Privacy Policy

This policy covers Annual Home Record at annualhomerecord.com and the app you sign in to.

The legal name and mailing address of the business that operates Annual Home Record are not published here yet. They will be added to this page before anyone can be charged for the service.

Everything below comes from you, or from your use of the service.

• Your sign-in. Your email address, and either a password you choose or the fact that you signed in with Google. We never see your Google password.
• Your home. The address, the kind of home it is, and whether it has a garage. You type this in yourself.
• What you add. Photos, papers (such as a PDF invoice), dates, amounts, business names, and anything you write in your own words.
• What we work out from a paper or photo. When you upload one, we try to read a date, a short title, a business name and an amount from it, and we show you the result as a suggestion. See “Reading your papers and photos” below.
• Who you invite. The email address of a person you invite to help with your home record, or to take it over.
• Payment state. Whether a home is paid for and the date it is paid through. We never receive or store your card number.
• Operating counts. Per home and per month, we count how many bytes are stored, how many papers were read, and how many copies were made. These are numbers only. They contain no file, no name and no text.

We do not collect your location. Photos taken on a phone often carry hidden location data; that data is stripped in your own browser before the photo is ever sent to us.

To run the service you asked for: to keep your home’s record, to show it back to you, to suggest what a paper is, to let people you invite help, to make a copy when you ask for one, and to know whether a home is paid for. We do not use it for advertising, we do not sell it, and we do not share it with anyone for their own purposes.

When you add a photo or a paper, the file itself is sent to an AI service so it can be read. This is worth being clear about, because it means a document you upload leaves our systems.

• What is sent is one file at a time, and nothing else. No account, no email address, no home address, no other record. For a paper, the file name is included.
• It is sent to the Lovable AI Gateway, which passes it to a Google Gemini model. Google’s published terms for its paid API say that content sent on the paid tier is not used to train its models. We have not independently audited how long the gateway or the model provider keeps a copy while processing, so we do not make a promise about that here.
• What comes back is a suggestion, not a fact. It becomes part of your home’s record only when you confirm it. If the reading is uncertain, we do not show you anything at all.
• A file is read once, when you add it. There is no background re-reading and no other automated processing of your record.

These are the only third parties that touch your information. Each one handles it to provide the service to you, not for their own purposes.

• Supabase — sign-in, the database, and private file storage. It holds everything you add.
• Lovable — hosting for the site and app, and the AI gateway described above.
• Google (Gemini model, via that gateway) — reads a single uploaded photo or paper.
• Paddle — payments. Paddle is the seller of record for the charge. When you pay, we send Paddle your email address and an identifier for the home being paid for. Your card details go to Paddle, never to us.

We do not use an advertising network, an analytics vendor, or a data broker.

Your photos and papers are stored in private storage. They are never public and never have a shareable public link; when you open one, the app creates a link that works only for you and only for a short time. Access to a home’s record is enforced by the database itself, not only by the app.

We use technical and organisational measures designed to protect your information. We cannot promise perfect security, and no honest online service can.

We keep what you add for as long as you keep the home in Annual Home Record, including if you stop paying. Not paying never deletes anything.

• When you remove one item, its entry leaves your home history and the stored file is destroyed immediately.
• When you delete a home, its records, its reviews and every stored file for that home are destroyed.
• When you close your account, your sign-in is deleted. A home that another person still belongs to keeps its record — you simply no longer reach it. Delete the home first if you want it gone.
• Our database provider keeps its own backups. We have not published a retention window for those, so we do not state one here.
• Payment records held by Paddle are kept by Paddle under its own policy, because it is the seller of record and has tax obligations.

• Take a copy. “Get a copy of my Home Record” builds a readable copy you can print or save, and a data file of the same content. It is made when you ask and is not stored anywhere afterwards.
• Correct something. Any entry can be corrected, and the earlier version is kept as part of the record.
• Remove one thing. On the entry itself.
• Delete a home, or your account. Both are in “Looking after this home”, and both are permanent.

We offer these to everyone, everywhere, because they are the right thing for a record you own — not because a particular law requires them of a service this small.

You can invite someone to help with your home record. A helper can see and add to that home’s record. A helper cannot see who else you invited, cannot invite or remove anyone, cannot transfer the home and cannot delete it. You can take a helper’s access away at any time; things they already added stay in the record. Invite only people you would show your house papers to.

If you sell or hand on the home, you can transfer its record to the new owner. You start it, and it only happens when the person you named accepts. After that they control the record, including everything already in it — photos, papers, amounts and businesses. Read through what is in the record before you transfer it, and remove anything you do not want to hand over. This moves a record inside Annual Home Record. It is not a transfer of legal ownership of the property.

We send account emails only: confirming your address, resetting your password, and messages about your account or payment. We do not send marketing email. Receipts for a payment come from Paddle.

We use no analytics, no advertising and no cross-site tracking. The only things stored in your browser are what is needed to keep you signed in and to remember where you were going after signing in. Because we do not track you across other websites, a “Do Not Track” signal changes nothing about what we do. There is no cookie banner because there is nothing to consent to.

Annual Home Record is for adults looking after a home. It is not intended for anyone under 18, and it is not directed at children. We do not knowingly collect information from a child. We do not ask for or verify your age.

Some US states give residents rights to see, correct, take a copy of or delete their personal information. Those laws apply to companies above a size that Annual Home Record is far below, so most of them do not apply to us today. We give you the same abilities anyway, built into the product: a copy, a correction, a removal, and deletion. If that ever changes, this page changes with it.

We have not published a contact address yet. It will be on this page and on the Support page before anyone can be charged for the service.

If we change something that matters, we will update the date at the top of this page and, for a material change, tell you by email at the address on your account. There is no automatic notification beyond that.