Privacy Policy

Who's Home — Last updated: March 1, 2026

This privacy policy describes how NorthMoss ("we", "us", "our") collects, uses, and protects your information when you use the Who's Home app ("the App").

Information We Collect

The App collects the following information to provide its core functionality:

Name — Your display name, shown to other household members.
Email address — Used to deliver your sign-in PIN and identify your account within a household.
Dinner status — Whether you are "In" or "Out" for dinner on a given day, shared with your household.
Household notes — Optional notes added to a day (e.g., "Pizza night"), visible to all household members.

How We Use Your Information

Your information is used solely to operate the App:

Authenticate you via a secure, one-time PIN sent to your email.
Display your name and dinner status to members of your household.
Send optional push notifications about status changes.

We do not use your information for advertising, analytics, profiling, or any purpose beyond the App's core functionality.

Data Sharing

We do not sell, rent, or share your personal information with third parties. Your data is only visible to members of your household within the App.

Third-Party Services

The App uses the following third-party services to operate:

Google Firebase — For data storage (Firestore), authentication, and push notifications (Cloud Messaging). Firebase processes your data in accordance with Google's privacy policy.

No other third-party services, analytics tools, or advertising SDKs are used.

Data Storage and Security

All data is stored in Google Firebase (Firestore) with security rules that isolate each household's data.
PINs are hashed using bcrypt before storage. We never store plaintext PINs.
All network communication uses HTTPS/TLS encryption.
App Check (App Attest) is enforced to ensure only legitimate app instances can access backend services.

Data Retention

Your data is retained as long as your household exists in the App. If you are removed from a household by an admin, your member record is deleted and your authentication tokens are revoked. There is currently no self-service account deletion; contact us at the email below to request removal of your data.

Children's Privacy

The App is designed for household use and may include children as household members, added by a parent or guardian who serves as the household admin. We do not knowingly collect information from children without parental involvement.

Your Rights

You may request access to, correction of, or deletion of your personal data by contacting us. Household admins can remove members directly within the App.

Changes to This Policy

We may update this policy from time to time. Changes will be posted on this page with an updated date.

Contact

If you have questions about this privacy policy or your data, contact us at:
[email protected]