Privacy Policy

HomeBasisLedger holds records about your home and what you have spent on it. That is personal financial information, and this page sets out plainly what we collect, what we do with it, and what we will never do with it.

What we collect

Only what the app needs to do its job:

• Your account. Your email address. If you sign in with Google instead of a password, Google tells us your email address and basic profile information — we request nothing beyond that, and we never see your Google password.
• Your password, if you use one. It is handled and stored in hashed form by our authentication provider. We cannot see it, and neither can anyone else.
• Your name, and a phone number if you give one. Your name is used to address you — in the app and at the top of the emails we send, so a reminder reads like it came from a person rather than a system. A phone number is entirely optional and is only ever used to reach you about your own account. Neither is needed to sign up, and you can change or clear both at any time in your account.
• Your homes. The address, purchase price, and purchase date you enter.
• Your improvements. The description, cost, date, and category of each item you record.
• Your receipts. Any file you choose to upload and attach to an improvement.

We do not ask for your date of birth or your Social Security number, and we do not ask for bank or card details — payments are handled entirely by Stripe, and your card never reaches us.

What we do not do

• We do not sell your information. Not to anyone, for any price.
• We do not advertise against it. There is no advertising in HomeBasisLedger, and your records are not used to target any.
• We do not track you. The app runs no analytics, no tracking pixels, and no third-party advertising scripts. The only cookies we set are the ones that keep you signed in.
• We do not read your receipts for any other purpose. They exist to be handed back to you.

How your information is protected

Access rules are enforced by the database itself, not merely by the interface. Every home, improvement, and receipt is tied to the account that created it, and a request carrying anyone else’s session cannot read it — a bug in a page cannot expose another person’s records, because the database refuses the query.

Receipts are kept in private storage. They are not published at a public address and cannot be guessed at. When you view one, we generate a link that works only for you and expires after about an hour.

No system is perfect, and we will not pretend otherwise. If we ever learn of a breach affecting your information, we will tell you.

Who else touches your information

We use a small number of service providers to run the app. They process information on our behalf, under their own security obligations, and are not permitted to use it for their own purposes:

• Supabase — hosts the database, the sign-in system, and receipt storage.
• Vercel — hosts and serves the application, and keeps standard server logs.
• Our email provider— delivers the transactional emails we send, such as confirming your address or resetting your password. Links in those emails pass through the provider’s delivery tracking.
• Google — only if you choose to sign in with Google, and only to verify that the account is yours.

We may also disclose information if the law genuinely requires it. If that ever happens and we are permitted to tell you, we will.

Keeping and deleting your information

We keep your records for as long as your account exists, because the entire point is a record that survives the years between buying a home and selling it.

Delete a home and its improvements go with it. Ask us to delete your account and everything attached to it is removed, including your receipts. Backups may lag briefly behind, but they age out.

Your rights

Whatever jurisdiction you are in, we will honor these for anyone who asks: you can see what we hold about you, correct it, get a copy of it, or have it deleted. Most of it you can do yourself inside the app; for the rest, email us and we will do it. We will not charge you and we will not make it difficult.

Children

HomeBasisLedger is for homeowners and is not intended for children. We do not knowingly collect information from anyone under 18.

Changes to this policy

If we change what we collect or who we share it with, we will update this page and change the date at the top. If a change is significant — and anything that widened who could see your records certainly would be — we will tell you rather than quietly editing this page.

Contact

Questions, requests, or complaints: info@homebasisledger.com.