Homedrawer is operated by Ryan Murrell, a sole proprietor in Alberta, Canada, carrying on business under the registered trade name FNDRY39 WEB DESIGN (Alberta trade name registration TN27072784) (“FNDRY39”, “we”). Our mailing address is PO Box 117, Sunnybrook, Alberta T0C 2M0. This policy explains what we collect when you use Homedrawer — the website and the iPhone app — why, who sees it, how long we keep it, and the rights you have. We wrote it to be read. Questions: privacy@homedrawer.com.
1. What we collect
Account data
Your email address; your first and last name and a display name; a profile picture if you add one; a password (stored only as a hash by our authentication provider) or passkeys; the Google or Apple sign-ins you link — with the name, email address and, from Google, the picture they share when you choose to (with Apple, the email can be a private relay address that forwards to your own); your time zone, units and currency; your reminder, summary and notification choices; and whether you have dismissed an optional prompt such as the setup checklist. For each browser or phone where you turn on push notifications, we keep its push address and the browser’s type. Our authentication provider records the IP address and browser of each sign-in session.
A profile picture you upload is stored so that anyone with its web address can open it, which is how it shows for the people you share a home with; a picture from Google is shown from Google’s own servers.
Household data you enter
Home and room names, an optional address, the items you record (names, brands, model and serial numbers, purchase dates and prices, who owns them, locations, links, notes, favourite stores), archived items, warranties, your home’s and a vehicle’s insurance (the insurer, what it covers, what you pay and when it renews, and which of your things the home’s policy covers), a vehicle’s registration (its plate, where and when it was registered and when it expires), a vehicle’s odometer or hour readings, maintenance schedules and who did them, chores and who they are for, parts, and the documents you upload (receipts, manuals, warranty documents, service records, photos). It can include details about other people: the people you invite, a first name you give a chore or an item’s owner — which can be someone without an account, such as a child — and the email address of anyone you block from joining a home you are in, a list only you can see. Enter other people’s details only if you have their permission.
Your household’s email address
Your household can have an email address of its own. An email sent to it is received in Amazon’s Canadian region. One from a member is filed with your documents — each PDF or photo attached to it, and the email itself as a PDF — and its text and up to three of those files are sent once to Anthropic to list what was bought. One from anyone else waits, unread, until a member approves or denies it, unless an admin lets anyone send to the address: then it is filed and read at once, except one the scanner calls spam. A denied email is deleted and nothing from it is filed. The scanner’s spam and virus verdicts on each email are recorded; an email with a virus is refused and never kept. Nothing becomes an item until a member adds it. Forward receipts for your household’s own things, not other people’s mail.
Reading a photo
When you choose to have a photo or a PDF read — a label, a serial sticker or a receipt — it is sent to Anthropic so the item’s details can be filled in for you to check, and it stays with your household’s documents. In the iPhone app, a photo you take is read only after you have said yes to that in the app.
Finding a manual
When an item has a brand and a model, the brand, the model and the kind of thing it is are sent, once per product for everyone, to a web search run by Anthropic, to find the manual the manufacturer publishes — never your name, your household, the item’s serial number or anything else about you. The list of products and manufacturer links this builds is shared by every household and contains no household data. When you open a manual, you leave Homedrawer for the manufacturer’s site, and they see your visit as they would any visitor’s.
Looking up a vehicle
When you tap Look up beside a vehicle’s VIN, the VIN alone is sent to the vehicle decoder run by the US National Highway Traffic Safety Administration (NHTSA), to fill in the make, model and year for you to check — only on that tap, never when you save and never in the background. To watch for recalls, a vehicle’s make, model and model year are sent to NHTSA’s recall service once a day and after you save; never the VIN, your name, your household or anything else about you. Transport Canada’s recall list is read as a public file and receives nothing.
The iPhone app
Homedrawer for iPhone signs in to the same account and shows the same records as this website. It keeps your sign-in in the phone’s Keychain, and on the phone only what it last loaded, so it opens quickly and can show your home without a connection; that copy, the documents you opened and the files you exported are deleted when you sign out, when your account is deleted, or when your session ends. A few settings that belong to the phone — how it looks, its sound, whether you have seen the introduction — stay on it. If you turn on notifications on the phone, Apple gives it an address for them (a push token), which we keep with your account so your reminders can reach it, and delete when you sign out on that phone, when you sign out everywhere, when Apple says the phone can no longer be reached, or when your account is deleted.
Your calendar link
If you make a calendar link (Settings → Reminders), your chores and maintenance — their titles, the days they are due and how often they repeat, your home’s name and the item’s — can be read by whoever holds the link, which is meant to be your calendar app: Apple, Google, Outlook or another you choose, under its own privacy terms. We keep only a scrambled fingerprint of the link, not the link itself, and when a calendar last read it. It shows nothing else: no notes, prices, documents or other people’s details. It keeps working when you sign out; turning it off, or making a new one, stops the old link at once, and deleting your account deletes it.
