HabiSync privacy policy

Last updated: 6 November 2026

This is a courtesy translation: the Italian version is the one that prevails. To read it, switch the language to Italiano at the bottom of the page.

HabiSync (habisync.app) is a free web app, with no advertising and not for profit, that helps housemates manage life in a shared home: common expenses, chores, shopping list, guests, notes and home information. This policy explains what data we process, why and with what safeguards.

1. Who the controller is

The data controller is Nicolae Guglea, a private individual who develops and runs HabiSync in a personal capacity. Contact for any privacy request: nikolaeguglea@gmail.com.

2. What data we process

a) Sign-in data. You can sign in in two ways, including both on the same account:

• with email and password: email address and password. The password is never stored in clear text: the authentication provider only stores an encrypted version (hash) that nobody, not even the controller, can read. To confirm your address and to recover your password we send you a one-time code by email;
• with your Google account, through "Sign in with Google":
• name, email address, profile photo and Google account identifier.

If you link Google to an account created with email (or vice versa), the two sign-in methods lead to the same HabiSync profile.

We ask Google only for this basic data (openid, email, profile permissions). HabiSync does not access Gmail, Google Drive, Google Calendar, your contacts or any other data in your Google account.

b) Data you enter (all optional, except what is needed to use a feature):

• profile: display name, photo, phone number;
• data for receiving repayments: PayPal.me username, IBAN and account holder, Satispay number, cash preference, notes;
• display preferences for each home (wallpaper and logo watermark), which only you can see;
• the app language, if you choose one: it stays in your profile, which your housemates can read, and on your account, so we can send you emails in your language;
• content of the homes you belong to: expenses and repayments, shopping list items, chores, guests, periods away, events, board notes, home information and any receipt photos.

c) Technical data:

• essential technical cookies to keep you signed in, remember the language (lingua cookie, one year) and keep an invite code for one hour while you sign in;
• preferences stored only on your device (localStorage), which never reach our servers: the light/dark theme, whether you have seen the cookie notice, your choice on the install sheet, and the chores postponed for today. They stay until you clear the site's data in your browser;
• technical logs of the hosting providers, used only for security and operation;
• if you turn on notifications: the technical identifier of your device for push notifications.

3. Why we process it and on what basis

We do not use your data for advertising, profiling or marketing; we do not sell it or pass it on to third parties; we do not use third-party analytics or tracking tools.

4. Use of data received from Google

The use and transfer to other apps of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. Google data is used only to identify you and to show your name and photo to your housemates inside the app.

5. Who can see your data

• The housemates of the homes you belong to: they see your name, your photo, the payment details you chose to enter and the content shared in the home. Users of other homes see nothing.
• The controller: accesses data only when needed for maintenance, security or to answer a request from you.
• Technical providers that host the service on our behalf (data processors):
  • Supabase (database, authentication and file storage, such as your profile photo if you upload one): data stored on servers in the European Union (Frankfurt);
  • Vercel (app hosting): may process technical data outside the EU too, with the safeguards required by the GDPR (standard contractual clauses and/or the EU-US Data Privacy Framework);
  • Google ("Sign in with Google" service);
  • Resend (sending the emails with sign-in codes, from noreply@habisync.app): receives only your email address and the content of the message; may process data outside the EU too, with the safeguards required by the GDPR;
  • if you turn on notifications, the push services of Apple, Google or Mozilla receive encrypted messages to deliver to your device.

6. How long we keep data

• Your profile stays for as long as you have a HabiSync account.
• If you leave a home (or are removed), the expenses, repayments and activity you recorded or that concern you stay visible to your housemates as history, together with your name and photo, because they are needed to make the accounts add up; if you still have an open balance, you appear among "former housemates with an open balance" until it is settled. Your contact and payment details (phone, PayPal.me, IBAN, Satispay), however, are no longer visible to that home.
• If you ask to delete your account, we delete your profile and payment details; in the history of the homes your name is replaced by "Deleted user".
• Providers' backup copies are overwritten according to their technical schedules.

7. Security

All communication takes place over HTTPS; data is encrypted at rest by the database provider; each home is isolated from the others at database level; access always requires signing in.

8. Your rights

You can ask at any time to access your data, correct it, delete it, restrict its processing, receive it in a readable format (portability) or object to its processing, by writing to nikolaeguglea@gmail.com. You can also lodge a complaint with the Italian Data Protection Authority (Garante). You can change your password at any time from your profile. You can revoke HabiSync's access to your Google account at any time from myaccount.google.com/permissions.

9. Minimum age

HabiSync is intended for adults.

10. Changes

If we change this policy we update the date at the top. If the changes concern the data collected or how we use it, we tell you in the app and, if necessary, ask for new consent before applying them.