Privacy Policy

Last Updated: August 13, 2025

1. Information We Collect

1.1 Account Information

When you create a Staymates account, we collect:

• Email address - for account creation and communication
• Full name - to identify you to your housemates
• Password - securely hashed and stored by our authentication provider
• Profile picture - optional avatar images you upload

1.2 Google OAuth (Optional)

If you sign up using Google OAuth, we receive:

• Your Google email address
• Your Google display name
• Your Google profile picture (if you choose to use it)

We do not access any other Google services or data beyond basic profile information.

1.3 Household & Collaboration Data

To provide our core functionality, we collect and store:

• House information - house names, invite codes, and membership details
• Financial data - bills, amounts, payment splits, and settlement transactions
• Shared lists - grocery lists, to-do items, and collaborative content
• Calendar events - shared household events and scheduling information
• Chores and tasks - household task assignments and completion tracking
• Activity logs - user actions within the app for collaboration context

1.4 Preferences & Settings

We store your app preferences including:

• Notification settings for bills, chores, and events
• App display preferences
• Settlement reminder preferences

1.5 Technical Information

We automatically collect minimal technical data:

• Internet connectivity status (for offline functionality)
• App usage timestamps (for data synchronization)
• Error logs (for app improvement and debugging)

2. How We Use Your Information

2.1 Core App Functionality

• Manage your household memberships and roles
• Process and track bill splits and payments
• Coordinate shared lists, calendars, and chores
• Enable real-time collaboration between housemates
• Send notifications about bills, settlements, and activities

2.2 Communication

• Send settlement reminders and payment notifications
• Notify you about shared household activities
• Provide account-related updates when necessary

2.3 Service Improvement

• Analyze usage patterns to improve app performance
• Debug technical issues and enhance user experience
• Ensure data synchronization across your devices

3. Information Sharing & Access

3.1 Within Your Household

Your information is shared with other members of houses you join:

• Your profile name and picture
• Bills, lists, and activities you create or participate in
• Your contributions to shared household data

3.2 No Third-Party Selling

We do not sell, rent, or trade your personal information to any third parties.

3.3 Service Providers

We use trusted service providers to operate our app:

• Supabase - Our backend infrastructure provider that handles authentication, database, and file storage
• Google OAuth - For optional Google sign-in functionality

4. Data Storage & Security

4.1 Data Storage

• Remote Storage: Your data is securely stored in Supabase's cloud infrastructure
• Local Caching: Some data is temporarily cached on your device for offline functionality
• Geographic Location: Data is processed and stored in Supabase's global infrastructure

4.2 Security Measures

• Encryption: All data is encrypted in transit using HTTPS connections
• Authentication: Secure JWT-based authentication with optional two-factor authentication
• Access Control: Row Level Security (RLS) ensures you can only access your own household data
• Infrastructure: We rely on Supabase's enterprise-grade security infrastructure

4.3 Data Retention

• Account Data: Retained while your account is active
• Activity Logs: Automatically deleted after 90 days
• Financial Records: Retained for audit and settlement purposes
• Cache Data: Expires automatically within 6-24 hours

5. Your Rights & Controls

5.1 Account Access

• View and edit your profile information
• Update notification preferences
• Manage your household memberships
• Control your shared data contributions

5.2 Data Control

• Modify: Edit bills, lists, and events you created
• Delete: Remove your own contributions (subject to settlement rules)
• Leave Houses: Exit household groups at any time

5.3 Account Deletion

To delete your account and associated data, please contact us at the email below. We will:

• Remove your profile and personal information
• Anonymize your contributions to shared household data
• Retain necessary financial records for audit purposes

6. Cookies & Tracking

Staymates does not use cookies or third-party tracking technologies. We use minimal local storage for:

• Authentication session management
• App preferences and settings
• Offline functionality and data caching

7. Children's Privacy

Staymates is not intended for use by individuals under the age of 18. We do not knowingly collect personal information from children under 18. If we become aware that we have collected personal information from a child under 18, we will take steps to delete such information.

8. International Data Transfers

Your data may be processed and stored in countries other than your own through our service provider Supabase's global infrastructure. We ensure that all international data transfers comply with applicable data protection laws and are protected by appropriate safeguards.

9. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. When we make changes:

• We will update the "Last Updated" date at the top of this policy
• For significant changes, we will notify you via email or in-app notification
• Your continued use of the app after changes constitutes acceptance of the updated policy

10. Legal Compliance

We may disclose your information if required by law, regulation, legal process, or governmental request, or if we believe in good faith that disclosure is necessary to protect our rights, your safety, or the safety of others.

11. Data Protection Rights

Depending on your location, you may have additional rights regarding your personal information, including:

• Access: Request a copy of your personal data
• Rectification: Correct inaccurate personal data
• Erasure: Request deletion of your personal data
• Portability: Receive your data in a machine-readable format
• Objection: Object to processing of your personal data