Privacy Policy

This policy explains what personal data Homjo collects, why, and what your rights are. It is written in plain English and describes what the software actually does. The controller is Homjo Networks Limited, registered in Ireland under Company Number 815338. Data-protection requests: privacy@homjo.com. Homjo is not required to appoint a Data Protection Officer and has not appointed one; the founder handles data-protection requests personally.

1. What we collect

Account and profile. Your email address, and — if you add them — your name, avatar, address, language, city, where you moved from, and business details (described below). A verified phone number is required before you can post a listing: it confirms you are a real person, and it is never shown to other members unless you switch on phone sharing for a particular listing. You can sign in with Google or Apple, by email link, or by a code sent to your phone. Signing in with Google or Apple shares your provider ID and email with us. Google also shares your name and profile photo, which become your starting name and avatar until you change them. Apple does not share a photo, and shares your name only if it passes one on. Phone verification stores your number and the fact that it was verified.

Business and billing details. If you set up the invoicing tool or a business profile, we store what you enter: business name, business type, address, email, phone, logo, the name on your bank account (payee), IBAN, default VAT rate and, if you add one, your VAT number. They are used for two things: to fill in the invoices and quotes you create, and to show who the trader is. Your business name is shown publicly as the trader name on your profile and listings. The other details are visible only to you, and appear on a document only when you create one. We keep them until you change them or delete your account. When you issue an invoice or quote, a copy of these details is frozen onto that document so that it cannot change afterwards.

Identity verification (optional). If you choose to verify your identity in your profile, Stripe Identity checks a photo of your identity document against a selfie you take. Matching your face to a document is biometric data, a special category under GDPR Art. 9, so it happens only with your explicit consent (Art. 9(2)(a)): our screen tells you exactly what will be compared and that pressing "Verify my identity" is your agreement, and Stripe then asks you to confirm on its own screen, where you can decline, before anything is collected. Without your consent nothing is collected, and you can use Homjo without ever verifying. Stripe processes and holds the document and selfie images under its own retention rules. Homjo never receives, sees or stores either image — we store only a reference to the verification session and the outcome (verified or not); the time you gave consent is recorded on that Stripe session. You can withdraw consent at any time by emailing privacy@homjo.com: we will ask Stripe to redact the verification and remove your verified status. Deleting your account asks Stripe to redact it automatically.

What you post. Listings, requests, offers and estimates (including the amounts you enter), bookings, ratings you give and receive, reports, invoices and quotes you create in the app, and messages you exchange with other users. Messages are private to the conversation participants, and Homjo staff do not read them except where required to investigate a report. Three automated things touch a message. When you send one, a fixed word-pattern check (not AI) looks for wording that may discriminate on a ground protected by the Equal Status Acts; a match never blocks, delays or changes the message — it records the matched phrase and the rule, not the message, so a moderator can see a pattern if the conversation is later reported. And a message is sent to our translation provider, AWS Translate (an automated machine-translation service, processed in the EU), only when you or the other participant taps Translate on it; nothing is translated automatically. And unless you have switched off new-message emails in Settings, the text of an unread message is included in the notification email to the person you wrote to, which our email provider (Postmark) delivers. No AI model reads your messages for moderation.

Location. Public listing pins are fuzzed by up to 150 metres; your exact address is stored separately and visible only to you. When you post a request (a service, a delivery or a move), the pickup and, for a delivery or move, the drop-off are shown to providers as an area and a point fuzzed by up to 250 metres. The exact addresses you enter are stored separately and shown to one person only: the provider whose offer you accept, and only while that offer stands. If you cancel or reopen the request, that access ends.

Usage. Page views, searches, and product events (for example "listing saved"), used to understand what works. For visitors who are not signed in, we store a salted hash of the IP address — never the address itself. Search text is truncated and the filters you used are recorded by name.

Payments. If you buy a plan or a Boost on the website, Stripe processes the payment. Homjo never sees your card number — we store only your Stripe customer reference, plan and billing status. In the iOS app, Apple bills the purchase and RevenueCat, our purchase-management processor, tells us what was bought, renewed, cancelled or refunded; we store the plan and billing status, the Apple transaction reference and, for a Boost, which listing it was bought for — never your Apple payment details. RevenueCat receives your Homjo account id so the purchase can be matched to your account; it is listed in our sub-processor register.

