Privacy Policy

The short version

Home Slate is a household ledger for service records, house-help attendance and pay, bills, income and expenses. Local records work offline. Your ledger lives on your phone. It is sent to our cloud provider only if you create an account to turn on backup, and you can separately choose to export or share records through your phone's share sheet. Diagnostics and optional usage analytics are described below.

No account is needed to start a local guest ledger.
No contacts, GPS or photo access. Optional analytics and its technical identifiers are described below; advertising features are disabled.
We do not sell your data, and we do not share it with advertisers or data brokers.
Cloud backup uses an account and is turned on by you; exports and statements leave the phone only when you choose to share them.
Settings → Clear all data removes records from this phone. Account and cloud deletion is a separate action in Profile.

Who we are, and what this covers

Home Slate is made by Kreativish AI, powered by SMAT Solutions Pvt. Ltd., a private limited company in India. Where this policy says "we", that is the company, and it is the one responsible for the data described here. This policy covers the Home Slate mobile app on iOS and Android and the Home Slate website. It does not cover the App Store, Google Play, or anything else you reach by leaving the app. For anything in this policy, write to kreativish.ai@gmail.com and a person will answer.

What stays on your phone

The app is built offline-first, so your ledger is written to your device's own storage and read back from there. These records stay local unless you enable account backup or explicitly export or share them:

Services you set up — the name you gave the vendor, which template it came from, the rate, the unit, any monthly commission, and the delivery schedule.
Daily entries — the date and the quantity you logged, plus a snapshot of the rate at the time so old months do not change when a rate does.
Payments you recorded — amount, date, which service it settled, and any note you added.
Household income and expenses — amounts, dates and descriptions you record.
Preferences — currency, appearance, and the times you asked to be reminded.
Your notification inbox — the reminder messages the app has shown you.
There is no hidden second ledger.

If you create an account

An account exists for one reason: so a lost or replaced phone does not cost you your ledger. It is optional: you can start and keep a guest ledger without one. Account-owned records may stay protected until the original account is recovered if the saved session expires or cannot be opened. When you make an account, this is what is held with our cloud provider (Supabase):

Your email address and password for authentication. Supabase stores a one-way password hash. When you delete an account on this website, Home Slate relays your password to Supabase over encrypted connections and does not store or log it.
A one-time code sent to your email to confirm the address or reset a password.
A copy of your ledger — services, daily entries, payments, household income and expenses, and your currency and setup preferences — so it can be restored on another device.
An optional display name, if you set one.

How your cloud copy is kept apart

Every synced row is stamped with your account id, and the database enforces at the row level that a signed-in account can only ever read and write its own rows. There is no shared table, no vendor-side view of your ledger, and no way for another Home Slate user to reach your data. Your session token is held in your device's secure keystore — the iOS Keychain or the Android Keystore — not in ordinary app storage, and every request travels over an encrypted connection.

What we never collect

Some of this is worth stating flatly, because a ledger app could plausibly ask for all of it and this one does not.

No contacts or address book.
No GPS access or location permission. If you opt into analytics, the provider may derive approximate location from your network address as described below.
No photos or camera access.
No ad SDKs or request for cross-app tracking permission; advertising features are disabled.
No microphone, no calendar, no health data, no files outside the app.
No selling, renting, or sharing of your data with advertisers or data brokers. There is no version of Home Slate where your ledger is the product.

Reminders and notifications

Reminders are scheduled by your phone, on your phone. When you set a nightly log reminder or a month-end settle reminder, the app asks the operating system to fire it locally at that time. No reminder content is sent to a server, there is no push service holding a device token, and the reminders keep working with the phone in aeroplane mode. Turning notifications off in Settings or in your OS settings stops them entirely.

Subscriptions and payments

On iOS, Pro purchases use the App Store, and subscription status is managed through RevenueCat. Android purchases are currently disabled. Payment details are handled by the store.

We never see, receive, or store your card, UPI, or bank details. The store handles payment end to end.
RevenueCat holds a purchase identifier and your entitlement status so the app knows whether Pro is active and can restore it on a new device. When you sign in, your Home Slate account identifier is used to associate your purchases with that account; your email and ledger are not sent to RevenueCat.
Your ledger is not sent to RevenueCat or to the stores.
Cancelling is done in your App Store or Google Play account, not here — we cannot cancel it for you.

Crash reports and diagnostics

When diagnostics are configured for a production build, unexpected JavaScript errors and supported native crashes or app hangs send technical reports to help us fix bugs. Reports retain code stack frames, build identifiers and app version. JavaScript and native filters remove free-form error messages, user identity, request data, breadcrumbs, local variables and extra payloads before transmission. Screenshots, view hierarchy, session replay, automatic session reporting and performance tracing are disabled. Android C++ crash dumps are disabled. Native diagnostics may keep crash reports in the app’s private storage until the next launch. No report is sent when diagnostics are not configured for that build.

Usage analytics

If you explicitly switch on Share anonymous usage in Settings and analytics is configured for your platform, Google Firebase Analytics receives product events — for example that onboarding finished, an entry was saved, or the paywall was seen. Our event fields carry fixed categories or count buckets and exclude amounts, ledger dates, notes, email addresses, vendor or household names, and your Home Slate account id. The analytics SDK also measures app sessions, screen views and purchases automatically, assigns a pseudonymous app-instance identifier, and may derive approximate location from a masked network address. This measurement does not use GPS or location permission. Analytics is off by default, advertising features stay disabled, and you can withdraw consent in Settings at any time.

