Privacy policy
Last updated: 21 October 2026
This policy is for the Android and iPhone app "Home Genie". The app is made by NK Softwares, M2R 3Y4, Ontario, Canada, which is responsible for your personal data ("we"). Privacy contact, and grievance officer for users in India: Owner, [email protected].
In short
The app keeps a record of the appliances, equipment and vehicles in your home. Everything you add stays on your phone, encrypted. We don't sell data, show ads or track you across other apps.
What stays on your phone, and never reaches us
Devices, vehicles, reminders, service logs, notes, photos, receipts and manuals are stored only on your phone, in an encrypted database. They are not uploaded, not synced, and not included in your phone's own cloud backup. Photos are taken with the camera only when you start a scan or take a photo, and labels are read on the phone itself. If you export a backup file, it is encrypted with a password you choose, and you decide where it goes.
What we collect
- Your account, only if you create one. An account is optional. It holds your email address, your name and profile photo if your sign-in provider (Google or Apple) gives them, and an account ID. It is used only to let you sign in. No household data is linked to it.
- Usage statistics, which don't identify you, only while "Share usage stats" is on. The app reports which screens and features are used, and how many people upgrade, from a fixed list (for example "a device was added", with its category such as "Major Kitchen Appliances" and whether it was scanned or typed in, or "a parts link was opened", with the shop and the type of part), with the date, the app version, the phone's platform and system version (for example Android 16), the country you chose and your plan (Free or Premium). Two categories (Health & Wellness, and Baby & Nursery) are never reported. It never sends anything you typed, a device's name, brand, model or serial number, photos, files or your account. Your IP address reaches the server, as with any internet connection, but the server doesn't store it. Events carry a random identifier that is replaced every 24 hours, so we can't tell who sent them or follow a phone from one day to the next, and they are deleted after 12 months. In Canada the switch starts off. You can turn this off at any time in Settings › Backup and Privacy; turning it off also deletes anything not yet sent.
- Manual lookups. When you add a device and the app looks for its manual, it sends the brand, the model and your country to our server, which asks manual providers (Icecat, then Brave Search). Never the serial number or your account. To stop any one phone from flooding the server, it keeps a one-way coded form of your IP address (made with a secret key, so it can't be turned back into the address) for about 2 hours; the address itself is never stored. When a manual is found, your phone downloads it directly from the website that holds it, often the manufacturer's or a seller's site, which sees your IP address as any website you visit does; a very large manual opens in your browser instead. If you tap Web Search, a device's brand and model, or a vehicle's make, model and model year, go to your phone's search app or to Google.
- Purchases. Premium is bought through Google Play or the App Store. They handle payment; we never see your card details. The app checks your subscription with the store on your phone.
Why we use it
- Your account: to let you sign in, because you asked for an account (in the UK: to perform our contract with you).
- Usage statistics: to see which features are used and improve the app (in the UK: our legitimate interests, and you can object at any time with the switch). In Canada the switch starts off, and we collect them only if you turn it on.
- Manual lookups and the coded IP address: to find the manual for a device you added, and to keep the service working for everyone (in the UK: our legitimate interests).
- Purchases: to give you Premium (in the UK: to perform our contract with you).
Who processes it
- Supabase (supabase.com) hosts accounts, usage statistics and the manual lookup server for us, in its Canada (Central) region. Supabase keeps short-term request logs, which may include IP addresses, for a few days.
- Google (Sign in with Google, Google Play) and Apple (Sign in with Apple, the App Store) when you use them; their own privacy policies apply. If you allow your phone to share crash reports with app developers, Apple or Google may send us reports of the app crashing; they come from Apple's and Google's own systems, not from the app, and describe the crash and the phone model, not your household data.
- Icecat and Brave receive only brand, model and country, from our server, not from your phone.
- The website holding a manual the app found (often the manufacturer's) receives a normal download request from your phone, and Google or your phone's search app receives a device's brand and model, or a vehicle's make, model and model year, if you tap Web Search; their own privacy policies apply.
- Shop links open in your browser or the shop's app, where that shop's privacy policy applies. Some links may earn us a commission; this is shown wherever they appear.
We don't sell or share personal data with anyone else, and we don't use it for advertising.
Where your data is processed
Supabase stores accounts, usage statistics and the lookup limits on servers in Canada. If you live outside Canada, your data is sent there; the UK recognises Canada as protecting this kind of data adequately. Our contract is with Supabase Pte. Ltd. of Singapore. Its staff may reach the data from other countries, only to run the service for us, under a data processing agreement that requires it to use the data only on our instructions and to protect it at least as well as this policy does. Data held in another country can be subject to that country's laws, including access by its authorities.
Security
Data sent by the app is encrypted in transit (HTTPS). Data on your phone is encrypted with a key held by your phone's secure hardware.
How long we keep it
Your account is kept until you delete it. Usage statistics are deleted after 12 months. The coded form of your IP address used to limit manual lookups is deleted after about 2 hours. Supabase's request logs are kept for a few days.
Your rights
You can ask us for a copy of your account data, to correct it or to delete it. In the UK you can also ask us to limit how we use it or to send it to you in a reusable form, and you can object to our use of it; turn off the usage stats switch to object to usage statistics. Where we rely on your consent, you can withdraw it at any time, as easily as you gave it. Email [email protected] from your account's address; we answer within 30 days, and may ask you to confirm the request. Your name and photo come from Google or Apple: change them there and they update the next time you sign in. Usage statistics carry no name, email or account, and their identifier changes every day, so we can't find one person's statistics.
Do Not Track
The app doesn't track you across other apps or websites, so it has nothing to change when your browser or phone sends a "Do Not Track" signal.
Deleting your data
- Your account: in the app, go to Settings › Account › Delete Account. Without the app, email [email protected] from the address on the account; we complete requests within 30 days. Steps: https://myhomegenie.app/delete-account
- Usage statistics: we can't find one person's statistics, so there is nothing to delete for you; turn the switch off to stop them.
- Everything on your phone: delete it in the app or uninstall the app.
Questions and complaints
Email [email protected] first. We reply within 30 days and tell you what we did and why. If you're not satisfied, you can complain to the privacy regulator where you live:
- Canada: Office of the Privacy Commissioner of Canada, priv.gc.ca; in Quebec, Commission d'accès à l'information, cai.gouv.qc.ca
- United Kingdom: Information Commissioner's Office, ico.org.uk
- Australia: Office of the Australian Information Commissioner, oaic.gov.au
- India: Data Protection Board of India
- United States: your state's attorney general (in California, oag.ca.gov)
Children
The app is meant for adults managing a household. It is not directed at children, and we don't knowingly collect personal data from anyone under 18. If you believe a child has created an account, email us and we will delete it.
Changes
If this policy changes, we update this page and the date at the top.