Tax reporting (DAC7). Homjo is not a "reporting platform operator" under the EU DAC7 rules (Council Directive 2021/514, Taxes Consolidation Act 1997 Part 38 Chapter 3A): the platform only lists and connects. Homjo takes no payment between users, holds no money for them, and charges no fee or commission tied to the price of anything they arrange. The amounts Homjo does hold fall into three groups. Advertised prices, set by the person who posts them: the price, rent or deposit on a listing (each change to a listing's price is logged with the listing), the items on a price list, and the per-seat contribution on a carpool time slot. These are advertisements, not agreed prices. Proposals: offers on Market items, estimates sent on Services requests, and the budget on a request. What Homjo records when two users go ahead: that an offer or estimate was accepted, or that a booking was confirmed, alongside the amount that was proposed or advertised at that moment — for a booked carpool seat, that is the seat contribution on the slot and the number of seats. What Homjo does not hold is whether anyone paid, how much, or when: no money passes through Homjo, no fee depends on it, and the final price and payment are settled between the two users directly. Invoices and quotes a provider creates with the invoicing tool are the provider's own business records: the provider types the client and the amounts, the document is not linked to any Homjo listing, booking or member, and Homjo stores it for the provider. A provider can mark their own quote as accepted or their own invoice as paid for their own bookkeeping; Homjo does not check that and does not use invoices or quotes to work out what anyone was paid. Homjo does not collect tax identifiers to report anyone's income, and reports nothing to Revenue. If that ever changes, this policy will say so before any such collection begins.

Tax numbers on your own invoices. Homjo never asks for a PPS number, and does not store a tax registration number. Older versions of our phone apps may still show a "Tax reg. number" box until they are updated. Anything typed there is discarded and never saved. A tax registration number already printed on an invoice or quote issued before 29 September 2026 stays on that document, because an issued document cannot be changed. It is removed when the account is deleted. A provider can choose to add a VAT number to their billing details, and can type a client's VAT number on a document. These are stored for that provider and printed only on that provider's own invoices and quotes. Homjo does not check them. A sole trader's Irish VAT number usually contains their PPS number; Homjo stores it only because the provider chose to print it on their documents. These numbers are included in "Download my data" and erased with the account.

Activity status and reply time. While you are signed in, the app records the time you were last active, at most once every five minutes. Other signed-in members see it on your listings and your public profile as "Active now" (within the last five minutes), then in minutes, hours or days up to a week, then "Active recently"; after 30 days without activity nothing is shown. Visitors who are not signed in do not see it. Once at least three people have enquired about your listings, a typical reply time worked out from your message timestamps ("Replies in ~2h") is shown there too, to anyone viewing, signed in or not. There is no setting to hide either of these today.

Derived signals. From your activity Homjo computes internal figures such as a trust score, an activity level and a churn-risk estimate. They are used to understand the platform and to spot abuse. Apart from the reply time described above, they are not shown to other users, and they do not change your access to any feature.

Connect profiles. If you use Connect you create a separate profile for each category you join (flatmate, carpool, services, talent): a display name, an illustrated avatar, a short bio, tags, the areas you chose, and the details that category needs. For carpooling that is your start, destination, days and time of day; for flatmates your budget and move-in date; for services and talent your rate and availability. Only signed-in members can see Connect profiles. We also record your swipes (who you liked or passed on) and your matches, so that the same person is not shown to you twice and so that a match can open a chat. A profile is shown for 90 days and is then hidden until you put it back up.

Leaving Connect. You can take a Connect profile down, put it back up, or delete it at any time on the Connect page, or switch all of your Connect profiles off at once in Profile → Settings → Privacy & Safety → "Show me in Connect". Taking a profile down hides it from everyone, including people you have matched with; your matches and chats stay, and the chat shows them that you are no longer on Connect. If you answer the optional question about whether you found what you were looking for, we record the answer as a product event. Deleting a profile removes the profile itself. Likes that other people gave it remain in our records as part of their own activity, but they no longer point to anything anyone can see. A report on its own never stops you deleting a profile: the report stays in our moderation records, without the profile. Only a profile that is under moderation review (hidden because several people reported it) cannot be deleted until the review ends; it is already hidden during that time, and deleting your account erases it.

