Privacy Policy

1. Who we are

Prax (“Prax,” “we,” “us,” or “our”) is a home-maintenance application that helps you track your home, its systems and appliances, maintenance tasks, expenses, and related documents. This Privacy Policy explains what information we collect, how we use it, who we share it with, and the choices you have.

Prax is operated by an individual, not an incorporated entity. If you have questions about this policy or your data, contact us at privacy@praxhome.com.

This policy applies to the Prax website and mobile application (the “Service”).

2. The short version

The mobile app can be used as a guest without first providing an email address or password. Guest use still creates a cloud-backed anonymous account so your home data can be stored and synced; it is not a local-only mode. We collect the information you provide to run your home profile, plus technical and usage data used to operate, secure, and improve the Service. If you choose an AI-assisted feature, the inputs needed for that feature are sent to our AI provider. We use service providers to host the app, store data, deliver notifications, process optional integrations, measure usage, and monitor errors. We do not sell your personal information. You can use in-app controls or contact us to access, correct, export, or delete your data. The full detail is below.

3. Information we collect

Information you provide directly

• Guest and account information: on first use, the mobile app automatically creates a cloud-backed anonymous Supabase user and session identified by a random user ID. A guest does not initially provide an email address or password. If you later save the account, the email address, password, and any profile name you provide are attached to that same user identity so your existing data is preserved. Passwords are handled by Supabase and stored only in hashed form; we never see or store your password in plain text.
• Home profile: your home’s address and details such as year built, square footage, number of bedrooms/bathrooms, number of floors, and whether you have a basement, garage, or yard.
• Home systems and inventory: rooms and zones, appliances and devices (including brand, model, installation date, and warranty information), heating/cooling and water-heater types, safety devices, and outdoor equipment.
• Tasks and maintenance records: maintenance tasks, completion records, notes, and related scheduling information.
• Expenses: expense amounts, categories, classifications, dates, notes or vendor details, and any receipts or expense documents you upload.
• Documents and photos: files you upload, such as manuals, warranties, receipts, inspection reports, and photos of your home, appliances, or documents. Photos chosen from the mobile app’s photo library or camera are re-encoded to JPEG before upload to remove the original EXIF metadata, including embedded GPS coordinates; if that re-encoding fails, Prax blocks the upload. On the website, original JPEG, PNG, and WebP files are stored as uploaded and may retain EXIF or other metadata. Website HEIC/HEIF uploads are converted to JPEG in the browser, but you should not rely on that conversion to remove metadata. Files selected as documents may also be stored as provided. If you upload through the website or as a document, remove sensitive metadata first or disable location tagging in your camera if you do not want it included.
• AI feature inputs and outputs: when you choose an AI-assisted feature, such as inspection-report extraction, document or image analysis, or maintenance help, we collect the text, images, documents, filenames, questions, and relevant home, device, task, or expense context needed to respond. We also store the generated result and operational information about the request.
• Communications: information you provide when you contact us for support or respond to in-app prompts.

Information collected automatically

• Device and connection data: IP address, browser type, device type, operating system, app version, and similar technical information.
• Usage data: pages and screens viewed, features used, actions taken (such as onboarding steps completed), timestamps, durations, counts, outcomes, and referring pages.
• Mobile app and push data: when mobile analytics is configured, a random per-install analytics identifier and an opaque account identifier. If you enable mobile push notifications, we also store the Expo push token, device platform, a device label, and registration status needed to manage delivery. A push token identifies an app installation for notification delivery; it is not your phone number.
• Log and error data: diagnostic information when something goes wrong, including error messages, stack traces, app release, device/OS context, request context, and recent product-action breadcrumbs. Error context can sometimes include information involved in the failed action.
• Cookies and similar technologies: see Section 5.

Information from third parties

• Property data: when you enter your address, we send it to address-lookup and property-data providers (Google Places and RentCast) to help auto-fill details about your home. These providers may return property information that we store in your home profile so you can review and edit it.
• Sign-in: Prax does not offer Google or other third-party “sign in with” options. Mobile guests use the anonymous session described above, and saved accounts use email and password.

4. How we use your information

• Provide and operate the Service — create and maintain your guest or saved account and home profile, generate and schedule maintenance tasks, store documents, and track expenses.
• Auto-fill and personalize your home setup using the property and home details you provide.
• Process AI-assisted features that you choose to use and return their results.
• Send service-related communications and notifications you enable, including maintenance reminders by email, browser push, mobile push, and within the app.
• Monitor, debug, secure, and improve the Service, including diagnosing errors and understanding how features and user flows perform.
• Respond to your requests and provide support.
• Comply with legal obligations and enforce our terms.

We do not use your personal information for third-party advertising, and we do not sell your personal information.

5. Cookies, analytics, and error monitoring

We and our providers use cookies, local storage, secure mobile storage, and similar technologies to maintain sessions, remember preferences, measure product use, and keep the Service reliable.

