Your information.
Handled with care.

Private storage and device copies

Shared household photos are stored in private Supabase file storage. Only signed-in members of that household can retrieve them through HabiTally. We keep temporary copies on your device to reduce repeat downloads, up to 50 MB. Clear these in Household, or log out to clear this app’s photo cache. Browsers can also remove cached files when storage is low.

Your shared inventory still needs an internet connection. A partner downloads their own cached copies from private storage; the phones do not need to be online together. Original inventory snapshots are retained privately during this migration for recovery. Full JSON exports include your photos; CSV exports do not.

Optional voice entry

Voice entry starts when you choose Speak or enable guided listening. Your browser or operating system may send audio to its speech-recognition provider under that provider’s terms. HabiTally does not record or store audio files. Confirmed item details are stored like typed entries. Type instead at any step; closing the voice screen stops listening.

What we store and why

When you create an account, our authentication provider processes your email and password to manage login. HabiTally does not save your password in the app. A saved session keeps you logged in on a trusted device.

Your shared household record can include item names, photos, quantities, dates, storage locations, floor diagrams and shopping lists. Your stats also keep up to 2,000 recent inventory activity entries (including item names, quantity changes and timestamps) and 366 daily organizing summaries. These stay within your household and are not sent to an external analytics service. Removing an item does not remove its name from earlier activity. We store it to let you and your household use and update your inventory. This release supports inventory photos and diagrams; it does not currently have a separate profile-photo feature.

Local mode keeps inventory in this browser’s storage. Shared mode stores the household with Supabase. Cloudflare serves the site and app. These providers process data as needed to deliver, store and secure the service. This is hosted storage, not end-to-end encryption.

Who can see your information

Your inventory is not a public gallery. People you invite into your household can view and edit shared inventory, including photos and diagrams. The owner can manage membership. Someone who has already viewed or exported a copy may still have that copy after removal.

Authorized service administration and our infrastructure providers may need access to operate, support or secure the service, or meet legal requirements. We limit the product’s data access through household membership checks. No online service can promise zero risk.

Photo text recognition is your choice

The optional label reader downloads its software from our own site and runs on your device. Reading a label does not upload your photo. If you later save that photo to a shared household, it is stored there like any other item photo. Typed names and sizes are protected from replacement. You review suggestions before saving.

The reader uses an existing recognition model locally; your photo is not used to train it. It may make mistakes, particularly with curved labels, glare or small text.

Optional personal assistant connections

If you choose to connect an AI assistant, it may search item names, categories, quantities and storage locations and add new items to your shared household. This includes records created by other household members. Photos, notes and account details are excluded from this connection. Information returned to your chosen provider follows its policies and your account settings; we cannot promise that provider will not use it for model improvement. Access requires your explicit approval, renews automatically for new connections until revoked in Household or household access ends; security checks may require reconnection. Disconnecting does not erase information already received by the provider.

If you take or attach a photo directly in ChatGPT or another assistant, that provider receives the image under its own terms and data controls. HabiTally does not receive those images through MCP; only approved text inventory details are saved. Review room photos for faces, documents and other private content before sharing. Disconnecting HabiTally does not delete chats or images held by the assistant provider.

Optional low-stock notifications

If you enable notifications, Supabase stores your device’s push subscription for your account. Encrypted notification messages travel through your browser or operating system’s push provider, such as Apple, Google or Mozilla. We send a generic stock reminder without item names, photos or locations. Enable notifications separately on each device and turn them off in Household or device settings. Logging out unsubscribes the current browser where supported. Delivery depends on your connection and notification settings.

External searches and your choices

When you choose Search Google, a new tab opens and Google receives the query you submit, including any location you type. Item photos and home diagrams are not included. Integrated provider searches are currently paused.

We do not include advertising trackers or marketing analytics in this release. Hosting and authentication services can keep operational records such as IP addresses, requests and security logs.

Keep control of your records

You can edit or delete items, remove photos, manage household membership, export CSV or full JSON backups, and log out on your device. Backups contain private information, so keep them somewhere appropriate. Deleting an active record does not erase copies previously exported by household members or instantly remove provider backup copies.

Browser storage can be cleared by your browser or device. Keep a backup of local-only inventory. Account-wide deletion is not yet self-service in this testing release. Contact the person who invited you to the pilot for help contacting Jorge McGregor or Jennifer Moffat about an account or privacy request.