Privacy Policy

We only collect what's needed to make HeyFlat work for you and your house:

• Account data: name, email and password (used only for authentication — we never see your password in plain text).
• Optional profile data: photo, phone number and payment information (e.g. PayID) that you enter yourself.
• House data: address, roommates, bills, chores, shopping items and House Vault entries that you and your roommates add.
• Basic technical/session data needed to keep you securely logged in.
• Billing data: once a house subscription is active, payment is processed by a third-party provider (e.g. Stripe) — HeyFlat never stores your card number.

• Making the app work: splitting bills, organizing chores, and showing your house's calendar and reports.
• Authenticating your login and keeping your account secure.
• Sending notifications you've turned on (e.g. a bill or chore reminder on its due date).
• Processing the house subscription charge, when applicable.
• Providing support when you reach out to us.

We don't sell your data. It's only shared with service providers strictly necessary for HeyFlat to work — today that's Supabase (database and authentication) and, once a subscription is active, a payment processor like Stripe. Each of these partners only receives the minimum data needed to provide its service.

Within your house, your bills, chores and shopping data are visible to your other roommates — it's a shared tool, after all. House Vault information (Wi-Fi, PayID, bank details) is likewise visible only to people who live in that house.

We only use the browser's local storage (localStorage) needed to keep you logged in between visits. We don't use advertising tracking cookies or sell browsing data to third parties.

Your data is hosted with encryption in transit and at rest by our database provider. Access to your house's data is restricted to you and your roommates — house admins have extra permissions (like removing roommates or deleting data), but only within their own house.

You have direct control over most of your data, right in the app:

• Edit your profile and payment information at any time.
• Leave a house whenever you want.
• If you're an admin, permanently delete all of a house's data, or delete the house entirely.

For any other request about your data — like exporting your information — write to hello@heyflat.com.au.

To request deletion of your HeyFlat account and personal data, email hello@heyflat.com.au from the address registered on your account, asking us to delete it. We'll confirm and process the request within 30 days.

Once processed:

• Deleted: your name, email, password, profile photo, and phone number.
• Retained: bills, chores, shopping items and other house records you created stay visible to your former roommates, since that data is shared and co-owned by the whole house — the same way it would if you simply left the house from inside the app. If you were the sole member or the house's admin, you can instead delete the entire house yourself from the House tab, which removes all of it, including your own records.

If we make a material update to this policy, we'll let you know by email or with a notice inside the app before the change takes effect.