• Essential and functional storage: the website uses authentication cookies and local storage needed for sessions and preferences. The mobile app stores its session, a random install identifier, and related app state in secure or local device storage. Disabling essential storage can prevent core features from working.
• Website analytics (Google Analytics 4): the website uses Google Consent Mode with analytics_storage denied by default. The Google tag may load in consent mode, but we do not grant analytics-cookie storage unless you select Accept analytics. While storage is denied, Google may receive limited cookieless consent-mode signals. Our defined product events include flow steps, durations, counts, outcomes, and similar interaction data associated with an opaque account identifier; they do not include your name, email address, home address, or uploaded content as event properties.
• Mobile app analytics (Google Analytics 4): when mobile analytics is configured, the app sends product events through Google Analytics’ Measurement Protocol. Events can include the random per-install identifier, opaque account identifier, app and flow information, durations, counts, and outcomes. The website’s consent choice, Global Privacy Control, and Do Not Track signal do not control mobile telemetry. The mobile app provides a separate in-app analytics setting under Account > Privacy. It is enabled by default; turning off Share usage analytics stops mobile product events from being sent to Google Analytics on that device.
• Error monitoring (Sentry): the website and mobile app use Sentry to receive error reports and diagnostic context, including an opaque account identifier and recent product-action breadcrumbs. Website analytics consent does not disable error monitoring. We do not use Sentry session replay, and performance tracing is not enabled.
• No advertising trackers: we do not use advertising cookies, ad-network pixels, or cross-site behavioral-advertising trackers.

Website controls:until you accept analytics, analytics storage remains denied. If your browser sends a Global Privacy Control (GPC) or Do Not Track signal, analytics storage remains denied and the website does not show the analytics banner. If you previously accepted, you can reset the choice by clearing Prax site data in your browser. You can also use Google’s browser opt-out add-on. Most browsers let you block or delete cookies.

6. How we share your information

We do not sell your personal information. We share it only with service providers (“subprocessors”) who process data on our behalf to run the Service, and only as needed. Each provider has its own privacy practices.

We may also disclose information if required by law, to protect our rights or the safety of others, or in connection with a business transfer such as a merger or acquisition.

Push notifications:push is optional. For browser push, the browser creates a push subscription delivered through the browser vendor’s push service. For mobile push, Prax sends the Expo push token and notification content to Expo, which routes the message to Apple Push Notification service (APNs) on iOS or Firebase Cloud Messaging (FCM) on Android. Notification titles and bodies therefore pass through the applicable delivery providers. You can turn notifications off in Prax Settings and in your browser or device’s system settings.

Household sharing: if you invite household members to your home, they can see and edit the home data shared with that household, including devices, tasks, documents, expenses, and related records. Invitations are sent through our email provider.

7. Where your data is stored

Prax’s primary database, authentication data, and uploaded files are stored with Supabase in the AWS US West (Oregon, us-west-2) region. Vercel and the other providers listed above may process data in the United States or other locations described in their privacy policies. If you access the Service from outside the United States, your information may be transferred to and processed in a country with different data-protection laws than your own.

8. Data retention and account deletion

We keep personal information while your guest or saved account is active and as needed to provide the Service, meet legal obligations, resolve disputes, secure the Service, and enforce our agreements.

When an in-app account-deletion or Erase guest datarequest completes, Prax deletes the authentication user and the primary database data for homes that user owns. Private file objects are queued for deletion and removal is attempted immediately. If the storage provider is temporarily unavailable, an automated worker retries the queued deletion with backoff until it succeeds. Records that belong to another household you joined may remain as part of that household’s history, with your account attribution removed where the data model supports it.

Signing out of a guest session, uninstalling the app, reinstalling it, or moving to a new device does notby itself delete the guest’s server-side data. An anonymous session generally cannot be recovered after it is lost unless you first save the account. Use Erase guest data before signing out or uninstalling if you want that guest account and its owned-home data deleted.

Backups, security logs, analytics, and diagnostic information held by us or our providers may persist for a limited additional period according to operational, legal, security, and provider-retention requirements.

9. Your rights and choices

Depending on where you live, applicable law may give you rights to:

• Access the personal information we hold about you.
• Correct inaccurate information; you can edit much of it directly in Prax.
• Delete your guest or saved account and personal information using in-app controls or by contacting us.
• Request an export of your data.
• Control website analytics by declining the consent banner, using GPC or Do Not Track, clearing site data, or using Google’s browser opt-out add-on.
• Control mobile analytics using Share usage analytics under Account > Privacy in the mobile app.
• Control notifications in Prax Settings and your browser or device settings.
• Object to or restrict certain processing and lodge a complaint with a regulator, where applicable.

To make a privacy request, email privacy@praxhome.com. We may need to verify your identity and authority over the account, and we will respond within the period required by applicable law. We will not discriminate against you for exercising an applicable privacy right.

These rights vary by jurisdiction and may include rights under the California Consumer Privacy Act/California Privacy Rights Act (CCPA/CPRA), the Colorado Privacy Act (CPA), other U.S. state laws, or the EU/UK GDPR.

We do not sell personal information or share it for cross-context behavioral advertising as those terms are defined under U.S. state privacy laws.

10. Security

We use reasonable measures designed to protect your information, including:

• Encryption of data in transit using HTTPS/TLS.
• Storage with providers that encrypt data at rest.
• Passwords stored only in hashed form, with protection against known leaked passwords.
• Row-level security policies that isolate data by user and household, including for anonymous guest users.
• Private storage buckets and time-limited signed links for uploaded files.
• Restricted internal access to production systems.

No method of transmission or storage is completely secure, and we cannot guarantee absolute security. If we become aware of a breach affecting your personal information, we will notify you as required by applicable law.

11. Children’s privacy

Prax is intended for adults managing their homes and is not directed to children. We do not knowingly collect personal information from children under 13 or under the minimum age in their jurisdiction. If you believe a child has provided us personal information, contact us and we will take appropriate steps to delete it.

12. Changes to this policy

We may update this policy as the Service evolves or as required by law. When we make material changes, we will update the “Last updated” date and, where appropriate, provide notice in the app, on the website, or by email.

13. Contact us

Questions, requests, or concerns about this policy or your data: privacy@praxhome.com.