Privacy Policy

How we handle your data

Last updated: June 19, 2026

Homebook is a small, two-person operation. We store the household data you create (expenses, meals, savings goals, etc.) so the app can show it back to you. We don't sell it, share it with marketers, or use it to train AI models. You can delete your account and your data at any time.

1. What we collect

Account information

When you create an account, we collect the email address and password you provide. Passwords are hashed by our authentication provider (Supabase) — we never see them in plaintext.

Waitlist email (before launch)

If you join the waitlist on our home page, we store the email address you submit so we can tell you when Homebook opens. We use it for that one announcement and nothing else — no newsletter, no marketing sequence, and we never sell or share it. Email support@homebook.tools to be removed at any time.

Household data you enter

Everything you type into the app — expenses, fixed costs, income, savings goals, family members, recipes, meal plans, shopping lists, tasks, tags, and notes — is stored as a single JSON record associated with your household. It is visible only to authenticated members of your household.

Phone number (optional)

If you choose to use the SMS feature, we collect and store the phone number you verify in Settings. We use it solely to (a) send you a 6-digit verification code at sign-up and (b) recognize you when you text the service. See SMS section below.

Device preferences

Your chosen theme (light or dark) is stored in your browser's local storage so it persists across visits. This stays on your device — we don't read it from our servers.

What we don't collect

2. How we use it

We do not use your data for marketing, profiling, or AI training.

3. Who we share it with

We use a small number of third-party providers ("data processors") strictly to operate the service. They access your data only to the extent needed to perform their function, and only under their own data protection commitments. We do not sell or trade your data with anyone.

4. SMS messaging

Mobile phone numbers and SMS opt-in data are not shared with third parties or affiliates for marketing or promotional purposes.

We use your phone number solely to send transactional messages you have opted in to receive (verification codes, replies to your own SMS commands).

How opt-in works

Opt-in happens at our public web page homebook.tools/sms. No account is required to opt in. You enter your U.S. mobile number, check the agreement box (unchecked by default), and submit. We then send a one-time welcome SMS confirming your subscription.

Once you create or sign in to a Homebook account, the number you opted in with is linked to your account automatically. At that point you can request a 6-digit verification code (e.g., from Settings → Text Homebook) and begin texting expenses to our number. No additional SMS consent is required at the linking step — the original opt-in covers all account-related messaging.

What we send

Message frequency & cost

Frequency depends on your own use — we only reply when you text us, plus the verification message at sign-up. Standard message and data rates from your mobile carrier may apply. Carriers are not liable for delayed or undelivered messages.

Opting out

Reply STOP to any message at any time to immediately unsubscribe. You can also remove your number from inside the app at Settings → "Text Homebook" → Remove. Reply HELP to receive support contact information.

5. Data retention & deletion

Your data is retained for as long as your account is active. You may delete your account and all associated data at any time by emailing support@homebook.tools from the address on your account. We will process the deletion within 30 days.

Backup snapshots taken by our database provider may persist for up to 30 days after deletion, after which they are overwritten in the normal rotation.

6. Security

All traffic between your device and our servers is encrypted in transit (HTTPS). Authentication is handled by Supabase using industry-standard practices (hashed passwords, JWT session tokens). No system is perfectly secure — if you become aware of a vulnerability, please email us so we can address it.

7. Children's privacy

Homebook is not directed to children under 13, and we do not knowingly collect personal information from anyone under 13. If you believe a child has provided information, please contact us and we will delete it.

8. California residents (CCPA / CPRA)

Because we are based in California and may serve California residents, the following rights apply:

To exercise any of these rights, email support@homebook.tools from the address on your account. We will respond within 45 days.

9. Changes to this policy

We may update this policy as the service evolves. Material changes will be communicated via email to the address on your account at least 7 days before they take effect. The "Last updated" date at the top of this page always reflects the most recent revision.

10. Contact

Questions, requests, or anything else: support@homebook.tools.