Technical data
Our hosting and database providers keep request logs (IP address, browser type, times, the pages requested) for security and debugging. When something breaks, we keep an error report — what failed, the page with its address, and your account number if you were signed in — and email an alert about it to our own inbox. An activity log inside your household records who did what — who added or removed an item, uploaded a document, had a photo read, invited someone or removed a member — visible to your household’s admins.
Cookies
Essential cookies for sign-in and security, for remembering which household you are viewing and your cookie and theme choices, and for holding a pending invitation while you sign up or sign in. Optional analytics cookies (Google Analytics 4) load only if you turn them on, and only on our public pages — never inside your account and never on an invitation link. Two small things also sit in this browser’s session storage, and the app’s service worker keeps its own stores. The Cookie Policy lists every one of them.
What we do not collect
Payment card or bank details (there is no billing), precise location, your contacts, or anything from other apps on your device.
2. Why we use it
- To provide the service — storing your records, calculating warranty countdowns and due dates, sending reminders, reading what you ask us to read, and sharing the household with the people you invite. Legal basis: performing our contract with you.
- To keep it secure — logs, error reports, rate limiting, fraud and abuse prevention. Legal basis: our legitimate interest in running a safe service.
- To improve it — counts of which public pages are visited, only with your consent.
- To communicate — service emails: verification, password reset, a notice when your password, email address or sign-in details change (to both addresses when the email changes), invitations to people you invite (which show your name, or your email address if you have no name set), requests to join a household and the answer, reminders and recall alerts, a monthly household summary, an email when something arrives at your household’s address if you turn that on, and a notice when these pages change materially. Under Settings → Reminders you choose which reminders and recall alerts come by email (chores start off, the rest on) and how often the summary comes, or not at all; the account and security emails cannot be turned off while you have an account. We do not send marketing email without your express consent (CASL).
3. Who else sees it
We do not sell personal information and we do not share it with advertisers. We use a small number of service providers who process data on our instructions, and a few services you choose to use:
| Provider | What for | Where |
|---|---|---|
| Supabase | Database, authentication and file storage — everything you enter and upload | Canada (ca-central-1, Montréal). Its logs of requests (IP address, browser, times) are kept in the European Union, and a file you open can be cached for a short time by its delivery network, near where you open it |
| Vercel | Hosting: the servers that run Homedrawer, and the nightly backup, in a private store only the service can read | Servers in Canada (Montréal); backups in Canada (Montréal); its network routes your connection through the nearest point; its own logs of requests can be processed in the United States, where its main facilities are |
| Hostinger | All email we send — the account emails, invitations, reminders, recall alerts and summaries — relayed through MailChannels; and our own inbox, where your messages to us and our error alerts arrive | Their own data centres, which can be outside Canada (Europe and the United States among them) |
| Amazon Web Services (SES and S3) | Receiving email sent to your household’s address and holding it until it is filed — minutes for a member’s own email, up to seven days for one waiting for a member’s approval — then deleting it. Its spam and virus scanner’s verdicts are read from the email. The root domain’s mail (hello@) does not pass through it | Canada (ca-central-1) |
| Anthropic | Reading a photo or PDF you choose to have read; reading an email sent to your household’s address, to list what it says was bought; and finding, from an item’s brand, model and kind, the manual its manufacturer publishes. Only that photo or PDF, that email’s text and up to three of its files, or those words. Under Anthropic’s commercial terms, not used to train their models and deleted on their standard schedule (currently 30 days) | United States |
| Sign-in with Google, if you use it; showing a profile picture that came from Google; and Google Analytics, only with your consent, only on public pages | Google’s own regions | |
| Apple | Sign in with Apple, if you use it (and, when you delete your account from the iPhone app, telling Apple to end that sign-in); and the Apple Push Notification service, delivering notifications to the iPhone app: each notification’s title, short line and which record to open pass through Apple to reach the phone; your documents and the rest of your records do not | Apple’s own regions |
| Your browser’s push service (Apple, Google or Mozilla, depending on the browser) | Delivering the push notifications you turned on. Each message is encrypted before it leaves us with keys only your browser holds; the service sees that a message exists, not what it says | The service’s own regions |
| US National Highway Traffic Safety Administration (NHTSA) | Decoding a vehicle’s VIN when you tap Look up — the VIN alone, on that tap only; and checking a vehicle for recalls by its make, model and model year — never the VIN or anything about you | United States |
| Internet Archive | Preserving the manufacturer’s manual page so the link survives if the manufacturer moves it; the copy is theirs, not ours, and it is offered only once the manufacturer’s link has died. The request carries only the manufacturer’s web address | United States |
| Your calendar app, if you make a calendar link | Reading your chores and maintenance from the link, as described in section 1, under its own privacy terms | Wherever that service runs |
People you share a home with see the household’s data according to their role, and your name, picture, time zone and reminder settings. If you are invited to a household, its owner and admins can see what you add. We may disclose information if required by law, or to protect the rights and safety of users and the public.
