HomeBaseAI Privacy Policy

1. Overview

HomeBaseAI ("the App") is a privacy-first home inventory and maintenance coaching app for iPhone. It helps you catalog appliances, fixtures, materials, and systems through a conversational AI interface. Optional Pro features add proactive maintenance scheduling, home health scoring, seasonal prep checklists, and widgets.

HomeBaseAI keeps your home data on your device. We operate one minimal relay server for Pro AI requests. It passes your question to OpenAI and returns the answer. It does not store or log the content of your questions or answers. We do not create user accounts, and we cannot see your home records.

2. Home Data

HomeBaseAI stores the following types of data, all entered by you:

• Home profiles: Home name, type, address, rooms
• Items: Appliances, fixtures, systems, furniture, electronics — including brand, model number, serial number, purchase date, warranty expiration
• Materials: Paint colors, tile, flooring, countertops — including color codes, finishes, purchase locations
• Maintenance tasks: Scheduled maintenance with intervals, completion history, and cost-of-neglect estimates
• Service records: Provider, date, cost, and description of professional services
• Photos: Item and material photos you choose to capture or import
• Part numbers: Replacement part numbers and purchase URLs

All data is entered by you through conversation, camera scanning, or voice input. HomeBaseAI does not access your photo library, contacts, or location without your explicit action.

3. AI Processing

What data is sent to the AI

When a Pro subscriber sends a message in the conversation, the following is transmitted through our relay to OpenAI's API:

• Your conversation message (text you type or speak)
• Text recognized from scanned labels (OCR output), if you used the camera
• Relevant items from your home inventory (only items matching your query — not your entire inventory)
• Your home name, type, and room list for context
• Recent conversation history (last 10 messages, summarized)

What is NOT sent

• Your full home inventory (only relevant items are included)
• Photos or image data (only OCR-extracted text)
• Your Apple ID, device ID, or any personal identifiers
• Your address or location

Our relay server and subscription verification

Pro AI requests travel from the app to a minimal relay server we operate (kynoss-ai), hosted on Cloudflare Workers. The relay passes your request to OpenAI and returns the answer. It does not store or log the content of your questions or answers.

To confirm you are a Pro subscriber, the app also sends Apple's signed proof of your subscription (the StoreKit transaction signed by Apple) with each AI request. The relay checks it and may check your subscription status with Apple; Apple also notifies the relay of subscription events such as renewals, refunds, and expirations (App Store Server Notifications). To prevent abuse, the relay keeps an anonymized (hashed) subscription reference and a daily request count for up to 48 hours, and a note of refunded or cancelled subscriptions until 30 days after they would have expired. This is not linked to your name, email, or Apple ID, and is never sent to OpenAI.

How it is processed

Messages are sent over HTTPS through our relay to OpenAI's API. OpenAI receives requests from our relay, not from your device, and receives no account, device, subscription, or advertising identifier. OpenAI processes the request using GPT-4o-mini and returns a structured response. Per OpenAI's API data usage policy, API inputs and outputs are not used to train their models and are retained for up to 30 days for abuse monitoring, then deleted.

What AI is used for

• Conversational intent classification: Understanding what you want to save, query, update, or ask about.
• Data extraction: Pulling structured fields (brand, model, serial) from natural language or OCR text.
• Maintenance coaching: Providing personalized advice based on your inventory.

On-device processing (no data transmitted)

• OCR text recognition: Reading text from photos of product labels using Apple's Vision framework (on-device).
• Speech recognition: Converting voice input to text using Apple's on-device Speech framework.
• Maintenance scheduling: Template matching and task creation happen entirely on-device.
• Home health scoring: Calculated locally from your maintenance data.

When AI is active

AI features require an active Pro subscription and an internet connection. Free use — including guided Home Setup — is handled on-device by keyword search, and free users' messages are never sent to our relay or to OpenAI. Without internet, the app provides basic keyword-based search of your inventory. Your vault data is always accessible offline.

4. Subscriptions & Purchases

HomeBaseAI requires a subscription ($5.99/month or $49.99/year) after a 7-day free trial. Subscriptions are processed entirely through Apple's App Store and StoreKit framework.

• We do not collect payment information. Apple handles all billing.
• The app checks subscription status on-device via StoreKit. For Pro AI requests, it also sends Apple's signed proof of your subscription to our relay for verification, as described in Section 3.
• We have no visibility into your Apple ID or payment method. Our relay keeps only the anonymized (hashed) subscription reference and counters described in Section 3.
• You can manage or cancel your subscription through iOS Settings > your Apple ID > Subscriptions.

5. iCloud & Family Sharing

HomeBaseAI offers optional family sharing so household members can view and update the same home records.

• Sharing uses Apple's CloudKit (CKShare) framework. Data syncs through your personal iCloud account, not through our servers.
• You control who has access. Only people you explicitly invite can see your home data.
• Shared data is encrypted in transit and at rest by Apple's iCloud infrastructure.
• We have no access to your iCloud data.
• User preferences are stored privately and never shared.

Family sharing is entirely optional. HomeBaseAI works fully as a single-user app without iCloud.

