Privacy Policy

Hometric is operated by Baran Labs LLC ("Baran Labs", "we", "us", "our"), a Florida limited liability company, doing business as Hometric. This Privacy Policy explains, in plain language, what personal information we collect through the Hometric mobile app and the hometric.app website (together, the "Service"), why we collect it, who we share it with, how long we keep it, and the choices and rights you have. It applies to users in the United States and Canada, the only markets the Service is offered in.

Hometric is a home-inventory documentation tool. You photograph your belongings, and we help you organize them, generate AI value estimates (informational only and not guaranteed — see our Terms), and produce an inventory report you can give to your own insurer. We are not an insurer, insurance agent, broker, or public adjuster, and this policy does not change that — see the disclaimer near the end.

1. Who can use Hometric

The Service is intended only for individuals who are 18 years of age or older. It is not directed to children, and we do not knowingly collect personal information from anyone under 18 (or under 13 within the meaning of the U.S. Children's Online Privacy Protection Act). If you are under 18, please do not use Hometric or provide us any information. If we learn that we have collected information from someone under 18, we will delete it. If you believe a minor has provided us information, contact us at the address in Section 16.

2. Information we collect

We collect only what we need to provide the Service. Below, each item is grouped both in plain terms and, in brackets, by the "categories of personal information" used in the California Consumer Privacy Act (CCPA/CPRA), so California residents can see how their data maps to those categories.

• Account information. Your email address and a securely hashed password (we never store your password in plaintext). If you use Sign in with Apple, we receive the identifier Apple provides and, if you choose to share them, your name and email; if Apple hides your email, we store a private relay placeholder instead. [CCPA categories: identifiers; account log-in credentials, which CCPA treats as sensitive personal information.]
• Photos of your belongings and rooms. The images and any receipts or appraisal documents you capture or upload, plus the AI-suggested or user-entered details about them. Photos may carry embedded metadata — see Section 6. [CCPA categories: visual information.]
• Inventory and value data. The homes, rooms, items, brands, models, serial numbers, conditions, quantities, notes, purchase year and price (if you enter them), and the estimated or user-entered values that make up your inventory. [CCPA categories: commercial information.]
• Insurance policy and coverage data. Details such as your insurer, policy type, coverage limits, deductibles, and peril flags, which you enter yourself. We do not store an insurance policy number. [CCPA categories: commercial / financial information.]
• Device and log data. Standard server logs and security audit records, which include your IP address, timestamps, and the actions you take. We use these to run the Service, prevent abuse, and diagnose problems. We do not use any third-party advertising, location, or push-notification SDKs in the app. We do use one product-analytics SDK (PostHog), described in the next bullet. [CCPA categories: internet/network activity; identifiers (IP).]
• Usage analytics and crash diagnostics. The app includes the PostHog analytics SDK, which records a small, fixed set of product events (for example: account created, home created, capture completed, paywall viewed, trial started), app-lifecycle events (app installed, opened, or updated), and — if the app encounters an error — a crash-diagnostic event containing the technical error name, a truncated error message and stack trace, and where in the app it occurred. These events are keyed to the same pseudonymous account id (a random internal identifier) used elsewhere in the Service — never your name or email — and never include your photos, item details, or values. Autocapture and session replay are disabled, and we do not use IP-based geolocation for analytics. We use this information to understand how the app is used, fix problems, and improve the Service — not for advertising. [CCPA categories: internet or other electronic network activity; identifiers (pseudonymous user id).]
• Support communications. If you email us or request a password reset, we process your email address and the contents of your message to respond. [CCPA categories: identifiers; customer-records information.]
• Subscription and purchase data. If you start a free trial of or subscribe to Hometric Pro, we store a single subscription field — your entitlement status and expiry (whether your Pro access is active, and when it ends). We share a pseudonymous account id (your Hometric user id, a random internal identifier that is not your name or email) with our subscription manager, RevenueCat, so we can tell whether your Pro features are unlocked (see Section 7). The App Store transaction, receipt, and product identifiers for your purchase are handled by Apple and RevenueCat and are not stored by us. Apple is the merchant of record and processes your payment; we never receive or store your payment card number. See Section 6 of our Terms for free-trial conversion, pricing, renewal, and cancellation details. [CCPA category: commercial information.]

We do not collect precise GPS location through any location feature of the app (the app contains no location SDK), and we do not perform facial recognition. See Sections 6 and 13. If a paid subscription is offered, Apple — not Hometric — processes your payment; we do not collect or store your payment card number.

3. Where your information comes from

• Directly from you, when you create an account, enter a home or item, or capture a photo.
• From Apple, if you choose Sign in with Apple.
• Automatically, from your device and our servers (for example, your IP address in our logs).
• Generated for you by our AI, which proposes item names, brands, models, conditions, and estimated values from the photos you submit.

4. How we use your information

• To create and secure your account and let you sign in.
• To store your inventory and let you view, edit, and retrieve it.
• To analyze the photos you capture so we can suggest item details and estimate values, score your documentation, and flag items you may wish to have appraised.
• To generate the inventory PDF reports you choose to export. These reports organize your itemized list, values, and copies of your room and item photos in one document you can choose to share with your insurer. Values are AI estimates, not appraisals — see our Terms.
• To send you transactional messages, such as a password-reset email when you request one. We do not send marketing email.
• To operate, secure, and improve the Service, and to detect and prevent fraud, abuse, and security incidents.
• To comply with our legal obligations and enforce our Terms.

Sharing you initiate. The app includes a button to save or share an individual photo, or your exported report, through your device's standard share sheet. This is an action you take on your own device; we do not transmit your photos or reports to any third party on your behalf.

5. AI processing of your photos

How AI is used. Before the first time you use AI analysis, the app asks for your explicit, affirmative permission to send your photos to Anthropic — you can decline and add items manually instead. When you choose AI analysis, the image is sent to Anthropic's Claude vision API so it can recognize what is in the picture and propose item details and value estimates. We send the image and a short instruction; we do not attach your email or any advertising or device identifier to these requests. Under Anthropic's commercial API terms, your photos are not used to train Anthropic's models, and Anthropic applies a limited retention window, deleting inputs and outputs from its systems within a short period (typically within 30 days). Anthropic may retain content longer only where required by law or to investigate violations of its usage policy.

Value estimates are informational. The AI's value estimates, documentation scores, and coverage-gap flags are suggestions to help you. You decide what to do with them. They are not appraisals, not insurance advice, and not decisions we make about you. Under Quebec's Law 25, this means we do not make decisions about you based exclusively on automated processing. If you ever have a question about how an estimate was produced, you can contact us for a human review.

6. Photo metadata (EXIF and location)

Photos can contain embedded metadata, including GPS coordinates. Hometric is designed so this never reaches us, in two ways: the in-app camera does not record location (the app requests no location permission), and any photo you import from your photo library is re-encoded to strip embedded metadata before it leaves your device. As a result, the copies we store and send to Anthropic for analysis do not carry GPS location or other EXIF data. As an added precaution, you can also turn off location access for your camera in your device settings.

7. Service providers we share information with

We share your information only with the service providers that help us run the Service. They act on our behalf, are bound by contract to protect your information and use it only to provide their service to us, and may not use it for their own purposes. These are the only external recipients of your information:

• Supabase (United States) — hosts our database and stores your photos and exported reports.
• Anthropic (United States) — provides the Claude vision AI that analyzes the photos you submit (see Section 5).
• Railway (United States) — hosts our application servers and captures server logs.
• Vercel (United States) — hosts the public hometric.app marketing website and processes standard web-server request logs (such as IP address) to serve it. The marketing website does not use advertising or analytics cookies.
• Apple — provides Sign in with Apple (if you use it), App Store distribution, and Hometric Pro in-app purchase billing as the merchant of record.
• RevenueCat (United States) — manages your Hometric Pro subscription and unlocks your Pro features. RevenueCat receives only billing-related information: the pseudonymous app_user_id (your Hometric user id, a random internal identifier — not your name or email) and the purchase and subscription status it brokers with Apple, such as the App Store transaction and receipt, product id, and entitlement and trial state, together with standard device and SDK metadata. RevenueCat does not receive your email address, your photos, or your inventory items or values — that information stays in our own systems and is never passed to RevenueCat. RevenueCat also forwards subscription-lifecycle events (for example: trial started, renewed, cancelled) to PostHog under the same pseudonymous id so we can understand the signup-to-subscription funnel; it does not send your email or other identifiers to PostHog.
• PostHog (United States) — hosts our product-analytics service (PostHog US Cloud). PostHog receives the usage and crash-diagnostic events described in Section 2, keyed to your pseudonymous account id. It does not receive your name, email address, photos, or your inventory items or values.
• Resend (United States) — delivers transactional email (such as your password-reset code). Resend receives only your email address and the message contents needed to send it; it is not used for marketing.

