Privacy Policy

Last updated: 2026-04-17.

HouseholdOS is a local-first app. There is no server, no account, and no cloud sync. Your bills, tasks, documents, and expirations stay on your device.

What we don't do

• No account creation. No email, phone number, or profile.
• No analytics SDK, no crash reporter, no ad network.
• No transmission of your bills, tasks, documents, or expirations to any server.
• No tracking across apps or websites.

What's stored on your device

• Local database — your household, members, bills, tasks, and expirations live in a SwiftData store inside the app's iOS sandbox.
• Encrypted document vault — files you import are encrypted with AES-GCM before being written to disk. The encryption key is held in the iOS Keychain with kSecAttrAccessibleAfterFirstUnlockThisDeviceOnly.
• Local notifications — reminders are scheduled on-device via iOS. No push server is involved.

Permissions the app may request

• Face ID / Touch ID — only if you enable app lock or sensitive-documents mode.
• Camera / Photo Library — only if you attach a photo to a document or receipt.
• Notifications — only when you opt in to reminders.

Anonymous product metrics

HouseholdOS can record anonymous usage metrics (e.g. "user opened the dashboard", "user added their first bill") to help us understand how the app is used and improve it. Every metric property uses a fixed, bounded alphabet; the app's code specifically prevents any user-entered text (names, titles, amounts, descriptions) from being attached to a metric. You can turn metrics off in Settings → Analytics.

In-App Purchases

HouseholdOS offers an optional upgrade — HouseholdOS Plus — as a monthly subscription, yearly subscription, or one-time lifetime unlock. Purchases are handled entirely by Apple through the App Store. HouseholdOS never sees your name, address, or payment method. The app verifies the purchase with Apple's StoreKit on device; no purchase data leaves your device except to Apple.

If you subscribe, Apple renews the subscription until you cancel it in the App Store. Lifetime is a one-time purchase with no renewal.

Your choices

• Export — Settings → Data → Export JSON writes a single readable file you control.
• Delete — Settings → Delete all data removes the database, the encrypted vault, and the Keychain key. This is final.
• Metrics kill-switch — Settings → Analytics.

Children

HouseholdOS is not directed at children under 13.

Changes

We will update this page with a new "Last updated" date when anything material changes.