Privacy policy

HomeHand is operated by Spike Labs, Inc. (“Spike Labs,” “we,” “us”), a Delaware corporation. This policy explains what personal information the HomeHand mobile and web apps collect, how we use it, and your choices.

We only collect what HomeHand needs to function:

• Account information — your name, email address, and authentication identifiers, provided when you sign in via Clerk (our authentication provider).
• Content you submit — messages, calendar events, photos, and files you choose to share with the assistant. The app requests camera, photo library, and file access only when you tap to attach a photo or document.
• Voice input — if you use voice features, audio is sent to our speech-to-text provider for transcription, then discarded. We do not retain raw audio recordings.
• Device and usage data — basic technical info (app version, OS version, crash logs, anonymized event analytics) to keep the app working and improve reliability.
• Connected services — when you link a third-party service (calendar, email, etc.), we store an OAuth token to act on your behalf with the scopes you authorize. We do not store the underlying service password.

• To provide HomeHand’s core features — drafting messages, surfacing reminders, taking actions you approve.
• To authenticate you and keep your account secure.
• To diagnose crashes and improve performance.
• To communicate with you about your account or material changes to the service.

We do not sell your personal information. We do not use your content to train third-party AI models without your explicit opt-in.

HomeHand uses a small set of subprocessors to operate:

• Clerk — authentication and user management
• AWS — backend hosting, database, and file storage
• OpenAI, Anthropic, and other LLM providers — language model inference for assistant responses (zero-retention enterprise terms where available)
• Speech-to-text and text-to-speech providers — for voice features (e.g. Deepgram, Cartesia)
• Push notification services — Apple Push Notifications and Firebase Cloud Messaging, to deliver alerts
• Analytics — PostHog, for anonymized product analytics and crash reporting

We share information with these providers only as needed for them to provide their service to us. We do not share your information with advertisers.

We retain your account information and content as long as your account is active. You can delete your account at any time from within the app, which removes your personal data from our systems within 30 days, except where we’re required to retain it for legal or accounting reasons.

You can access, correct, export, or delete your personal data by contacting us at support@spikelabsinc.com. Depending on where you live, you may have additional rights under laws like the GDPR (EU/UK) or CCPA (California).

HomeHand is intended for adults managing a household. The app is not directed to children under 13, and we do not knowingly collect personal information from children under 13. If you believe a child has provided us information, contact us and we will delete it.

We use industry-standard safeguards (TLS in transit, encryption at rest for sensitive fields, scoped OAuth tokens, least-privilege access controls). No system is perfectly secure; we promise to tell you promptly if a breach affects your data.

We’ll post changes here and update the “Last updated” date. For material changes, we’ll notify you in-app or by email before they take effect.

Questions, requests, or concerns: support@spikelabsinc.com.

Spike Labs, Inc.