6. Data Storage

Data is stored using Apple's Core Data framework, protected by:

• iOS Data Protection (encrypted at rest, tied to your device passcode)
• App sandboxing (only HomeBaseAI can access its own data)
• Standard iOS security architecture

HomeBaseAI does not use:

• Third-party analytics SDKs (no Firebase, no Mixpanel, no Amplitude, no RevenueCat)
• Advertising SDKs or ad networks
• Third-party crash reporting or telemetry services
• Any form of user tracking or fingerprinting

For paywall flow diagnostics — understanding which paywall surfaces users see and how the StoreKit purchase flow performs — HomeBaseAI emits Apple-native OSLog Logger, OSSignposter, and MetricKit mxSignpost events under the studios.kynoss.homebase subsystem. These signposts stay on your device unless you have opted into Apple's system-wide diagnostics sharing in iOS Settings — in which case Apple receives them, never us. The Apple Privacy Nutrition Label "Usage Data: Not Collected" remains accurate under Apple's classifier.

7. Data Retention & Deletion

• Delete the app: Deleting HomeBaseAI permanently removes all local data. No data exists anywhere else (unless you enabled family sharing, in which case shared records remain in iCloud for other family members), apart from our relay's short-lived, hashed subscription reference described below.
• In-app management: You can delete individual items, rooms, homes, or records at any time within the app.
• There is no account to close and no request process needed. Our relay's hashed subscription reference and request counters expire automatically (within 48 hours; notes of refunded or cancelled subscriptions shortly after the subscription would have expired). They are not linked to you, so there is nothing to request.

8. Data Sharing & Third Parties

• OpenAI: Pro conversation messages and relevant inventory context are sent over HTTPS through our relay to OpenAI's API for processing. OpenAI does not use API data for model training. Data is retained up to 30 days for abuse monitoring, then deleted. See OpenAI's API Data Usage Policy.
• Cloudflare: Hosts our relay server; processes Pro AI requests in transit only.
• We do not sell your data.
• We do not serve advertisements.
• We do not use third-party analytics, tracking, or advertising SDKs.
• We do not engage in data mining or profiling.
• Your vault data (items, materials, tasks) is stored only on your device and in your private iCloud.

9. Data Security

• Encryption at rest: All local data is protected by iOS Data Protection.
• App sandboxing: iOS prevents other apps from accessing HomeBaseAI's data.
• Minimal network exposure: The app's only network traffic is optional iCloud sync (encrypted end-to-end by Apple) and the Pro AI requests sent over HTTPS through our relay to OpenAI described in Section 3.
• No accounts: No credentials to steal, no passwords to breach.

10. Children's Privacy (COPPA)

HomeBaseAI is not directed at children under 13. We do not knowingly collect personal information from children. HomeBaseAI collects no personal information about any user — the only transmission is the home-related Pro AI content and Apple subscription proof described in Section 3, which our relay does not store (apart from an anonymized, hashed subscription reference) — so it does not create the data collection risks COPPA addresses.

If you are a parent or guardian with concerns, contact us at kynossstudios@gmail.com.

11. Your Rights Under GDPR

If you are in the European Economic Area, the GDPR provides you with specific rights. Because we never store your records, you have full control:

• Access: All data is on your device and accessible within the app.
• Rectification: Edit any record within the app.
• Erasure: Delete individual records or the entire app.
• Restrict processing: Disable family sharing or AI features at any time.
• Portability: Your data is stored locally on your device.
• Object: Stop all processing by deleting the app.

The only cross-border transfer that can occur is the Pro AI request content described in Section 3, which passes through Cloudflare's network (via our relay) in transit to OpenAI (a U.S. processor) and is retained by OpenAI at most 30 days. Free use never leaves your device.

12. Your Rights Under CCPA/CPRA

If you are a California resident:

• Right to know: This policy describes all data the app processes.
• Right to delete: Delete the app or individual records.
• Right to opt out of sale: We do not sell your personal information. Never have, never will.
• Right to non-discrimination: We will not discriminate against you for exercising privacy rights.

13. Apple Platform Disclosures

App Privacy Nutrition Label

HomeBaseAI's App Store privacy label reflects that Pro conversation messages are sent through our relay to OpenAI for AI processing (User Content). This data is not linked to your identity and is not used for tracking. The label also declares Purchases (Purchase History) — App Functionality, Not Linked to You, Not Used for Tracking, reflecting the hashed subscription reference our relay keeps to verify Pro access. Kynoss Studios collects nothing linked to you; our relay keeps only the hashed subscription reference and request counters described in Section 3, for abuse prevention.

CloudKit

If you enable family sharing, data syncs through Apple's CloudKit under your iCloud account. This is governed by Apple's Privacy Policy.

StoreKit

Subscription purchases are handled by Apple's StoreKit framework. Purchase transactions and billing are managed entirely by Apple.

App Tracking Transparency

HomeBaseAI does not track users. The App Tracking Transparency framework is not used because no tracking occurs.

14. Changes to This Policy

We may update this policy to reflect changes in functionality or legal requirements. The effective date will be revised. Continued use constitutes acceptance.

15. Contact Us

For privacy questions or concerns:

• Email: kynossstudios@gmail.com
• Support: HomeBaseAI Support

We will respond to privacy inquiries within 30 days.