Connect age confirmation. Connect (flatmate, carpool, services and talent profiles) is for adults. When you confirm you are 18 or over, we record the time and the IP address you confirmed from, as evidence of the declaration. This is the one place Homjo stores an IP address rather than a hash.

County waitlist. If Homjo has not launched in your county and you ask to be notified, we store the email address you give us, the county, and — if you pick one — what you'd use Homjo for. This is a separate consent-based list held by MailerLite: you confirm by email before anything is sent to you, and every message carries a one-click unsubscribe. It is used for nothing but telling you when that county opens.

Attribution. Nothing is kept in your browser for this. If the link you arrived by carries campaign labels (for example "flyer" or "instagram"), they are read from the address, together with the page you landed on and the address of the page that linked to you, without its query string. They are held in the page's memory only, and saved to your account only if you create one. When you sign in with a link or with Google or Apple, those same labels are added to our own return address so they survive the trip — which means they pass through our sign-in provider (Supabase) — and are removed from the address bar when you come back. For a sign-in link sent by email, the same labels may also appear inside the link in that email, for the same reason. If they do not reach us, the account is saved without them and you may be asked how you heard about Homjo instead. Click identifiers from advertising networks (gclid, fbclid) are never read. If your link carried no labels, the last sign-up step may ask how you heard about Homjo; answering is optional. None of this is an identifier, and it is not shared with anyone beyond the service providers that run sign-in and email for us.

People who are not users. Six kinds of personal data reach Homjo about people without an account. If a provider makes an invoice or quote for you with Homjo's invoicing tool, the name and any email, address or VAT number they type are stored in that provider's own records, visible only to them. If you report content and give your name and email, we keep them with the report. If you use the business enquiry form on the pricing page, we keep the name, email, company and message you send so we can reply. If you organise or host a public event: Homjo's Community calendar collects public event listings from Visit Dublin and Dublin City Council's event pages (and, when we publish there, our own Eventbrite organiser page) — the title, description, dates, venue name and address, image and a link back to the source. We do not collect organisers' contact details, but an event's title or description can name a person. An aggregated event is deleted seven days after it ends; to have one removed or corrected sooner, email support@homjo.com. If you are a local provider we contact before you use Homjo: we may notice you advertising publicly and write to you, openly as Homjo, through the contact channel on your own advert. Nothing about you is stored in the Homjo app before you give permission. Our outreach notes are kept outside the app, in Homjo's internal workspace; under our sourcing rules they hold at most a link to your public advert and a short description without your name, and are deleted or anonymised within 30 days. And if Homjo then holds a listing for you with your written permission (see How Listings Get Onto Homjo), we store your name, a reference to where your permission is filed, the dates it runs, and any takedown or takeover request you make; the permission record itself is filed outside the app. Providers are told this when we ask for permission.

We do not use advertising trackers, we never sell your data, and we never share it with advertising networks. To see how the site is used we rely on aggregate, cookieless web analytics from our hosting provider, Vercel: page views, referrers, country, device and browser type, with nothing stored in your browser and no profile of you built. That is the only third-party analytics on Homjo.

2. Why we process it (legal bases)

• Running the service you signed up for (contract): account, listings, messaging, bookings, offers, the invoicing tool, payments, notifications you enabled.
• Legal obligations: content-moderation records and statements of reasons (Digital Services Act), tax and accounting records, responding to data-subject requests.
• Legitimate interests: keeping the platform safe (moderation, rate limiting, fraud prevention, trust and churn signals), first-party product analytics, error monitoring, and defending legal claims. You can object at privacy@homjo.com.
• Consent: optional things you switch on, like push notifications, saved-search alerts, identity verification, the Connect age declaration and the county waitlist. Withdraw any time in settings, or via the unsubscribe link in any waitlist email. For Connect, that is the "Show me in Connect" switch in Profile → Settings → Privacy & Safety, or the take-down and delete options on the Connect page.

3. Automated processing

Listings and images are screened before publication using a deterministic keyword filter, AI-assisted review, and image scanning — including screening against Irish Equal Status Acts discrimination patterns. When a check finds an unambiguous problem, the listing is hidden automatically until a person reviews it. Profile bios, offers and Provider Studio content are checked the same way; messages and requests are checked for warning signs but never blocked.

