HomeBaseAI Privacy Policy

1. Overview

HomeBaseAI ("the App") is a privacy-first home inventory and maintenance coaching app for iPhone. It helps you catalog appliances, fixtures, materials, and systems through a conversational AI interface. Optional Pro features add proactive maintenance scheduling, home health scoring, seasonal prep checklists, and widgets.

HomeBaseAI operates entirely on your device. We do not operate servers, databases, or cloud services. We do not create user accounts. We have no mechanism to collect, receive, view, or store your personal data.

2. Home Data

HomeBaseAI stores the following types of data, all entered by you:

• Home profiles: Home name, type, address, rooms
• Items: Appliances, fixtures, systems, furniture, electronics — including brand, model number, serial number, purchase date, warranty expiration
• Materials: Paint colors, tile, flooring, countertops — including color codes, finishes, purchase locations
• Maintenance tasks: Scheduled maintenance with intervals, completion history, and cost-of-neglect estimates
• Service records: Provider, date, cost, and description of professional services
• Photos: Item and material photos you choose to capture or import
• Part numbers: Replacement part numbers and purchase URLs

All data is entered by you through conversation, camera scanning, or voice input. HomeBaseAI does not access your photo library, contacts, or location without your explicit action.

3. AI Processing

What data is sent to the AI

When you send a message in the conversation, the following is transmitted to OpenAI's API:

• Your conversation message (text you type or speak)
• Text recognized from scanned labels (OCR output), if you used the camera
• Relevant items from your home inventory (only items matching your query — not your entire inventory)
• Your home name, type, and room list for context
• Recent conversation history (last 10 messages, summarized)

What is NOT sent

• Your full home inventory (only relevant items are included)
• Photos or image data (only OCR-extracted text)
• Your Apple ID, device ID, or any personal identifiers
• Your address or location

How it is processed

Messages are sent via HTTPS to OpenAI's API (api.openai.com). OpenAI processes the request using GPT-4o-mini and returns a structured response. Per OpenAI's API data usage policy, API inputs and outputs are not used to train their models and are retained for up to 30 days for abuse monitoring, then deleted.

What AI is used for

• Conversational intent classification: Understanding what you want to save, query, update, or ask about.
• Data extraction: Pulling structured fields (brand, model, serial) from natural language or OCR text.
• Maintenance coaching: Providing personalized advice based on your inventory.

On-device processing (no data transmitted)

• OCR text recognition: Reading text from photos of product labels using Apple's Vision framework (on-device).
• Speech recognition: Converting voice input to text using Apple's on-device Speech framework.
• Maintenance scheduling: Template matching and task creation happen entirely on-device.
• Home health scoring: Calculated locally from your maintenance data.

When AI is active

AI features require an active subscription and an internet connection. Without internet, the app provides basic keyword-based search of your inventory. Your vault data is always accessible offline.

4. Subscriptions & Purchases

HomeBaseAI requires a subscription ($5.99/month or $49.99/year) after a 7-day free trial. Subscriptions are processed entirely through Apple's App Store and StoreKit framework.

• We do not collect payment information. Apple handles all billing.
• Subscription status is checked on-device via StoreKit's cached entitlements — no server verification.
• We have no visibility into your Apple ID, payment method, or transaction history.
• You can manage or cancel your subscription through iOS Settings > your Apple ID > Subscriptions.

5. iCloud & Family Sharing

HomeBaseAI offers optional family sharing so household members can view and update the same home records.

• Sharing uses Apple's CloudKit (CKShare) framework. Data syncs through your personal iCloud account, not through our servers.
• You control who has access. Only people you explicitly invite can see your home data.
• Shared data is encrypted in transit and at rest by Apple's iCloud infrastructure.
• We have no access to your iCloud data.
• User preferences are stored privately and never shared.

Family sharing is entirely optional. HomeBaseAI works fully as a single-user app without iCloud.

