, remember appearance and last-household preferences, and support essential application behavior. A limited display-only Money entry snapshot, including bucket and category information, preferences and recent merchants, can be held in your browser’s IndexedDB to speed up entry; the app clears that cache on sign-out and household context changes. The installable application can cache its app shell for offline loading; it does not intentionally cache Supabase data requests in the service worker. Anyone with access to your device or browser profile may be able to access locally stored information. Browser or hosting infrastructure may also use necessary session mechanisms; we do not use advertising cookies in the current app or marketing-site source.

Analytics and tracking

The current website and application do not include an advertising analytics or tracking-cookie integration, and we have not implemented an application analytics or third-party crash-reporting SDK. Operational requests and errors may still be processed by infrastructure providers as described above. If tracking practices change, we will update this policy.

Data retention

We retain information while needed to provide and maintain the service, administer accounts and household records, address requests and disputes, enforce agreements, or comply with applicable law. Some records can be archived or removed through product controls without deleting an account or all household information. Retention can vary depending on the record and circumstances; we do not promise a fixed period for all records or backup copies.

Access, correction, export, and deletion

You can review and edit many records using available account and household controls. There is no general in-app account deletion or full-data export tool at present. To request access, correction, a copy of your information, or deletion, contact [PRIVACY/SUPPORT EMAIL]. We may need to verify your identity and your authority over household data before responding. We will evaluate requests in light of other household members’ rights, applicable law, and any information we must retain. A request to remove your account may not mean every shared record another member created or relies on can be removed immediately.

Security

We use reasonable administrative and technical measures designed to protect information, including account authentication and application access controls. No method of transmission or storage is completely secure. Protect your account credentials and use care when choosing whom to invite or which household audience to select.

Children and age eligibility

You must be at least 18 years old to create or administer a HearthStack household as an adult account holder. HearthStack is not directed to children. Household creation and management are adult-controlled. Kids supports adult-managed child profiles, which may remain without a login. A household owner may optionally enable restricted child sign-in linked to an existing child member; child access is scoped to the Kids experience and explicitly shared information, not adult household privileges. For questions about child profiles or sign-in, contact [PRIVACY/SUPPORT EMAIL].

U.S. state privacy rights

Depending on where you live and whether a particular state privacy law applies to us and your information, you may have additional rights to know about, access, correct, delete, or obtain certain personal information, or to appeal a decision on a request. Contact [PRIVACY/SUPPORT EMAIL] to make a request. We will handle applicable requests under the relevant law, including permitted verification and exceptions. Household sharing to provide this service is different from sale or sharing for advertising purposes.

Changes to this policy

We may revise this policy as the service or applicable requirements change. We will post an updated version and effective date here and provide additional notice when appropriate for a material change.

Contact us

For privacy questions or requests, contact [LEGAL/OPERATOR NAME] at [PRIVACY/SUPPORT EMAIL].

Effective date

Effective date: [EFFECTIVE DATE].