Privacy Policy

1. Who we are

Prax (“Prax,” “we,” “us,” or “our”) is a home-maintenance application that helps you track your home, its systems and appliances, maintenance tasks, expenses, and related documents. This Privacy Policy explains what information we collect, how we use it, who we share it with, and the choices you have.

Prax is operated by an individual, not an incorporated entity. If you have questions about this policy or your data, contact us at privacy@praxhome.com.

This policy applies to the Prax website and application (the “Service”). By using the Service, you agree to the practices described here.

2. The short version

We collect the information you give us to run your home profile, plus standard technical and usage data to operate and improve the Service. We use a small number of third-party service providers to host the app, store your data, deliver email, measure usage, and monitor errors. We do not sell your personal information. You can access, correct, export, or delete your data by emailing us. The full detail is below.

3. Information we collect

Information you provide directly

• Account information: your email address, first and last name, and password. Passwords are handled by our authentication provider (Supabase) and stored only in hashed form; we never see or store your password in plain text.
• Home profile: your home’s address, and details such as year built, square footage, number of bedrooms/bathrooms, number of floors, and whether you have a basement, garage, or yard.
• Home systems and inventory: rooms and zones, appliances and devices (brand, model, installation date, warranty), heating/cooling and water-heater types, safety devices, and outdoor equipment.
• Tasks and maintenance records: maintenance tasks, completion records, and related scheduling information.
• Expenses: amounts, categories, classifications, dates, notes or vendor details you enter, and any receipts or expense documents you upload.
• Documents and photos: files you upload, such as manuals, warranties, receipts, and photos. Photos are stored as you upload them, and we do not strip embedded metadata. Photos can contain EXIF metadata — including the date taken and, in some cases, GPS location coordinates — and that metadata is retained in the stored file. If you’d prefer not to share location data, remove it before uploading or disable location tagging in your camera. (HEIC/HEIF photos are converted to JPEG in your browser before upload; thumbnails we generate for display are re-encoded and do not carry the original EXIF.)
• Communications: information you provide when you contact us for support or respond to in-app prompts.

Information collected automatically

• Device and connection data: IP address, browser type, device type, operating system, and similar technical information.
• Usage data: pages and screens viewed, features used, actions taken (such as onboarding steps completed), timestamps, and referring pages.
• Log and error data: diagnostic information when something goes wrong, including error messages, stack traces, and technical context. Used to find and fix bugs.
• Cookies and similar technologies: see Section 5.

Information from third parties

• Property data: when you enter your address, we send it to address-lookup and property-data providers (Google Places and RentCast) to auto-fill details about your home. These providers may return property information that we store in your home profile for you to review and edit.
• Sign-in: Prax accounts use email and password only. We do not offer Google or other third-party “sign in with” options, so we never receive your credentials from a third-party identity provider. (This is distinct from the optional Google Calendar connection below, which is a feature you turn on after signing in — not a way to sign in.)
• Calendar integration (optional): if you connect Google Calendar, we ask Google for permission to access your calendar and, with that permission, create and read calendar events related to your maintenance tasks. The access we request is limited to calendar events and reading your calendar. You can disconnect at any time in Settings, and revoke our access from your Google account’s security settings.

4. How we use your information

• Provide and operate the Service — create and maintain your home profile, generate and schedule maintenance tasks, store your documents, and track expenses.
• Auto-fill and personalize your home setup using the property and home details you provide.
• Send service-related communications and notifications you’ve enabled (such as maintenance reminders), by email, by browser push notification (if you opt in), and within the app.
• Monitor, debug, secure, and improve the Service, including diagnosing errors and understanding which features are used.
• Respond to your requests and provide support.
• Comply with legal obligations and enforce our terms.

We do not use your personal information for third-party advertising, and we do not sell your personal information.

5. Cookies, analytics, and tracking technologies

We and our providers use cookies, local storage, and similar technologies to keep you signed in, remember preferences, and understand how the Service is used.

• Essential/functional: required to sign you in and keep the app working (for example, the authentication session cookie set by Supabase, and small amounts of browser local storage for UI state). These can’t be turned off without breaking core functionality.
• Analytics (Google Analytics 4): we use Google Analytics to understand traffic and how people use the app — including a product-event funnel that tracks where users drop off during onboarding. GA sets cookies and may collect your IP address, device/browser data, and usage events. The product events we send are limited to non-identifying signals: which onboarding step you reached, how long a step took, counts (rooms, tasks, zones created), and similar interaction data, associated with an opaque random account identifier. We do not send your name, email, address, or other directly identifying information to Google Analytics as event data. You can opt out across all sites using Google’s browser opt-out add-on, or ask us to exclude your account from analytics by emailing us (Section 9).
• No advertising trackers. We do not use advertising cookies, ad-network pixels, or cross-site behavioral-advertising trackers.

