Information we collect
When you use Google Sign-In, WithMyHomies receives:
- a stable Google account identifier;
- your verified Google email address; and
- basic profile information, including your name.
We do not request access to your Gmail inbox, Google Drive, contacts, calendar, or Google password. WithMyHomies does not support Google profile-image collection.
The application also stores information you or other authorized household members provide, such as display names, household membership, expenses, payment-account records, chores, notes, and approved attachments.
How we use information
We use Google account information only to:
- authenticate you and protect your session;
- create or reconnect you to your WithMyHomies account;
- initialize your editable display name;
- match your verified email address to household invitations; and
- prevent fraud, abuse, and unauthorized access.
Household information is used to provide the expense, chore, membership, account, and security features you request. We do not use personal information for advertising or behavioral profiling.
Sharing and service providers
We do not sell personal information. Information is visible to other members only as needed for the household features and permissions described in the application. Private Google identifiers and authentication details are not shown to household members.
We use Google to authenticate accounts and Cloudflare to deliver and protect the public website and private application connection. Application data is processed by the private hosting, database, object-storage, and malware-scanning systems needed to run WithMyHomies. These providers and systems receive only the information needed to perform their function.
We may disclose information when required by law or when reasonably necessary to protect users, the service, or the rights and safety of others.
Storage, retention, and deletion
WithMyHomies stores account and household information in private systems with access controls. Authentication tokens are kept in secure, HTTP-only cookies rather than browser storage. Operational logs exclude credentials and unnecessary private details and are retained for up to 30 days.
You can deactivate your account or request deletion from the application. An account deletion request has a 30-day cancellation period. After that period, Google identifiers, email address, display name, active sessions, and outstanding invitations are removed. Historical household records that must remain understandable may be retained for the life of the household with the person identified only as “Deleted account.”
You can also revoke Google access from your Google Account permissions. Revocation stops future Google authentication but does not by itself delete the WithMyHomies account. For help, email [email protected].
Security
We use technical and organizational safeguards designed to protect personal information, including encrypted HTTPS connections, restricted household access, server-enforced authorization, short-lived sessions, and separation between service data stores. No security measure can guarantee absolute protection.
Google API data
WithMyHomies uses only the Google OpenID Connect permissions openid, email, and profile. Our use and transfer of information received from Google APIs follows the Google API Services User Data Policy, including its Limited Use requirements.
Public website
This informational website does not use analytics, advertising trackers, forms, or application cookies. Cloudflare may process standard connection information, such as an IP address and request metadata, to deliver and secure the site according to its service terms.
Changes and contact
We may update this policy when the service or its data practices change. The effective date at the top identifies the current version. Material changes will be communicated through the application where appropriate.
Questions or privacy requests can be sent to [email protected].