6. Data Storage

Data is stored using Apple's Core Data framework, protected by:

• iOS Data Protection (encrypted at rest, tied to your device passcode)
• App sandboxing (only HomeBaseAI can access its own data)
• Standard iOS security architecture

HomeBaseAI does not use:

• Third-party analytics SDKs (no Firebase, no Mixpanel, no Amplitude, no RevenueCat)
• Advertising SDKs or ad networks
• Third-party crash reporting or telemetry services
• Any form of user tracking or fingerprinting

For paywall flow diagnostics — understanding which paywall surfaces users see and how the StoreKit purchase flow performs — HomeBaseAI emits Apple-native OSLog Logger, OSSignposter, and MetricKit mxSignpost events under the studios.kynoss.homebase subsystem. These signposts stay on your device unless you have opted into Apple's system-wide diagnostics sharing in iOS Settings — in which case Apple receives them, never us. The Apple Privacy Nutrition Label "Usage Data: Not Collected" remains accurate under Apple's classifier.

7. Data Retention & Deletion

• Delete the app: Deleting HomeBaseAI permanently removes all local data. No data exists anywhere else (unless you enabled family sharing, in which case shared records remain in iCloud for other family members).
• In-app management: You can delete individual items, rooms, homes, or records at any time within the app.
• There is no server-side data to delete, no account to close, and no request process needed.

8. Data Sharing & Third Parties

• OpenAI: Conversation messages and relevant inventory context are sent to OpenAI's API for processing. OpenAI does not use API data for model training. Data is retained up to 30 days for abuse monitoring, then deleted. See OpenAI's API Data Usage Policy.
• We do not sell your data.
• We do not serve advertisements.
• We do not use third-party analytics, tracking, or advertising SDKs.
• We do not engage in data mining or profiling.
• Your vault data (items, materials, tasks) is stored only on your device and in your private iCloud.

9. Data Security

• Encryption at rest: All local data is protected by iOS Data Protection.
• App sandboxing: iOS prevents other apps from accessing HomeBaseAI's data.
• No network exposure: No personal data is transmitted over any network (CloudKit sync is encrypted end-to-end by Apple).
• No accounts: No credentials to steal, no passwords to breach.

10. Children's Privacy (COPPA)

HomeBaseAI is not directed at children under 13. We do not knowingly collect personal information from children. Because HomeBaseAI does not collect or transmit any data to any server, it does not create the data collection risks COPPA addresses.

If you are a parent or guardian with concerns, contact us at kynossstudios@gmail.com.

11. Your Rights Under GDPR

If you are in the European Economic Area, the GDPR provides you with specific rights. Because your data never reaches us, you have full control:

• Access: All data is on your device and accessible within the app.
• Rectification: Edit any record within the app.
• Erasure: Delete individual records or the entire app.
• Restrict processing: Disable family sharing or AI features at any time.
• Portability: Your data is stored locally on your device.
• Object: Stop all processing by deleting the app.

No cross-border data transfers occur because no data is transmitted to any server.

12. Your Rights Under CCPA/CPRA

If you are a California resident:

• Right to know: This policy describes all data the app processes.
• Right to delete: Delete the app or individual records.
• Right to opt out of sale: We do not sell your personal information. Never have, never will.
• Right to non-discrimination: We will not discriminate against you for exercising privacy rights.

13. Apple Platform Disclosures

App Privacy Nutrition Label

HomeBaseAI's App Store privacy label reflects that conversation messages are sent to OpenAI for AI processing. This data is not linked to your identity and is not used for tracking.

CloudKit

If you enable family sharing, data syncs through Apple's CloudKit under your iCloud account. This is governed by Apple's Privacy Policy.

StoreKit

Subscription purchases are handled by Apple's StoreKit framework. Purchase transactions and billing are managed entirely by Apple.

App Tracking Transparency

HomeBaseAI does not track users. The App Tracking Transparency framework is not used because no tracking occurs.

14. Changes to This Policy

We may update this policy to reflect changes in functionality or legal requirements. The effective date will be revised. Continued use constitutes acceptance.

15. Contact Us

For privacy questions or concerns:

• Email: kynossstudios@gmail.com
• Support: HomeBaseAI Support

We will respond to privacy inquiries within 30 days.