When you share a statement or month summary, the image is drawn and captured on your device and handed to your phone's own share sheet. A temporary image is used during sharing and released afterward; the operating system may also manage temporary caches. Home Slate does not upload the statement and never sees where it went. You choose the app and recipient. The statement contains the service, person's records or household summary you choose to share. Once sent, it is governed by the receiving app's policy.

The website

The Home Slate website is a separate surface from the app, and it is deliberately quiet.

Google Analytics loads only if you choose Allow analytics. That choice is stored in your browser so we can remember it; advertising signals stay disabled.
Fonts are served from this site, so reading a page makes no request to a font network.
Product videos hosted on this site use the browser’s own player. External video channels are linked out, so no third-party player loads on the page.
The price you are shown is chosen from your browser's own language setting. There is no IP location lookup, and that preference is not stored or sent anywhere.
If you write to us through the contact form, the name, email, category, and message you typed are saved so we can answer, and a copy is emailed to us and to you.

Who else touches your data

We use a small number of established providers, each for one job, and none of them for advertising:

Supabase — accounts and cloud backup, if you create an account.
Apple App Store and Google Play — distributing the app and handling any store purchases.
RevenueCat — knowing whether your subscription is active so it can be restored.
Sentry — crash and error reports, scrubbed as described above, when enabled.
Vercel — hosting the website.
Google Analytics and Firebase Analytics — anonymous website or app usage only after you opt in; advertising features are disabled.
An email provider — delivering account verification codes and replies to your support messages.

Where your data lives, and how long

Data on your phone stays until you delete it — the app never expires your ledger, and old months remain readable for as long as you keep the app installed.

Cloud backup data is held on our provider's servers, which may be outside your country. Where that means your information crosses a border, it travels encrypted and is held under the same terms described here.
Your cloud copy is kept while your account exists, and is removed when the account is deleted.
Support messages are kept while we need them to answer you and to recognise a repeat issue.
Crash reports age out on our provider's standard retention schedule.
Optional Google analytics data follows Google's configured retention period; you can stop future collection at any time.

Your rights, and how to use them

You have the right to see your data, correct it, take it with you, and have it deleted, and to withdraw consent for anything you switched on. Most of it you can do yourself, immediately, without writing to anyone:

See and correct — every entry, rate, and payment is editable in the app.
Take it with you — export your records as JSON in Settings, or restore synced records by signing in with the same account on a new device. A full export can contain private household records.
Delete from the device — Settings → Clear all data.
Withdraw consent — sign out to stop cloud sync; turn off reminders to stop notifications; turn off Share anonymous usage to stop app analytics.
Delete everything, including the cloud copy and the account itself — Profile → Delete account, signed in, or use the password-confirmed form at https://www.thehomeslate.app/delete-account. You can also email kreativish.ai@gmail.com from the address on the account for help.
We answer requests within 30 days, and we do not charge for them.

Deleting your data

Settings → Clear all data removes the ledger and preferences from this phone. For a signed-in account, the app first confirms backup and signs out; if syncing cannot finish, it leaves the phone data in place and asks you to retry online. The cloud account remains. If Restore your account is shown, recover the original account first, or use the separate Clear only this phone choice, which can remove edits not yet backed up. If Finish account cleanup appears, retry cleanup before opening the ledger. Local clearing has no undo. To delete the account and cloud copy, use Profile → Delete account while signed in, or the password-confirmed form at https://www.thehomeslate.app/delete-account. If an older app cannot finish account cleanup, use that website form and then retry cleanup or clear local Home Slate data on each phone. You can email kreativish.ai@gmail.com from the registered address for help. Account deletion does not cancel a store subscription or remotely erase local data on other phones. Deleting the app alone does not delete a cloud account.

Children

Home Slate is a household bookkeeping tool made for adults and is not directed at children. We do not knowingly collect anything from a child under 13, or under the minimum age of consent where that is higher. If you believe a child has created an account, write to kreativish.ai@gmail.com and we will delete it.

Security, honestly stated

Connections are encrypted in transit, passwords are stored only as one-way hashes, session tokens are held in the device's secure keystore, and the database refuses cross-account reads at the row level. That said, no app or service can promise perfect security, and we will not pretend otherwise. Choose a password you use nowhere else, and keep the lock screen on the phone that holds your ledger. If we ever discover a breach affecting your data, we will tell affected users and the relevant authority as the law requires.

Changes to this policy

As the app grows, this policy will be updated — the date at the top always says when. If a change is material, such as collecting something new or adding a provider, we will say so in the app before it takes effect rather than quietly changing the text. Earlier versions of this document are kept in the project's public repository history.

Contact

Questions about privacy, or a request to see or delete your data: kreativish.ai@gmail.com. A person reads that inbox, and you will get an answer.

This is the same text the app shows under Settings → Privacy Policy. If the two ever disagree, tell us at kreativish.ai@gmail.com — that is a bug, not a technicality.