Your house,
your data.

What we don't do

• No ads. No ad networks. No tracking pixels.
• No selling or sharing your data with third parties for their own purposes.
• No third-party analytics SDKs watching what you do.
• No reading your messages, expenses, or photos for training AI models or anything else.
• No cross-app profiles or behavioural tracking.

What we do store, and why

CoHabit is a household coordination app, so we store the data that makes it work:

• Your profile — name, email, avatar — so housemates can see who you are.
• House memberships — which houses you belong to and your role.
• The content you create inside a house — expenses, chores, meals, messages, photos, notes, birthdays, fairness claims. Visible only to members of your house.
• Push-notification tokens, if you've granted permission, so we can deliver reminders to your device.

Where it lives

Your data lives in two places: Supabase (Postgres database + file storage) and Cloudflare R2 (photos and voice notes). Everything is encrypted in transit (TLS) and at rest. House content is isolated at the database level — another house literally cannot read your house's rows.

Who can see your data

• Members of the same house. That's it.
• Gift-jar ideas are hidden from the recipient by design.
• Direct messages are visible only to participants.

Messages and content are stored unencrypted on our infrastructure — Supabase admins could technically read them if compelled by law or if they went rogue. This is not end-to-end encryption like Signal. We're honest about this.

Your controls

Retention

We keep your data for as long as your account exists. When you delete your account, your profile and memberships are removed immediately. Content you posted in shared spaces (messages in a house chat, for example) stays with the house unless you delete it individually beforehand — because removing a single member's messages from a group conversation would rewrite history for everyone else.

Photos & voice notes

Photos are compressed under 1 MB on your device before upload, then stored in Cloudflare R2. URLs are unguessable UUIDs — not publicly indexed or searchable — but anyone you share a URL with could view that file. Voice notes follow the same pattern. Treat shared URLs like any other file you'd attach to an email.

Cookies & tracking

The mobile app doesn't use cookies. It stores a login session on your device via encrypted storage, and nothing else. No third-party tracking pixels, fingerprinting, or cross-site identifiers.

Questions or corrections

If anything here seems off, or you'd like a specific piece of data exported or deleted beyond the automated tools, email indra@v4u.pro. This policy may update as the product changes; we'll bump the date above and surface a notice in-app when that happens.