Privacy Policy

We collect the following categories of information:

• Account information. When you create an account we collect your name, email address, and a password (or, if you sign in with Google, a unique identifier and the basic profile information Google provides — see “Signing in with Google” below).
• Property and financial data. Information you enter or upload about your properties, renovations, expenses, loans, and rental income, including invoices, receipts, and statements.
• Connected-service data. If you connect a third-party service such as Xero, we access and store the data you authorise (for example, accounting categories and exported expenses).
• Technical data. Log data, device and browser information, and cookies necessary to keep you signed in and to operate the Service.

If you choose to sign in with Google, we receive your name, email address, and Google account identifier through Google’s OAuth service. We use this information solely to create and authenticate your Home Base account. If you already have a Home Base account with the same verified email address, your Google sign-in is linked to that existing account so you can use either method. We do not receive your Google password, and our use of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.

• To provide, maintain, and improve the Service;
• To authenticate you and keep your account secure;
• To process and classify your expenses and invoices, including using artificial-intelligence services to extract data from documents and suggest tax classifications against Australian Taxation Office (ATO) guidance;
• To send you transactional messages such as invitations and password resets;
• To comply with our legal obligations.

Home Base uses third-party AI providers (including Anthropic and OpenAI) to read uploaded documents, generate embeddings, and classify expenses. Document content is transmitted to these providers only to perform these functions. We do not permit your content to be used to train third-party models, and AI outputs are suggestions that you remain responsible for reviewing.

Your data is stored using Supabase (Postgres database and object storage) and is protected by row-level security so that you can only access your own data and data shared with you. We use industry-standard measures to protect personal information, but no method of transmission or storage is completely secure.

We do not sell your personal information. We share information only with:

• Service providers who help us operate the Service (such as Supabase, Anthropic, OpenAI, Resend for email, and Xero where you connect it), bound by their own obligations;
• Other users you explicitly share a property or account with through the Service’s sharing features;
• Authorities or third parties where required by law or to protect our rights.

You may access, correct, or update your information from within the app. You can delete your account at any time from Settings, which removes your account and associated data as described in the Service. You may also disconnect Google sign-in or any connected service. To make a privacy request or complaint, contact us at the address below.

We retain your information for as long as your account is active or as needed to provide the Service. When you delete your account, we delete or de-identify your personal information except where we are required to retain it to meet legal obligations.

We may update this Privacy Policy from time to time. We will post the updated version on this page and revise the “Last updated” date above. Material changes will be communicated where appropriate.

If you have questions about this Privacy Policy or how we handle your information, contact us at raulfelixcarrizo@gmail.com.