Your household data stays your household data.

Casa is a household organization service operated by Human Built AI ("Casa," "we," "us," or "our"). Casa helps people in a household coordinate lists, schedules, tasks, meals, bills, projects, contacts, documents, and other household information.

This policy applies to Casa's websites, mobile applications, and related services. By using Casa, you acknowledge the practices described here.

We collect information in the following categories:

• Account and identity information. Name, email address, profile image, authentication identifiers, household memberships, roles, and invitation status. Authentication is provided through Clerk.
• Household content. Information you or other household members enter, such as lists, tasks, calendar events, contacts, recipes, meals, chores, bills, projects, travel details, household profiles, notes, files, and vault records. Household data is stored using Supabase.
• Connected-service data. If you choose to connect Google services, Casa may access the Google Calendar events, Gmail messages, or Google Contacts information needed for the features you authorize. Connecting these services is optional.
• Location and device information. With permission, approximate or precise location used for local weather, commute context, and nearby recommendations. We may also process device type, operating system, app version, notification tokens, IP address, and diagnostic information.
• Usage and support information. Feature interactions, performance events, crash or error details, support requests, and feedback. We use service providers such as PostHog for configured product analytics and Langfuse for configured AI observability.

Face ID and other biometric checks are performed by your device. Casa receives only the result of the authentication check, not your biometric data.

We use information to:

• Provide, synchronize, personalize, and maintain Casa's features.
• Authenticate users and enforce household roles and permissions.
• Process user-requested integrations, reminders, notifications, and AI assistance.
• Protect the service, prevent abuse, troubleshoot problems, and improve reliability.
• Respond to support requests and communicate important service changes.
• Comply with legal obligations and enforce our agreements.

We do not sell personal information. We do not use household content or Google user data for targeted advertising.

Casa accesses Google user data only after you authorize a specific integration. Depending on the features you enable, Casa may read or update calendar events, search or process email relevant to household workflows, and search contacts so you can choose information to add to Casa.

We use Google user data only to provide or improve the user-facing features you request. We do not sell it, use it for advertising, use it to determine creditworthiness, or use it to train general-purpose AI models. Human access is prohibited except with your explicit consent for support, when needed for security, or when required by law.

Casa's use and transfer of information received from Google Workspace APIs adheres to the Google API Services User Data Policy, including its Limited Use requirements.

You can disconnect Google integrations in Casa's settings or revoke Casa's access from your Google Account. Disconnecting stops future access; contact us if you also want previously imported data deleted from Casa.

When you use Casa Agent or another AI-assisted feature, we process your prompt and the household context needed to answer it. That information may be sent to contracted AI infrastructure providers solely to generate the requested response, operate the feature, maintain security, and diagnose failures.

Casa does not use private household content or Google Workspace data to train public or shared general-purpose AI models. AI responses can be inaccurate; review important information before acting on it.

We may share information in these limited circumstances:

• Within your household. Content is shared according to the household, role, assignment, and sharing settings selected by users.
• With service providers. Vendors that provide hosting, database, authentication, analytics, communications, AI processing, and support may process information under contractual restrictions and only as needed to provide their services.
• For legal and safety reasons. We may disclose information when reasonably necessary to comply with law, protect rights and safety, investigate abuse, or secure Casa.
• Business transfers. Information may transfer as part of a merger, financing, acquisition, reorganization, or sale of assets, subject to applicable law and the commitments in this policy.
• With your direction. We share information when you ask us to or provide consent.

We retain information while your account is active and as needed to provide Casa, meet legal obligations, resolve disputes, enforce agreements, maintain security, and preserve legitimate business records. Retention periods vary by the type and sensitivity of the information and why it was collected.

You may delete individual household records in Casa and request account or household-data deletion by contacting us. Some information may remain for a limited period in backups, security logs, or records we must retain by law. We will delete or de-identify it when retention is no longer required.

We use administrative, technical, and organizational safeguards designed to protect personal information, including encrypted transport, access controls, household-scoped authorization, and managed infrastructure. No system is completely secure, and we cannot guarantee absolute security.

Protect your sign-in credentials and notify us promptly if you believe your account or household has been accessed without permission.

Casa is designed for household coordination. A parent or guardian may create and manage profiles or age-appropriate access for children in their household. Casa is not directed to children under 13 acting independently, and children should not create an account without permission and supervision from a parent or legal guardian.

If you believe a child provided personal information without appropriate consent, contact us so we can review and delete it as required.

Depending on where you live, you may have rights to access, correct, delete, restrict, object to, or receive a copy of personal information. You may also withdraw consent where processing relies on consent and appeal certain request decisions.

You can manage household data and optional integrations in Casa, change device permissions in operating-system settings, and unsubscribe from non-essential communications. To make a privacy request, email us using the address below. We may need to verify your identity and authority over the relevant account or household before completing a request.

Casa and its service providers may process information in the United States and other countries. Those locations may have different data-protection laws than your home jurisdiction. Where required, we use appropriate safeguards for international transfers.

We may update this policy as Casa changes. We will post the revised policy here and update the date above. If a change materially affects how we use personal information, we will provide additional notice or request consent when required.

Questions, privacy requests, or concerns can be sent to: