Privacy at Homespun

Who runs this

Homespun is built and run by a small independent team. For anything about your data, email privacy@homespun.dev.

What we store

• Your email address, to sign you in and match you to your account.
• A display name, only if you set one yourself in Settings. Signing in with Google gives us your email; it does not pull a name from your Google profile.
• The content you and your agents create inside your apps: rows of data, uploaded files, and activity feed entries.
• A stamp on every row noting whether you or one of your agents wrote it.
• Your answer to "How did you hear about Homespun?", if you choose to answer it. We ask once, on your home page just after you sign up, so we know which places people actually find us through. It is optional: you can close the question instead, and either way we never ask again. If you pick "Something else" we store the short note you type. Nothing here is linked to any advertising or third party, and your answer is deleted along with the rest of your data when you delete your account.
• A count of visits to our own public pages, so we can tell whether anyone is finding us. We record the page, the country your network address maps to, the site that linked you, any campaign tag in the link, and a coarse device and browser type (such as "mobile" and "Safari"). We do not set a cookie, we do not store your IP address, and none of it is linked to your account or to any advertising or third party. To count returning visitors without identifying anyone, we keep a one-way scrambled fingerprint of your network address that changes every day and on every page, and we delete those after two days. Everything that remains is a plain total.
• Operational logs (requests and errors) that keep the service running and let us debug problems.

What other people see

Inside a shared app, other members see display names only. Nobody, including other members, ever sees your email address.

What we don't do

• No advertising.
• We never sell or share your data with third parties.
• No cross-site trackers.
• No third-party analytics. Everything we count, we count ourselves, on our own servers. This site ships no tracking scripts of any kind.
• No profiling and no automated decisions about you. Nothing you tell us feeds an advertising or scoring system.

Where your data lives

Homespun runs on Microsoft Azure, in the North Europe region.

Deleting your data

Deleting an app takes it offline immediately: once it's gone, nobody, including you, can open it again. Today that is a soft delete under the hood, so the app's rows and files stay in our database rather than being purged right away, the way deleted agents and attachments are purged automatically after a retention window. If you want an app's data erased for good, email us and we'll remove it by hand.

Your rights

Under GDPR you can ask to see the data we hold about you, have it corrected, or have it erased. You can delete your account and all your apps yourself from Settings: deletion takes effect immediately, and your stored data is purged automatically within 30 days. Until that purge finishes, your email cannot sign in again or start a new account. If you have questions, write to privacy@homespun.dev any time.