App privacy policy
What happens to the data you put in MyHouse, who can see it and how you can manage it.
Who handles your data
The data controllers are Andrea Boscarin and Federico Zardo, who develop MyHouse. For any question or request write to myhouse.proj@gmail.com.
What data the app uses
- Account: name, email, password (stored only in encrypted form), language and a profile photo if you choose one. If you sign in with Google or Apple, they give us your name and email.
- The home: inventory, places, shopping lists, cart, recipes, clothes, warranties, calendar, expenses and split bills, the “Family” log and invitations. People in the same home can see them.
- Photos: receipts, clothes, recipes, products, warranties and profile photos, when you take or pick them. Receipt photos are deleted automatically after 30 days; the lines you confirmed stay.
- Voice: when you dictate the list, the recording is only used to understand what to add and is not stored.
- Health data: treatments, doses and diary, only if you turn them on in the Medicine section. They are encrypted before being stored and only you, plus the people you choose, can see them. “What don’t you eat?” (intolerances and diets) can also say something about your health: people in the home see it, so they can cook for you.
- Phone: the code used to send you notifications, the home’s city for the weather, and the technical data needed to run and protect the service (for example IP address and access logs).
What we don’t do
No advertising, no profiling, no third-party analytics inside the app. We don’t sell or hand over your data to anyone.
Why, and on what legal basis
- To let you use MyHouse and share the home with the people you invite: it is the service you ask us for (GDPR article 6(1)(b)).
- For health data: your explicit consent, given by tapping “Turn on” in the Medicine section (article 9(2)(a)). You can pause it or delete everything from the same section, under “Privacy”.
- For intolerances: your explicit consent, given by entering them in your Profile. You can remove them at any time.
- For notifications: the permission you give your phone, which you can withdraw in its settings.
- For security (bot check, usage limits, technical logs): our legitimate interest in protecting the service and its users (article 6(1)(f)).
Reading with artificial intelligence
When you ask the app to read a receipt, recognise a piece of clothing or a product, understand a dictated list or a recipe, the photo, recording or text goes to Google (Gemini, through Google Cloud) for that reading only. Google processes it on our behalf and, by contract, does not use it to train its models. You always check the result before saving. If you prefer, you can type everything by hand without sending anything.
Who helps us
We use a few providers that process data on our behalf, only as far as needed:
- Supabase: database, files and sign-in, with servers in the European Union (Ireland).
- Google Cloud: the artificial intelligence readings described above.
- Google and Apple: signing in with their account, if you choose to.
- hCaptcha (Intuition Machines): the bot check when you sign up or sign in.
- Expo, Google Firebase and Apple: delivering push notifications.
- Resend: confirmation and password reset emails.
- Cloudflare: the myhouse-app.com website.
Some public services only receive the information they need, with nothing that identifies you: the barcode to Open Food Facts, Open Products Facts and Open Beauty Facts; the home’s city or position to Photon and the Norwegian Meteorological Institute for the weather; the medicine code to AIFA for the leaflet. When you save a recipe from a link, our server opens that page to read it.
Data outside the European Union
Some providers (Google, Apple, hCaptcha, Expo) may also process data outside the European Union, for example in the United States. In those cases the transfer is covered by European Commission adequacy decisions or by standard contractual clauses.
How long we keep it
- As long as you have an account. When you delete it, we delete your personal data and your health data.
- What you added to a shared home (inventory, lists, expenses) stays with the home, because the other people need it; in the accounts you will appear as “Deleted account”. Homes where you are the only person are deleted.
- Receipt photos after 30 days, voice recordings right after they are read.
- Technical database backups are overwritten within a few days.
On your phone
The app keeps a copy of the home’s data on your phone so it works offline, plus your preferences and your sign-in, stored securely. They are removed when you sign out or uninstall the app.
Minimum age
MyHouse is meant for people aged 14 and over. Younger children may only use it with a parent who manages the account.
Your rights
You can see, correct, download or delete your data, object to or restrict its use, and withdraw a consent at any time, without affecting what was done before.
Many of these you can do in the app: name and photo in Profile, health data in Medicine → Privacy, intolerances in Profile → What I don’t eat, notifications in Profile, and Profile → Delete account. For anything else write to myhouse.proj@gmail.com from your account’s address: we reply within one month.
If you think your data is handled wrongly you can complain to the Italian data protection authority, the Garante per la protezione dei dati personali, or to the authority where you live.
If something changes
If we change this policy in an important way, we will tell you in the app before the changes apply.
Last updated: 2 November 2026.