HomeFlow Privacy Policy

Last updated: September 2026

HomeFlow is a private, shared home hub that helps households organize calendars, shared tasks, groceries, meal planning, recipes, and other household information in one place.

This Privacy Policy explains what information HomeFlow collects, how that information is used, when it may be shared with service providers, and the choices available to you.

HomeFlow is currently provided in early access by an individual developer and is not operated by a registered company.

Google account information

When you sign in with Google, HomeFlow receives information associated with your Google account, such as your name, email address, profile picture, and a unique Google account identifier used to recognize your account.

HomeFlow does not create or store a separate password for you.

Google Calendar information

If you choose to connect Google Calendar, HomeFlow accesses calendar information only from calendars you explicitly choose to share with a Home.

HomeFlow’s Google Calendar integration is read-only. HomeFlow does not create, edit, or delete events in your Google Calendar.

Information needed to maintain your authorized Google Calendar connection may also be stored securely so that you do not need to reconnect every time you use HomeFlow.

Household information

HomeFlow stores information that you or other household members add to a shared Home. Depending on the features you use, this may include:

• household events;
• tasks and task assignments;
• grocery items;
• meal plans;
• household settings;
• member display names and colors;
• household invitations; and
• information about which calendars members choose to share.

This information is intended to be shared among authorized members of the same Home.

Recipe information and preferences

HomeFlow may display recipes provided by third-party recipe sources.

Some personal recipe preferences, such as favorites, may be stored locally in your browser rather than in your HomeFlow account.

Location information

If you enable the weather feature, HomeFlow may receive geographic coordinates from your device or from a location you search for.

These coordinates are used to determine the weather location for your Home and may be stored with the household settings.

HomeFlow does not use this feature to continuously track your location or your movements.

You do not need to enable location access to use HomeFlow.

Preferences

HomeFlow may store preferences such as your language and personal appearance or color theme.

We use information collected through HomeFlow to provide and operate the features you choose to use. This includes:

• authenticating your account;
• displaying calendars you choose to share;
• allowing household members to coordinate tasks, groceries, events, and meals;
• managing household memberships and invitations;
• displaying weather for a location you select;
• displaying recipe content;
• maintaining your personal HomeFlow preferences;
• protecting HomeFlow against unauthorized access, abuse, and security threats; and
• maintaining and improving the reliability of the service.

We do not sell your personal information.

We do not use your HomeFlow household information for advertising.

HomeFlow is designed around shared household information.

Information such as tasks, grocery items, meal plans, household events, and other shared content may be visible to other authorized members of the same Home.

You should only add information that you are comfortable sharing with the people who belong to that Home.

Deleting your personal account or leaving a Home does not necessarily delete shared household content that remains part of a Home used by other members.

Where shared historical content needs to remain after an account is deleted, HomeFlow may retain that content without continuing to associate it with identifying personal account information.

HomeFlow uses technical safeguards intended to protect accounts and household information.

These include database row-level security designed to enforce household access controls at the database level rather than relying only on the user interface.

Google authentication credentials used to maintain authorized Calendar access are stored separately from ordinary application data, and sensitive refresh-token information is encrypted at rest.

Household invitation links are designed to be single-use and expire after a limited period. HomeFlow stores a secure hash of the invitation token rather than the raw invitation token itself.

HomeFlow also uses protections designed to reduce unauthorized requests and abuse, including origin checks and rate limits on certain actions.

No online service or storage system can guarantee absolute security.

HomeFlow relies on third-party services to operate certain features. These providers may process limited information when necessary to provide those services.

Google

Google provides account authentication and optional read-only Google Calendar access.

Your use of Google services is also subject to Google’s Privacy Policy.

Hosting and database infrastructure

HomeFlow uses third-party infrastructure providers to host the application and store application data.

These providers process information only as necessary to operate the infrastructure used by HomeFlow.

Open-Meteo

HomeFlow uses Open-Meteo to obtain weather information.

When you use the weather feature, geographic coordinates associated with your selected weather location may be sent to Open-Meteo so that a forecast can be returned.

TheMealDB

HomeFlow may query TheMealDB to display recipe information.

HomeFlow does not intentionally send your HomeFlow account information or household information to TheMealDB when requesting recipe content.

Resend

HomeFlow may use Resend to deliver household invitation emails.

If you choose to send an invitation by email, the recipient’s email address and information necessary to deliver the invitation are provided to Resend for that purpose.

You control several aspects of the information HomeFlow uses. You can:

• choose which Google calendars are shared with each Home;
• change your shared calendars at any time;
• revoke HomeFlow’s Google access through your Google Account permissions;
• choose whether to enable weather and location features;
• revoke unused household invitations when that option is available; and
• delete your HomeFlow account through your account settings.

You may also contact us regarding privacy or account questions using the address below.

You may delete your HomeFlow account through the account settings.

When your account is deleted, HomeFlow removes or disconnects personal account information and personal service connections associated with that account, including Google connections associated with the deleted account.

Because HomeFlow contains shared household information, deleting one person’s account does not necessarily delete content that belongs to a Home shared with other members.

If you are a member of a Home with other people, shared household content may remain available to those members after your account is deleted. Personal identifying information associated with your deleted account may be removed or anonymized where historical shared records need to remain.

If you own a Home that has other members, ownership may be transferred to another existing member so that deleting your account does not delete the shared Home.

If you are the only member of a Home, deleting your account may also permanently delete that Home and its household-scoped data.

Account deletion may be permanent and may not be reversible.

Certain limited information may also be retained when reasonably necessary for security, fraud prevention, legal compliance, dispute resolution, or enforcement of our agreements.

HomeFlow accounts are intended for adults.

You must be at least 18 years old to create a HomeFlow account.

Adults may use HomeFlow to organize household activities involving children, but children do not create or maintain HomeFlow accounts themselves.

HomeFlow does not knowingly collect personal information directly from children through child-owned accounts.

If you believe personal information from a child has been provided to HomeFlow inappropriately, contact us using the address below.

We may update this Privacy Policy as HomeFlow develops or its features change.

When we make changes, we will update the “Last updated” date at the top of this page.

If a change materially affects how we use personal information, we may provide additional notice where appropriate.

Contact

If you have questions about this Privacy Policy, your information, or account deletion, contact: