Last updated: March 23, 2026
We collect the following types of information:
We use your information to:
We do not sell your personal information. We do not use your data for advertising.
Your data is stored in a PostgreSQL database hosted on Neon (cloud infrastructure). Uploaded files are stored on Cloudflare R2. All data is transmitted over HTTPS. Passwords are hashed with bcrypt. TOTP secrets for two-factor authentication are encrypted with AES-256-GCM at rest.
We implement reasonable security measures but cannot guarantee absolute security. You are responsible for keeping your account credentials safe and enabling two-factor authentication for additional protection.
We share your data only in these circumstances:
We retain your data for as long as your account is active. Deleted homes are soft-deleted and recoverable for 30 days before permanent removal. If you delete your account, we will remove your data within 30 days, except where retention is required by law (e.g., billing records).
You can export a complete JSON snapshot of any home's data (rooms, items, tasks, service records, documents, and research notes) at any time through the home settings page.
We use essential cookies for authentication (session tokens) and the beta access gate. We do not use tracking cookies or third-party analytics cookies.
You have the right to:
The Service is not intended for children under 13. We do not knowingly collect personal information from children under 13.
We may update this Privacy Policy from time to time. We will notify you of material changes via email or through the Service.
For privacy-related questions or requests, contact us at privacy@dwellhq.app.