Huus
Huus

Privacy

Privacy policy

Huus stores as little as it can: no foreign fonts, no foreign scripts, no foreign images. The only thing that ever leaves is anonymous usage statistics, and only if you agree to them.

1. Data controller

Responsible for the processing of data in this app:

Email: info-7mw@googlegroups.com

This is a private, non-commercial hobby project.

2. What is processed

The app processes:

  • Account: your email address, your name and, if you upload one, your profile picture.
  • Home: rooms, tasks, notes, shopping lists, and who did what when. Everyone in your household can see it.
  • Sign-in: a magic link that lasts 20 minutes and works once, plus a session cookie.
  • Technical: server logs including your IP address, to run the service and to keep the forms from being abused. Kept briefly, not analysed.

3. Legal basis

Processing is based on:

  • Art. 6(1)(b) GDPR (contract): your account, and everything the app does for your home
  • Art. 6(1)(f) GDPR (legitimate interest): operating the service, security, abuse protection
  • Art. 6(1)(a) GDPR (consent): the anonymous usage statistics, and only while you agree

4. Processors

Three service providers see data: an email provider (EU-hosted) that delivers the sign-in and invitation mails, and an object store (AWS Europe) for the profile pictures. PostHog (EU-hosted) joins them for the usage statistics, but only once you have agreed. All three act on instruction as processors under Art. 28 GDPR.

5. Usage statistics

There is no advertising, no tracker, and no external font or CDN. If you agree, PostHog anonymously counts which pages you open. What is on those pages stays here: tasks, names, notes and shopping lists are never sent. Until you agree, the script is not loaded at all and the app makes no request to any other address whatsoever. You can change your mind in Settings at any time. The how-to links to Google, YouTube and TikTok are references and nothing more; whatever is on the other end is the respective provider's responsibility, not ours.

6. Cookies and local storage

One technically necessary session cookie keeps you signed in. The app also keeps tasks and ticks in your browser's storage so it still works without signal; that stays on your device and is cleared when you sign out. The only cookies we have to ask about are PostHog's, and they are set only after you have agreed. Your answer itself is remembered by your browser, so we do not have to ask again on every visit.

7. Retention

Sign-in links expire after 20 minutes. Account data stays for as long as the account does. You can delete it yourself from your profile, immediately and completely. If you are the last person in a home, that home is deleted with you.

8. Your rights

You have the right to:

  • Access the data stored about you (Art. 15 GDPR)
  • Rectification of inaccurate data (Art. 16 GDPR)
  • Erasure of your data (Art. 17 GDPR)
  • Restriction of processing (Art. 18 GDPR)
  • Data portability (Art. 20 GDPR)
  • Object to processing (Art. 21 GDPR)
  • Lodge a complaint with a supervisory authority (Art. 77 GDPR)