Privacy Policy

How HomeRation handles your data — plainly, honestly, and with your family's best interest in mind.

What we collect

To make HomeRation useful, we collect only what's necessary:

• Account data: your email, name, and (once you subscribe) billing info handled by Stripe.
• Household data: the people, preferences, allergies, and cuisines you tell us about in onboarding. Stored on your account only.
• Usage data: the plans generated for you, meals you swap, ratings you give, receipts you scan. Used to make future plans smarter.
• Waitlist signups: the email address you enter on the landing page, plus a label for which form you used. It is sent to Formspree, our form provider, and is not stored in our own database.
• Receipt photos: the photos you upload are kept in private storage tied to your account and sent to Anthropic to be read. Deleting a receipt deletes its photos.
• Consent records: when you accept the terms or the receipt-upload notice, we record your account, which notice, which version of its wording, and when.
• Referral checks: a salted hash of the IP address of a referral code's owner is kept for up to 30 days, and a salted hash of the IP address a referred person signs up from is also kept for up to 30 days, to detect self-referrals. The address itself is never stored.
• Abuse prevention: a salted hash of your IP address is used to count waitlist signups per hour and cap them. No email or other signup detail is stored with it, and the address itself is never stored.
• Analytics: page views and product usage via PostHog (instrumented; not yet collecting data). Once active, usage stays anonymous until you create an account — signing up or signing in links your usage history to your identity. Errors via Sentry.

What we don't do

• We don't sell your data. Ever. To anyone.
• We don't share your household composition with advertisers or third parties.
• We don't run behavioral ads on the site.
• We don't set third-party tracking cookies.

Cookies and similar storage

All of these are set by HomeRation's own pages, not by an ad network.

• Sign-in: Supabase sets session cookies when you sign in, so you stay signed in.
• Time zone: inside the signed-in app, a tz cookie holds your browser's time zone for one year, so the app knows which calendar day it is for you.
• Referral links: opening a referral link sets an hr_ref cookie holding the referral code for 30 days, so the referral survives until you sign up.
• Analytics: once PostHog is active, it keeps an anonymous visitor identifier in a cookie and in your browser's local storage.

Your rights

You can export all your data, delete your account, or ask us to purge specific memory (like swap history) at any time from settings. If settings aren't live yet, email hello@homeration.com.

Third parties we work with

HomeRation runs on a small set of trusted providers, each with their own privacy commitments:

• Supabase — database + authentication
• Vercel — hosting and page-view analytics
• Stripe — payment processing
• Anthropic — AI recipe generation and receipt photo analysis (via Claude API)
• Resend — transactional email
• PostHog — product analytics
• GrowthBook — feature flags and experimentation
• Sentry — error tracking
• Formspree — collects waitlist signups
• Unsplash — photos on the landing page load directly from Unsplash's servers, so your browser contacts them when you visit

Contact

Questions or requests: hello@homeration.com. Every email is read personally.