Some limits are applied automatically with no review at the time: posting limits (5 listings per hour, 20 per day), plan quotas, the offer allowance, and the 30-day listing expiry. They apply identically to everyone on a plan.

A moderation decision can always be appealed to a human — from the notice in your dashboard or at appeals@homjo.com. We do not make decisions by automated means alone that produce legal or similarly significant effects on you. Details of every AI feature are in the AI Usage Disclosure.

4. Who we share data with

We use a small set of service providers (sub-processors) to run Homjo — hosting, transactional email, the county-waitlist mailing list, SMS, payments and identity verification, maps, AI moderation and translation, and error monitoring. The current list, what each receives, and where they process it is published at Sub-processors. Some are in the United States and process data under the EU Standard Contractual Clauses or the EU–US Data Privacy Framework; the list says which.

If you sign in with Google, Apple or Facebook, that provider learns that you signed in to Homjo, under its own privacy policy, and shares your provider ID, email address and profile details with us. If you choose Apple's "Hide My Email", Apple gives us a relay address instead of yours and forwards our emails to you. A Facebook account that has no email address cannot be used to sign in to Homjo — we ask you to continue with Google or email instead, because we need an address for messages and receipts.

We share data with public authorities only where the law requires it — on a valid legal request, which we check before we answer. Requests from authorities go to dsa@homjo.com.

5. How long we keep it

• Your account and content: for as long as you have an account. The log of a listing's price changes is kept with the listing and deleted with it. When you delete a listing, its photos are removed from our storage within about a day, unless another of your listings, a request, your business logo or an invoice you issued still uses the same photo.
• Business and billing details, invoices and quotes: for as long as you have an account. An issued invoice or quote keeps the business details that were on it when it was issued. Deleting your account erases both.
• Connect profiles: shown for 90 days, then hidden; kept until you delete them or your account. Swipes and matches are kept for as long as you have an account.
• Search logs and session logs: 6 months.
• Product events: 24 months.
• Image-moderation records: 12 months.
• AI-generated cover images in your album: every cover image you generate is copied to your image album, which shows the last 90 days; a copy is deleted once it is 90 days old, by an automatic job that runs every night (so within about a day of that date), or sooner if you delete your account, which removes the whole album.
• Re-engagement reminder records: none are sent today (see Section 8). A queued record is kept until 90 days after it is sent, or until you delete your account. Message-email throttle records: 30 days.
• Accounts inactive for 3 years: we email a warning, and erase the account 30 days later if you don't sign back in.
• Launch-interest and business-enquiry forms: if you left your email on a "tell me when you launch" form or sent a business enquiry without an account, that record is tied to the email address, not to an account, so deleting an account does not remove it. It is deleted automatically 24 months after you sent it; to have it removed sooner, email privacy@homjo.com from that address.
• Copies outside the live database: a removed image can still be served from our delivery network's cache for up to about an hour; a deleted listing's pre-built page can remain until the site is next rebuilt (normally within days); and erased records remain in encrypted database backups until those backups roll off.
• Some records are kept longer where the law requires it or where they are the evidence that we did something: statements of reasons and appeal decisions under the DSA, illegal-content notices, the register of data-subject requests, payment records for tax purposes, and records of a provider's takedown or takeover request. When you delete your account, these are de-identified rather than deleted (see Section 6).

Deletion timers run automatically every night.

6. Your rights

You have the right to access, rectify, export, and erase your data, to restrict or object to processing, and to withdraw consent. Three of these are self-serve:

