Privacy policy

This policy explains how LohiSoft s.r.o. processes personal data when you use Homnest, the household-management service — the native apps, the web app at app.homnest.eu, and this marketing site.

Controller

The controller is LohiSoft s.r.o., Komenského 317/135, 943 01 Štúrovo, Slovak Republic. Company ID (IČO): 53253914. Privacy contact: hello@lohisoft.com. Product support remains support@homnest.eu.

Data we process

Account data: your email address and a password hash. Household (Home) membership and the role you hold in that Home.

Stored with AES at rest (the controller can export this if you ask): calendar events, tasks, finance records, shopping-list metadata, Home settings, and audit logs.

End-to-end ciphertext that the controller cannot decrypt: messages, calls and call recordings, photos, receipts, file attachments, and location history. We store ciphertext and metadata such as timestamps; we cannot read the content.

Legal bases

• Contract (GDPR Art. 6(1)(b)) to provide Homnest.
• Legitimate interest (Art. 6(1)(f)) for security, abuse and fraud prevention.
• Legal obligation (Art. 6(1)(c)) where the law requires us to keep or disclose records.
• Consent (Art. 6(1)(a)) for location sharing (opt-in) and for any marketing. This marketing site does not send marketing messages.

Retention

If you delete your account we keep the record for 30 days, then purge over the following 60 days (90 days in total). Push delivery receipts are kept for 90 days. Location history has a 30-day TTL.

Processors and stores

• MongoDB Atlas in Frankfurt (EU).
• AWS S3 in the EU for files.
• Apple APNs and Google FCM for push delivery.

There is no CDN in front of Homnest. There is no SMS provider. For in-app purchases Apple and Google are the merchant of record; their privacy terms also apply to store billing.

Your rights

You may request access, erasure and portability of data that is not end-to-end encrypted. End-to-end content can only be decrypted on a device that holds the Home key. If the key is lost, that content is gone.

Children

An independent account requires the EU member-state minimum age: 16 in Hungary, Germany and the Netherlands; 15 in France; 13 elsewhere. A Teen or Child inside a Home (from age 6) is created by a parent and has no separate email account. The App Store listing is 13+; Google Play is PEGI 12 / IARC 13.

Cookies

This site sets only the homnest_locale cookie. It is strictly necessary to remember the language you chose. There are no analytics cookies and no advertising cookies.

Supervisory authority

You may lodge a complaint with the Slovak data protection authority (Úrad na ochranu osobných údajov, ÚOOÚ) or with the authority in the country where you live or work.