We may also disclose information if required by law, to respond to lawful requests, to enforce our Terms, or to protect the rights, safety, and security of our users, the public, or Hometric. If we are ever involved in a merger or sale of assets, your information may be transferred as part of that transaction, and we will notify you of any change in control of your information.

8. We do not sell or share your personal information

We do not sell your personal information, and we do not "share" it for cross-context behavioral advertising, as those terms are defined under the CCPA/CPRA. We have not done so in the preceding 12 months. We do not use advertising SDKs; our analytics provider (PostHog, Section 7) processes pseudonymous usage data solely as our service provider and may not use it for its own purposes. We do not disclose your sensitive personal information for purposes that would give rise to a right to limit its use. Because we do not sell or share personal information, no opt-out of sale or sharing is necessary — but you can always contact us with any question.

9. Where your information is stored, and cross-border transfers

Our servers and all of our service providers are located in the United States.

For Canadian users: if you use Hometric from Canada, your personal information is transferred to, stored, and processed in the United States by the providers listed in Section 7. We use contractual and other measures to require those providers to protect your information to a standard comparable to Canadian law, and we remain accountable for it while it is in their hands. Because the information is processed in the United States, it may be subject to access by U.S. courts, law enforcement, and national-security authorities under U.S. law. For Quebec residents, before communicating personal information outside Quebec we conduct an assessment of privacy-related factors and ensure the information will receive protection comparable to that required under Quebec law, including through written agreements with each provider, as Law 25 requires. By using the Service, you understand that your information will be processed in the United States.

10. How long we keep your information

• Account and inventory data — kept for as long as your account is active, so the Service remains available to you, and deleted when you delete your account (see Section 11).
• Export files (PDF/CSV reports) — the inventory reports you generate are stored only temporarily and are automatically deleted about 7 days after you create them; you can regenerate a fresh report at any time.
• Security and audit logs — records that include your IP address are kept for the life of your account for security, abuse-prevention, and diagnostic purposes. After account deletion, certain de-identified security-log entries (with your account identifier removed) may be retained for a limited period.
• Support and password-reset data — kept only as long as needed to handle the request; reset codes expire within 15 minutes.

We do not keep personal information longer than is reasonably necessary for the purposes described in this policy or as required by law.

11. Deleting your account and your data

You can permanently delete your account at any time from Settings → Delete account & all data. This performs a hard deletion: your user record and all linked homes, rooms, items, item assets, and export jobs are removed from our database, and the photos and reports stored under your account are purged from our file storage. Storage cleanup is done on a best-effort basis, so a small amount of residual media may persist for a short time until automated cleanup completes. As noted in Section 10, de-identified security-log entries may be retained. Deletion is irreversible.

12. Your privacy rights

U.S. state privacy rights (including California)

Depending on your state of residence, U.S. privacy laws such as the California Consumer Privacy Act (CCPA/CPRA) may give you certain rights. We extend the following rights to all of our U.S. users:

• Right to know / access. You can ask what personal information we have collected about you, the categories, sources, purposes, and the categories of recipients. You can view your inventory in the app at any time, and you can export a convenience copy of your core data in machine-readable JSON from Settings → Export all my data (account, home, room, and item data and file metadata, but not the original photo files). For a complete copy of all the personal information we hold about you, email contact@hometric.app and we will provide it free of charge. Separately, the inventory PDF report you can generate (see Sections 4 and 7) includes copies of your photos.
• Right to delete. You can permanently delete your account and data in the app (Section 11) or by contacting us.
• Right to correct. You can edit any home, room, or item in the app, or ask us to correct inaccurate information.
• Right to opt out of sale or sharing. We do not sell or share your personal information, so there is nothing to opt out of (Section 8).
• Right to limit use of sensitive personal information. We use your account credentials only to sign you in — never to infer characteristics about you — so the right to limit does not apply. We honor the principle anyway and do not use your sensitive information for any other purpose.
• Right to non-discrimination. We will not deny you service, charge you a different price, or give you a lesser experience for exercising any of these rights.

Your legal right to access and export your data is always free. The one-tap "Export all my data" button in the app is available to every account — free, trial, Pro, or lapsed — and your statutory right to obtain a copy of the personal information we hold about you never depends on having a paid subscription. If you prefer, or if you want a complete copy of all the personal information we hold about you, email us at contact@hometric.app and we will provide your data in a portable, machine-readable format at no charge, after verifying your identity as described in Section 14.