Your controls: analytics are off by default until you accept them via the consent banner shown on your first visit. We also automatically honorbrowser “Do Not Track” and Global Privacy Control (GPC) signals — if your browser sends either, analytics stay disabled and we don’t ask. You can also use Google’s browser opt-out add-on for Google Analytics, and most browsers let you block or delete cookies. To revoke a prior acceptance, clear this site’s data in your browser (the banner will reappear) or email us (Section 9).

6. How we share your information

We do not sell your personal information. We share it only with service providers (“subprocessors”) who process data on our behalf to run the Service, and only as needed. Each provider has its own privacy practices.

We may also disclose information if required by law, to protect our rights or the safety of others, or in connection with a business transfer (such as a merger or acquisition), in which case we will notify you.

Browser push notifications:if you opt in to push notifications, your browser creates a push subscription delivered through your browser vendor’s push service (for example, Google’s for Chrome, Mozilla’s for Firefox, Apple’s for Safari). We send notification content through that service to reach your device. We don’t control the browser-vendor push service; its handling is governed by your browser vendor. You can turn push off in Settings or in your browser’s site permissions.

Household sharing: if you invite household members to your home, they can see and edit the home data you share with them (devices, tasks, documents, expenses, and related records for that home). Invitations are sent by email through our email provider.

7. Where your data is stored

Your data is hosted in the United States. Our database, authentication, and uploaded files are stored with Supabase in the AWS US West (Oregon) region. Application hosting and request handling are provided by Vercel in the AWS US East (Washington, D.C.) region. If you access the Service from outside the United States, your information will be transferred to and processed in the U.S., which may have different data-protection laws than your own.

8. Data retention

We keep your personal information for as long as your account is active and as needed to provide the Service. When you delete your account, we delete or anonymize your personal information within 60 days, except where we need to retain certain records to comply with legal obligations, resolve disputes, or enforce our agreements. Backups containing your data may persist for a limited additional period before being overwritten. Diagnostic and analytics data held by our providers (Google Analytics, Sentry) is retained according to each provider’s configured defaults.

9. Your rights and choices

We extend the following rights to all Prax users, regardless of where you live:

• Access — request a copy of the personal information we hold about you.
• Correction — ask us to fix inaccurate information (you can also edit most of it directly in the app).
• Deletion — ask us to delete your account and personal information. You can also delete your account from within the app.
• Portability/export — request an export of your data.
• Opt out of analytics — ask us to exclude your account from product analytics.
• Disconnect integrations — disconnect Google Calendar at any time in Settings.

To exercise any of these, email us at privacy@praxhome.com. We will respond within 30 days. We won’t discriminate against you for exercising these rights.

Depending on where you live, you may have additional or formally-named rights — for example under the California Consumer Privacy Act (CCPA/CPRA), the Colorado Privacy Act (CPA), other U.S. state laws, or the EU/UK GDPR (including the right to object to or restrict processing and to lodge a complaint with a supervisory authority). The universal rights above are intended to meet or exceed these; contact us to exercise any of them.

We do not sell your personal information or share it for cross-context behavioral advertising as those terms are defined under U.S. state privacy laws.

10. Security

We take reasonable measures to protect your information, including:

• Encryption of data in transit (HTTPS/TLS).
• Storage with providers that encrypt data at rest.
• Passwords stored only in hashed form, with protection against known leaked passwords.
• Row-level security policies that isolate each user’s household data so it isn’t accessible to other users.
• Restricted internal access to production systems.

No method of transmission or storage is completely secure, and we cannot guarantee absolute security. If we become aware of a breach affecting your personal information, we will notify you as required by applicable law.

11. Children’s privacy

Prax is intended for adults managing their homes and is not directed to children. We do not knowingly collect personal information from children under 13 (or under the minimum age in your jurisdiction). If you believe a child has provided us personal information, contact us and we will delete it.

12. Changes to this policy

We may update this policy as the Service evolves or as required by law. When we make material changes, we will update the “Last updated” date and, where appropriate, notify you in the app or by email. Your continued use of the Service after a change means you accept the updated policy.

13. Contact us

Questions, requests, or concerns about this policy or your data: privacy@praxhome.com.