Privacy

• Your availability is only ever what you (or a group admin setting you up) typed in or imported. The app never tracks your location, your phone, or what you are doing.
• No analytics, no ads, no tracking pixels. Your data is never sold or shared for marketing.
• You choose what your group sees, and you can delete your account at any time.

• Account: your email address, your name, your time zone, and a password (stored only as a secure hash by our sign-in provider).
• Profile, if you add it: a short bio and a profile picture. The picture is re-encoded when uploaded, which strips hidden data like GPS coordinates, and it is kept in private storage.
• Schedule: the events you enter or import (name, type, days, times, and an optional description and location), dates you skip, and personal time. If you are a group admin, also any status you set by hand, like Busy or Do not disturb; everyone else's status comes from their schedule.
• Clock in and out: when you tap clock in or clock out at the house, the time you tapped. If your group outlined the house, then while you are clocked in the app checks your phone's location about once a minute (with your permission) to see whether you are at the house, so it can ask if you want to clock out when you are away. It never clocks you out on its own, and your location is never stored.
• Expenses, if you use them: shared expenses you add (a name, a date, an amount, and that you paid), payments you record to or from your group's treasurer, and who the treasurer is. Everyone in your group sees every expense and payment in the group, with names, so you can settle up. The treasurer can delete any expense or payment in the group and can record settle-up payments for members, which are marked as recorded by them. This is separate from the profile setting below. If you delete your account, your expenses and payments are deleted with it, and if you were the treasurer, the group no longer has one.
• Your settings and group: your privacy choices, which group you belong to, and your role in it.
• Security log: a record of security events such as failed sign-ins, invitations sent or revoked, members removed, and blocked access attempts. Some entries include an IP address. It never includes passwords or the contents of your schedule.
• Abuse limits: your IP address, briefly, to stop repeated sign-in or invitation attempts. These counters expire on their own within a few hours.

Only people in your own group can see anything about you. Nobody outside it can.

• Show my profile to group members is off until you turn it on. While it is off, other members do not see you at all: not your name, profile page, picture, bio, or status. Only your group admins see your name, marked “Not sharing”.
• Show my profile picture controls your picture on the board and on your profile page.
• Show my biography controls your bio on your profile page. Your profile page shows only your name, picture, and bio.
• Show my availability: when off, members see “Status hidden” instead of whether you are free.
• Event details on the tracker has three levels. “Only available / unavailable” shows no times or names. “Event times, but hide event names” adds when your current block ends and marks personal time as personal. “Event names and times” also shows event names. Event descriptions and locations are never shown to other members.

Group admins see more, so they can run the group: everyone in it, including people who are not sharing, with roles and join dates; the invitations they sent; and, for each member, their full schedule (event names, types, times, and locations), me time used, hours clocked in at the house, bio, and profile picture, whatever the settings above say. They never see your password or your event descriptions.

If you choose to add a schedule from a screenshot, that one image is sent to an AI model hosted by NVIDIA, which reads the times and class names out of it. This only happens when someone picks an image and asks for it to be read: you for your own schedule, or a group admin adding you before you sign up.

The image is cleaned first (hidden data like GPS coordinates is removed) and is not saved by this app. Nothing it reads is saved until a person reviews it and taps save.

These services process data only to run the app, not for their own purposes:

• Vercel hosts the website.
• Supabase stores the database, profile pictures, and sign-in accounts.
• Upstash keeps the short-lived abuse-limit counters.
• Resend delivers invitation emails.
• NVIDIA runs the AI model for the screenshot reader, only when it is used.

• Your account data stays until you delete it or a group admin removes you. Items you delete (an event, your picture) are gone right away.
• Deleting your account immediately removes your profile, schedule, personal time, status, profile picture, clock in and out history, and signs you out everywhere.
• The security log is kept for 180 days, then deleted automatically. When an account is deleted, its entries in the log are cut off from it and keep no name. They may still hold an IP address or an id that no longer matches anyone, until they expire.
• Invitations that were used, revoked, or expired are deleted after 180 days.
• Backups made by our database host may hold deleted data for a short time until they roll over.

• Change what your group sees any time in your privacy settings.
• Edit or delete any event, your picture, or any profile detail yourself.
• Delete your whole account from the Account page.
• Questions, or want a copy of your data? Ask your group admin.