Canadian privacy rights

If you are in Canada, the federal Personal Information Protection and Electronic Documents Act (PIPEDA) and, where applicable, Quebec's Law 25 and the British Columbia and Alberta Personal Information Protection Acts give you rights over your information. We collect, use, and disclose your personal information with your consent. Because the photos of the inside of your home and your policy details are sensitive, and because they are processed by a U.S. AI provider, we rely on your express consent for those activities, given when you use the relevant features. You may:

• Access the personal information we hold about you, and ask how it has been used and disclosed.
• Correct inaccurate or incomplete information.
• Withdraw your consent at any time (subject to legal or contractual limits), including by deleting your account; withdrawing consent for core processing may mean we can no longer provide the Service.
• Complain to us first, and then, if you are not satisfied, to the Office of the Privacy Commissioner of Canada, or — if you are in Quebec — the Commission d'accès à l'information du Québec (CAI), or your provincial regulator in British Columbia or Alberta.

Quebec residents: Baran Labs LLC has designated a Privacy Officer responsible for the protection of personal information. You can reach the Privacy Officer using the contact details in Section 16. As explained in Section 5, our AI value estimates and coverage-gap flags are informational suggestions and are not decisions made about you based exclusively on automated processing; you may still contact the Privacy Officer with any question about how they are produced. A French-language version of this policy is available on request.

13. No biometric data; no facial recognition

Our AI analyzes photographs of physical objects and rooms to identify items and estimate their value. It does not perform facial recognition and does not scan, extract, or store any biometric identifier or biometric information — no face or hand geometry, no fingerprints, no retina or iris scans, and no voiceprints. We do not collect biometric data.

14. How to exercise your rights, and verification

Many rights can be exercised directly in the app (view, edit, export, and delete). For anything else, email us at contact@hometric.app. To protect your privacy, we will verify your identity before acting on a request — usually by confirming that you control the email address on the account. We will acknowledge your request promptly and respond within the time required by applicable law (for example, within 45 days under the CCPA, extendable once where permitted). We will not discriminate against you for exercising your rights. You may use an authorized agent to submit a request where the law allows, subject to verification.

15. How we protect your information, and breach notification

We use safeguards appropriate to the sensitivity of the information we hold:

• Your password is hashed with bcrypt and is never stored in readable form.
• Authentication tokens are stored on your device in the iOS Keychain.
• All communication with our servers uses HTTPS (TLS).
• Access to systems is limited, and we keep security audit logs.

No method of storage or transmission is perfectly secure. If a security incident affecting your personal information occurs and poses a real risk of significant harm to you, we will notify you and the appropriate regulators as required by law — in Canada, the Office of the Privacy Commissioner and, for Quebec users, the CAI, as well as the British Columbia or Alberta regulator where applicable — as soon as feasible, and we keep records of breaches as the law requires.

16. Who we are and how to contact us

The operator and the party responsible for your personal information is:

• Baran Labs LLC (d/b/a Hometric), a Florida limited liability company, United States
• Attn: Privacy Officer
• Email: contact@hometric.app

This is also the contact for the Privacy Officer responsible for the protection of personal information under PIPEDA and Quebec's Law 25.

17. Important disclaimer — we are not your insurer

HOMETRIC IS A DOCUMENTATION TOOL ONLY. IT IS NOT AN INSURER, INSURANCE AGENT, BROKER, PRODUCER, PUBLIC ADJUSTER, OR APPRAISER, AND IT DOES NOT PROVIDE INSURANCE, LEGAL, FINANCIAL, TAX, OR APPRAISAL ADVICE. AI-generated value and replacement-cost estimates, documentation scores, and coverage-gap flags are informational only, are not guaranteed, are not appraisals, and may differ materially from your insurer's valuation or settlement. You must verify all values, coverages, and policy terms against your actual policy and a licensed professional. Limitations of our liability and a binding arbitration agreement with a class-action waiver (which applies to U.S. users only and does not apply to users in Canada) are set out in our Terms of Service, which you should read.

18. Changes to this policy

We may update this Privacy Policy from time to time. When we do, we will change the Effective date at the top of this page and, where appropriate, notify you in the app or by email. Your continued use of the Service after an update means you accept the revised policy.