• Export: Profile → Settings → Your Data → "Download my data" gives you a machine-readable copy of your data immediately, as a single JSON file with a readme explaining each part. It does not include your photos themselves (email us for those), sign-in logs held by our authentication provider, other people's messages to you, or moderation notices you already received. A notice email is sent to your address whenever an export happens, so you'd know if someone else did it. Exports are rate-limited.
• Erasure: deleting your account in Profile → Settings permanently erases your profile, listings, bookings, offers, messages, ratings given and received, documents, and uploaded images. This is a full erasure, not a deactivation. A short list of records is kept in de-identified form because we are obliged to keep them or because they protect other people: moderation and appeal records, illegal-content notices you filed, the data-request register entry recording the erasure itself, and aggregate platform events. On those kept records your name, email address and any free text you wrote in an appeal are blanked; the text of an illegal-content notice you filed is kept because it is the record of the notice — email us if it contains personal details you want redacted. Paid plans: deleting your account cancels a plan billed through Stripe (the website) immediately, and you are not charged again; if that cancellation cannot be confirmed, nothing is deleted and you are told, so you are never left paying for a deleted account. A plan bought in the iOS app is billed by Apple and only you can cancel it, in your iPhone's Settings → Apple ID → Subscriptions; do that first. We then delete your customer record at Stripe and at RevenueCat (the service that manages App Store purchases for us); Stripe keeps the invoices and payment records it is legally required to keep. The county waitlist is a separate list — unsubscribe from any of its emails to leave it.
• Leaving Connect: take down or delete a Connect profile on the Connect page, or switch them all off in Profile → Settings → Privacy & Safety. See "Leaving Connect" in Section 1.

You can also object to the trust and churn signals described in Section 1. That is not self-serve: email privacy@homjo.com and we will stop computing them for you or explain why we cannot.

For anything else, email privacy@homjo.com. We respond within one month (GDPR Art. 12(3)) and aim for 15 working days. You can complain to the Irish Data Protection Commission (dataprotection.ie) at any time.

7. Where data lives

Homjo's database and file storage are hosted in the EU (Ireland). Our server-side functions run on our hosting provider's network and read from and write to that Irish database. Some providers process data in the US under EU-approved safeguards — the sub-processor list says which.

8. Messages we send you

• Transactional: new messages, offers and Services-request updates, booking updates, rating prompts, moderation notices, plan and Boost events, and the export-security notice. Four categories have an off switch in Settings: new messages, offers, saved-search alerts, and booking reminders and rating prompts. The offers switch also covers everything about Services requests: a new offer on your request or an offer being withdrawn, an offer of yours being declined, passed over for someone else or expiring with the request, the reminder three days before your request expires, the note that a request you offered on is open again, and — where request alerts are switched on — alerts and the daily digest of new requests matching your Services listings. The rest always send — booking requests, confirmations, declines, cancellations and no-shows, moderation notices, plan and Boost lifecycle emails (including the one warning before a complimentary plan ends), the inactive-account warning described in Section 5, and the export-security notice. They cannot be switched off because each one is a record of something that has happened, or is about to happen, to you, your account or your listing.
• Acknowledgements to people who write to us: if you file an illegal-content notice and give an email address, we email you an acknowledgement of receipt, as the Digital Services Act requires. It is sent once per notice and has no off switch. Replies to a business enquiry or an area-guide report are written by a person, not sent automatically.
• Welcome: one email when you finish creating your account, confirming it is set up and showing what you can do on Homjo. It is sent once and never repeated, so there is nothing to switch off.
• Saved-search alerts: optional; switch them all off with one setting, or pause one search from the link in its email.
• Re-engagement reminders: not sent today. The software notes when a reminder might be due — for example when a listing has not been refreshed in 30 days — but nothing delivers those reminders by email, SMS or push. Before any are sent they will get their own off switch in Settings, and this page will say so first.
• Marketing: only the county waitlist, which you join and confirm separately.
• We use email. If your account has a phone number, offer, request and booking messages can also arrive by SMS. For offers, requests and rating prompts a text is sent only when the email is switched off or we have no email address for you; booking updates are texted alongside the email; and a booking reminder goes by text instead of email when a text is possible. SMS is on by default, with its own off switches for offers and for bookings next to the email ones in Settings. Push notifications are sent only where you have enabled them.

9. Security and breaches

Access to personal data is restricted by database-level rules and logged. If a breach is likely to put your rights at risk, we will tell you without undue delay and notify the Data Protection Commission within 72 hours as GDPR Art. 33 requires. Security reports: security@homjo.com.

10. Children

Homjo is for adults. You must be 18 or older to use it. We do not verify age at sign-up; creating an account is your confirmation that you are 18 or over, and Connect asks you to confirm it explicitly. If we learn that an account belongs to someone under 18 we delete it.

11. Changes and language

When this policy changes, the version and date below change with it. Material changes will be announced in the product. This policy is published in English; if a translation differs, the English version applies.

Version 2.8 · This version: 29 September 2026 · privacy@homjo.com