Where your data lives: your records, your sign-in details and every document you upload are stored in Canada (Supabase, Montréal), and the servers that read and write them run in Canada too (Vercel, Montréal), as does the nightly backup. An email sent to your household’s address is received and held in Amazon’s Canadian region. What leaves Canada is what the table above sends elsewhere: a photo, PDF or email being read by Anthropic in the United States, a VIN on Look up or a vehicle’s make and model to NHTSA, the email we send you, notifications passing through push services, our providers’ logs of requests (Supabase’s in the European Union, Vercel’s possibly in the United States) and a file briefly cached near you, and anything you choose to use through Google, Apple or your calendar app.
4. How long we keep it
- Account and household data: for as long as your account, or the household, exists. That includes the household’s activity log, notifications, invitations and join requests; archived items stay until you delete them. A home you archive when you join another is kept closed — nobody can open, change or export it — until you delete your account, which deletes it with everything in it; write to us for a copy of it, or to have it deleted sooner.
- Deleted items and documents: removed at once from the live database and storage. The household’s activity log keeps the name of what was deleted and who deleted it.
- Backups: taken every night. A database backup is deleted after 30 days; a copy of a file is deleted within 60 days of its deletion. If backups ever stop running, the last three are kept until they run again.
- Email sent to your household’s address: a filed one becomes documents like any other and goes when you delete them; Amazon’s copy is deleted once it is filed or denied, or after seven days if nobody approves it. Our record that it arrived — who sent it, its subject, what was read — stays with your household while it exists, except for one that was refused, denied or never approved, whose record goes after 30 days.
- Error reports: 30 days after the error last happened. The request logs our hosting and database providers keep: up to 30 days. Hostinger keeps its own records of the email it delivered, under its own retention.
- A record of which notices about these pages were sent to you: while your account exists.
- Deleted accounts: see section 6.
5. Your rights
Wherever you live, you can: access your data (Settings → Your data → Export gives you a JSON copy of your profile and everything you can see in each household you belong to, with a list of your documents — each downloads from its item; that page lists exactly what the file holds — and makes a PDF inventory of a home, with your photos and values, for an insurer); correct it (edit anything in the app); delete it (Settings → Your data → Delete your account, or delete individual items and documents); port it (the export is machine-readable); withdraw consent for cookies at any time (Manage cookies in the footer of any public page, or Settings → Profile → Cookies when signed in); and complain — in Canada to the Office of the Privacy Commissioner of Canada, in Alberta to the Office of the Information and Privacy Commissioner, in Quebec to the Commission d’accès à l’information, in the EU/UK to your local supervisory authority. Email us first at privacy@homedrawer.com; we respond within 30 days.
6. Deleting your account
Deletion is real, not a hidden flag, and it runs immediately. Your profile, sessions, notifications, push addresses and calendar link are deleted. Households you own are deleted with all their items, warranties, tasks, history, parts and documents (the confirmation screen lists them and their other members — transfer ownership first if others should keep the household). Your membership in households owned by other people is removed, and what you added there stays with that household, as do your name on things you owned there, their activity log’s record of what you did, invitations sent to you and emails you sent to their address. Backup copies are deleted within 60 days (section 4).
7. Security
Traffic is encrypted (HTTPS/HSTS). Data is encrypted at rest by our providers. Every database table is protected by row-level security so that one household cannot read another’s records, whatever identifier is sent. Documents are in a private store and open only for members of the household, after a sign-in check. Passwords are hashed; sessions can be ended on all devices from Settings, which also stops notifications to them. No system is perfectly secure; if we learn of a breach affecting you we will notify you and the relevant regulator as the law requires (PIPEDA, Alberta’s PIPA, Quebec Law 25, GDPR).
8. Canada, Quebec, and international users
We comply with PIPEDA and Alberta’s PIPA. The person accountable for personal information at Homedrawer — for Quebec residents, the person in charge of the protection of personal information — is our Privacy Officer, reachable at privacy@homedrawer.com. Our service providers outside Canada are listed in section 3; you can ask us about them at the same address. We obtain consent before any non-essential tracking and honour its withdrawal. For users in the EU/UK, we act as the controller, rely on the bases listed in section 2, and where data leaves your region we use providers offering standard contractual clauses or equivalent safeguards. For US users, we do not sell or “share” personal information as those terms are used in state privacy laws.
9. Children
Homedrawer is for adults managing a home. It is not directed at children under 16 and we do not knowingly collect their information, apart from a first name someone gives a chore or an item’s owner. If you believe a child has created an account, email us and we will delete it.
10. Changes
We post every change here with its date at the top and a note of what changed. For a material change to how we handle your information, we email every account holder and post it here at least 30 days before it applies; a change needed sooner for a legal or security reason, or one that only describes something new or corrects a mistake, applies when it is posted, and we say why.