Privacy Policy

1. Overview

We built Homy around a simple promise: your data helps reunite you with your pet, and nothing more. We don't sell your personal information, and you control what a finder sees when they scan your tag.

2. Information we collect

Account information. Name, email address, phone number, and password (stored hashed, never in plain text) when you create a Homy account.

Pet profile information. Your pet's name, species, breed, age, weight, description, and photos, and, if you use a plan that includes them, health records you choose to add (for example vaccinations, medications, or vet-visit notes).

Order & delivery information. Shipping address, city, phone number, and order details when you buy a tag. Orders are paid by cash on delivery, so we do not collect or store card numbers.

Scan & location information. When someone scans your tag, we record the date and time and, if the finder allows it in their browser, their GPS location (with the street, city and country it corresponds to), plus their IP address and browser type, so we can notify you and show you where the scan happened. The precise location, street, IP address and browser details are deleted after 90 days; the date, city and country are kept. If you use the lost pet alert network, we also collect the location you provide for the alert and any sighting reports submitted by other users.

AI assistant conversations. If your plan includes the AI pet assistant, we store the messages you send and receive so you can view your chat history.

Communications. Messages you send us, for example support emails.

Usage information. Basic, privacy-friendly analytics about how the website is used (see Section 11).

3. How we use your information

• To create and manage your account and process your orders;
• To operate the tag: showing a finder your chosen contact details and sending you scan and alert notifications;
• To provide plan features you've chosen, such as health records, the AI pet assistant, and the lost pet alert network;
• To communicate with you about your account, orders, or support requests, and, only if you've opted in, product updates;
• To keep the Service secure and prevent abuse or fraud;
• To understand and improve how Homy is used.

4. What a finder sees when they scan your tag

You control which contact details are visible to someone who scans your pet's tag — your name, email, and phone number can each be shown or hidden from your dashboard. A finder never sees your address, your pet's health records, or any other account information — only the contact fields you've chosen to display and any custom message you've set.

5. How we share information

We do not sell your personal information. We share data only with service providers who help us run Homy, under agreements that limit them to using it for that purpose:

• Cloud hosting, database and file storage (Vercel, our managed database provider, and Amazon Web Services in Paris), to run the website and store pet photos;
• Email delivery (Google's Gmail service), to send account, order, and scan-alert emails;
• Our AI provider (OpenAI), to generate responses in the AI pet assistant and read vet documents you choose to scan (only for accounts on a plan that uses it, and only what you send it);
• Delivery partners, to ship and deliver cash-on-delivery orders within Tunisia;
• BigDataCloud and OpenStreetMap (Nominatim), which turn coordinates into a place name, directly from your browser (a finder's scan location, or the location you set for an alert or your home);
• Upstash, which briefly stores IP addresses and email addresses (for up to an hour) to block repeated sign-in attempts and spam;
• Sentry (data stored in the EU), which records technical error reports so we can fix problems. We configure it not to send IP addresses, form contents, passwords, emails or other account details; when an error happens it may keep a short replay of the page with all text and images hidden.

We may also disclose information if required by law, to protect the rights and safety of Homy, our users, or the public, or as part of a merger, acquisition, or sale of assets — in which case we'll let you know.

6. Data retention

We keep your account and pet data for as long as your account is active. When you delete your account (see Section 8), it is erased right away, together with your pets, tags, health records, orders, alerts and photos. A finder's precise location, street, IP address and browser details on a scan are deleted after 90 days. Expired sign-in sessions and password-reset codes are deleted automatically.

7. Security

We use encryption in transit (HTTPS) and at rest, and store passwords using one-way hashing — we never see or store your password in plain text. We limit access to personal data to people who need it to run the Service. No system is perfectly secure, so we can't guarantee absolute security, but we work to protect your data and will notify you as required by law if a breach affects you.

8. Your rights & choices

Depending on where you live, you may have the right to access, correct, export, or delete your personal data, to object to or restrict certain processing, and to withdraw consent where we rely on it. You can:

• Update your account, contact-visibility, and pet information at any time from your dashboard;
• Turn off scan/alert emails from your account settings;
• Download a copy of your data, or delete your account, at any time from your dashboard (Privacy → Your data). You can also email homy.care.app@gmail.com; we'll verify your identity first.

In Tunisia, you can also contact the national personal data protection authority (INPDP). If you're in the European Economic Area, the UK, or Switzerland, you have the right to lodge a complaint with your local data protection authority.

9. Children’s privacy

Homy accounts are for adults (18+ or the age of majority where you live) managing their own pets. We do not knowingly collect personal data from children. If you believe a child has provided us personal data, contact us at homy.care.app@gmail.com and we'll remove it.

10. International data transfers

Homy is based in Tunisia, and some of the service providers we rely on (Section 5) may process data in other countries. Where we transfer personal data internationally, we take steps to keep it protected consistent with this Policy, such as relying on providers with appropriate contractual and security safeguards.

11. Cookies & analytics

Homy does not use cookies to keep you signed in: your sign-in token is stored in your browser's local storage and removed when you sign out. We use Vercel Analytics for basic, aggregate website analytics; it is designed to avoid tracking you individually across sites and does not use persistent cross-site advertising cookies. We do not currently run third-party advertising trackers or pixels on Homy.

12. Changes to this policy

We may update this Privacy Policy as the Service evolves. If we make material changes, we'll update the "Last updated" date above and, where appropriate, notify you by email or through the Service.

13. Contact us

Questions about this Policy or your data? Reach us at homy.care.app@gmail.com.