Privacy Policy

1. Data we collect

Account & authentication: your email address and a securely hashed password, managed by our identity provider (AWS Cognito), plus optional passkeys/2FA metadata. We never see your raw password.

Profile: the details you choose to add — display name, date of birth, phone number, and an avatar image.

Household content: what you put into the app — tasks and chores, lists, meals and recipes, finances (expenses, income, goals, categories), inventory, wiki notes, and bills/messages you forward to your household mailbox (including attachments such as receipts).

Technical & security data: limited information such as IP address and device/user-agent used for sign-in, security events, abuse prevention, and error diagnostics.

Website analytics: on this public marketing site only. With your consent we use Google Analytics 4; we also use Cloudflare's cookieless Web Analytics, which sets no cookies and does not track you across sites. The app itself has no advertising or analytics cookies.

2. How we use data & legal bases

To provide the service — create and run your household account and its features (legal basis: performance of a contract).

To secure the service — authentication, fraud/abuse prevention, and diagnosing errors (legal basis: legitimate interests and legal obligation).

To process bills and receipts you forward — automated and AI-assisted parsing to extract amounts and dates (legal basis: performance of a contract / your instruction).

To communicate with you — service and account messages, and any notifications you opt into (legal basis: contract and/or consent).

For website analytics — measuring marketing-site traffic (legal basis: your consent, which you can withdraw at any time).

3. Cookies & similar technologies

The app uses only strictly-necessary cookies/storage for sign-in, security and your preferences. The marketing site additionally uses analytics cookies, which load only after you consent via our cookie banner. Details and categories are in our Cookie Policy.

4. Service providers (processors)

We host and run LiveHome HQ on Amazon Web Services and rely on a small set of processors, each under appropriate data-processing terms:

AWS Cognito — authentication and account identity. AWS DynamoDB — primary application database (your household data). AWS S3 — file storage (avatars, receipts, forwarded mail). Amazon Bedrock — AI parsing of bills/receipts you forward. Brevo (Sendinblue) — sending our transactional and notification email (receives recipient email addresses). Amazon SES — receiving the bills you forward to your household mailbox and holding our sending-domain identity. Cloudflare Turnstile — bot protection on account sign-up. Google Analytics — marketing-site analytics (consent-gated). Cloudflare Web Analytics — cookieless, aggregate marketing-site traffic measurement (no cookies, no cross-site tracking). Sentry — error monitoring (configured without personal-data payloads).

5. International transfers

Our infrastructure is hosted in Amazon Web Services in the United States. Where personal data is transferred outside the European Economic Area, we rely on appropriate safeguards such as the EU Standard Contractual Clauses and, where applicable, the EU–US Data Privacy Framework.

6. Data retention

We keep personal data for as long as your account is active and as needed to provide the service. Diagnostic logs are kept for a limited period. When you delete your account, we remove or anonymize your personal data, except where we must retain limited information to meet legal obligations. See your rights below.

7. Your rights (GDPR)

If you're in the EU/EEA, you have the right to access, rectify, erase, restrict or object to processing, to data portability, and to withdraw consent at any time (without affecting prior processing).

You can edit most profile data directly in the app. For access/export and erasure, contact us via the contact page and we'll handle your request — during the beta these are processed manually, normally within 30 days. We'll verify your identity before acting.

You also have the right to lodge a complaint with your local supervisory authority — in Romania, the National Supervisory Authority for Personal Data Processing (ANSPDCP).

8. California privacy (CCPA/CPRA) — notice at collection

We collect the categories of personal information described in section 1 (identifiers, account and profile data, the household content you provide, and internet/security activity), for the business purposes described in section 2.

We do not sell your personal information and we do not “share” it for cross-context behavioral advertising. On the marketing site we use consent-gated Google Analytics and Cloudflare's cookieless, aggregate Web Analytics (which sets no cookies and does not track you across sites); neither is used for advertising.

California residents have the right to know, access, correct and delete their personal information, and to opt out of any sale/sharing. You can exercise the opt-out via the “Do Not Sell or Share My Personal Information” link in the footer, and we honor the Global Privacy Control (GPC) browser signal as a valid opt-out. We won't discriminate against you for exercising these rights.

9. Security

We protect your data with encryption in transit, scoped access controls, passkey/2FA support, and per-household data isolation. No system is perfectly secure, but security is a first-class part of how LiveHome HQ is built.

10. Children

LiveHome HQ isn't directed to children under 16, and we don't knowingly collect their personal data. Household members are added by adults responsible for the household.

11. Changes & contact

We'll update this policy as the product evolves, changing the date above and notifying signed-in members of material changes. For any privacy question or to exercise your rights, contact us via the contact page on this site.