Privacy notice
Version privacy-notice-2026-08 · Placeholder pending legal review
Who is responsible for your data
The data controller is AI Household Manager. For any question about this notice or your rights, write to crucioi@outlook.com.
TODO: confirm the controller entity, its registered address and registration number, and whether a data protection officer or APDP representative must be named.
What we collect
- Account data — email, name, password (stored only as a one-way hash), role, and the dates you signed up and last signed in.
- Household data — the homes you create, their address and characteristics, and the tasks and maintenance items you record.
- Service data — providers you save, appointments you book, their status, cost and any rating you leave.
- Consent records — which consents you gave or withdrew, when, and the IP address and browser used at the time. We keep this to demonstrate that consent was properly obtained.
- Technical logs — security and audit events such as sign-ins, administrative actions and failed login attempts.
Why we process it, and on what basis
- To provide the service (managing your home, tasks and bookings) — performance of our contract with you.
- To keep the service secure (audit logs, login throttling) — our legitimate interest in operating a safe service.
- To send optional product emails — your consent, which you can withdraw at any time in your privacy centre without affecting anything else.
- To generate scheduling suggestions — performance of our contract. Where an external AI provider is used, this is stated below.
AI processing
Suggestions about the order and timing of your tasks may be produced by an external large-language-model provider. When that is enabled, only the task titles, types, priorities and dates for the day in question are sent. Your name, email, address and payment details are never included. When no model is configured, the ordering is produced by a deterministic rule on our own server and nothing leaves it.
TODO: name the provider, its location, the transfer mechanism relied on, and whether it retains prompt data. If it is outside the EEA, describe the safeguards here.
Who else sees your data
A service provider you book sees the appointment details you send them and the home it relates to. Our hosting supplier processes data on our behalf under written instructions. We do not sell personal data.
TODO: list processors and their locations.
How long we keep it
Account and household data is kept while your account is open. When an account is deleted, identifying details are anonymised and household content removed; records that a provider needs for their own accounting are retained without identifying you. Consent and audit records are kept for as long as we may need to demonstrate compliance.
TODO: set and state concrete retention periods.
Your rights
You can ask for access to your data, correction of it, its deletion, restriction of or objection to processing, and a portable copy. Use the Your data page, where you can download a copy immediately or log a formal request and follow its status. You also have the right to complain to your supervisory authority — in Monaco, the Autorité de Protection des Données Personnelles (APDP).
Changes to this notice
When this notice changes materially we record the new version and ask you to review it. The version you accepted is stored with your account and shown in your privacy centre.