Privacy Policy

Effective September 16, 2026

Our Home is a personal budgeting app operated by an individual in Canada. It exists to help you see where your money goes. This policy explains what information the app holds about you, why, where it lives, and how to get it removed. It is written to comply with Canada's Personal Information Protection and Electronic Documents Act (PIPEDA).

What we collect

Everything below is information you give the app directly. Nothing is collected from third parties.

• Account details. Your email address and a password. The password is stored only as a salted hash by our authentication provider; we never see it in plain text.
• Transactions you upload.When you import a CSV export from your bank, the app keeps each row's date, description, amount, transaction type, the account and bank it came from, and the cardholder name printed on the statement, along with an internal fingerprint used to skip duplicates and the time the row was imported. The CSV file itself is parsed in your browser and is never uploaded or stored.
• Budgeting setup. Account names, categories, monthly budgets, savings goals, refund links between transactions, and preferences such as your payroll threshold.
• Household members.Any names you enter to attribute spending to people in your household. These are other people's personal information: please only add names of people who know you use this app.
• Technical data. Session cookies that keep you logged in, and standard request logs (IP address, browser type, requested page, timestamp) kept briefly by our hosting provider for security and debugging.

What we do not collect

• No analytics, advertising, or tracking scripts of any kind.
• No cookies other than the ones strictly required to keep you signed in.
• No connection to your bank. The app only reads files you choose to upload.
• No location data, contacts, or device identifiers.

Why we use it

Solely to provide the service to you: storing your transactions, computing budgets and spending summaries, and keeping your account secure. We do not sell, rent, or share your information with anyone for marketing, and we do not use it to build profiles or train models.

Where it is stored and who processes it

Two service providers handle your data on our behalf, under their own security and privacy commitments:

• Supabase hosts the database and the authentication system that stores your email, hashed password, and everything you enter in the app.
• Vercel hosts the application itself and keeps the short-lived request logs described above.

These providers may store or process data on servers outside Canada, including in the United States. While there, it is subject to the laws of that country and may be accessible to its authorities under those laws.

How long we keep it

Your information is kept for as long as your account exists. When you ask us to delete your account, we remove your data from the live database within 30 days. Encrypted backups held by our providers expire on their own schedule afterwards. Request logs are retained by the hosting provider for a short period, typically days, and then discarded.

Security

All traffic is encrypted in transit. Every table in the database enforces row-level security so that one account can never read another's rows. Passwords are hashed and never stored in plain text. No system is perfectly secure, and you should use a strong, unique password for this app.

Your rights

Under PIPEDA you may, at any time:

• Ask what personal information we hold about you and receive a copy.
• Ask us to correct anything that is inaccurate.
• Withdraw your consent and have your account and all of its data deleted.
• Complain to the Office of the Privacy Commissioner of Canada if you believe we have not handled your information properly.

To exercise any of these, email us at the address below from the email associated with your account. Until a self-serve delete button exists in the app, deletion is handled by request and confirmed by email.

Children

Our Home is not directed at anyone under 18. If we learn that an account belongs to a minor, we will delete it.

Changes to this policy

If this policy changes, the new version will be posted here with an updated effective date. Material changes will also be announced on the login page.

Contact

Questions or requests: contact@ourhome.example. See also the Terms of Use.