HomePool Privacy Policy

1. Scope and who controls your information

This policy applies to the HomePool marketing website, early-access programme, HomePool web and mobile applications, support interactions and HomePool's use of optional connected services. HomePool determines why HomePool customer and prospect information is collected and used. Where a third-party provider processes information for HomePool, that provider also has its own contractual and legal obligations.

Privacy contact: use the HomePool Support page. A direct privacy email and the final operator legal entity will be added before paid general release.

2. Information HomePool may collect

Identity, account and security information

Name, email address, optional phone number, household/profile details, authentication and verification records, session/security events, device/request metadata and account preferences.

When a household is created, the device it is created on sends the name of its time zone, once. HomePool uses it to choose which of the country's time zones the household starts on, where the country has more than one. The device's time zone is not kept. The household's time zone is, and somebody who manages the household can change it in Settings.

Your photo

If you add a photo of yourself to your profile, HomePool keeps one picture for you. Before it is sent, the app makes it a small square: the middle of the photo, 320 pixels a side. The server keeps only what draws the picture and leaves out anything else the file carried, such as where and when the photo was taken and the camera it was taken on. The picture is checked for anything harmful before it is kept. It is shown to you and to the people in the households you belong to, and to nobody else: the HomePool support team is not shown it. You can change it, or take it away with “Remove photo”, at any time, and it is deleted when your account is closed.

Household and financial-planning information

Budgets, income schedules, bills, subscriptions, categories, payment responsibilities, shared/private settings, debts, hardship arrangements, goals, sinking funds, manual accounts, transactions, recurring-series data, balance snapshots, comments, attachments and reports that you choose to create or import.

Connected banking information

Where connected banking is enabled and you choose to use it, HomePool may receive account identifiers, account names/types, balances, transaction data and consent/connection metadata from the approved banking-data provider. HomePool does not ask you to give HomePool your bank password. The current Australian integration uses Basiq's hosted consent experience when that deployment is enabled.

Billing and subscription information

Plan, subscription status, provider/customer references, billing-cycle information and payment-related metadata needed to administer a subscription. Payment card details are handled by the payment provider rather than being stored as ordinary HomePool budget data.

Steps taken in the app (Luna Hindsight)

So that help can be given without asking you to explain what you were doing, the signed-in HomePool application keeps a short record of the steps you take: which screen was opened, which button was pressed, which field was changed (its name, never what you typed into it), an error message HomePool showed, and whether a change you made was saved or refused. Every digit in that record is masked, so it holds no amount, balance, date or account number, and it never holds anything you typed. The name on a button can include a name you gave something, such as a bill.

Requests for help and conversations with the HomePool team

When you ask the HomePool team for help from inside the application, HomePool keeps the request and the conversation that follows: what you wrote, each answer from the team and anything you write back. Unless you have switched Luna Hindsight off, each thing you send carries your steps from the hour before it. The conversation is yours: nobody else in your household is shown it. It can be read by the HomePool support team, which is the platform's owners and the people they have put on the support desk or let into the owner console. Each answer from the team is also sent in full to the email address you sign in with, so you can read it without signing in. A reply to that email is not read. You can send a picture or a file with a request or with something you write back, and the team can send one with an answer. Each file is checked for anything harmful before it is kept, and is kept with the conversation for as long as the conversation is. It can be opened by you and by the HomePool support team, and by nobody else in your household. The support team can also keep working notes of its own on a request, about how it is being handled. They are kept with the request and are not shown in the conversation. When you ask Luna a question, what is sent to the AI provider includes that you have a request open, its subject, when it was sent and whether it has been answered. It never includes what the team wrote.

Reminders by text message

If you turn on reminders by text message, HomePool sends them to the mobile number you give, through its text-message provider. The provider tells HomePool what became of each message, and HomePool keeps that: whether it arrived, and the provider's code if it did not. If you reply to a message, HomePool keeps that a reply came and what kind it was, and not its words. A reply of STOP turns your text-message reminders off in every household you belong to. In these records your number is kept only with its middle hidden, and as a scrambled form that cannot be turned back into the number.

Marketing, support and Luna information

Early-access and contact forms may collect name, email, optional phone, household context, current money-management method, goals, free-text messages, source URL and campaign/UTM attribution. Luna stores the support conversation and linked enquiry/session so the interaction can continue and be reviewed. Anything you type into a Luna message may be processed by the AI provider used to generate a response.

3. Where information comes from

Information can come directly from you, from another household member who is authorised to share household information, from files you import, from a connected-bank provider you expressly authorise, from subscription/payment providers, and from security/technical events generated when you use HomePool.

4. Why HomePool uses information

• provide, secure and maintain HomePool and authenticate users;
• calculate budgets, forecasts, Safe to Spend, reports, reminders, debt/goal projections and other requested product functions;
• apply the household visibility rules chosen by members and enforce private/shared boundaries;
• sync connected-bank data where the user has authorised that connection;
• administer subscriptions, billing status and plan entitlements;
• respond to support, walkthrough and information requests;
• operate Luna and improve product/support quality using appropriate safeguards;
• let Luna, and the HomePool support team when you ask for help, see the steps you took (Luna Hindsight) so a problem can be worked out without asking you to describe it;
• send early-access/product marketing only where the person has opted in or another lawful basis permits it;
• detect fraud, abuse, security incidents and technical failures;
• comply with law, resolve disputes and establish or defend legal claims.

5. Household privacy and other people's information

HomePool is designed so shared and private financial information can coexist. A connected account starts private and excluded from household planning until its owner changes those settings. A member should only add another person's personal information when they are authorised to do so and should avoid putting unnecessary sensitive information into free-text fields, comments, attachments or household labels.

6. Service providers and disclosures

HomePool uses specialist providers to operate the service. Current categories include cloud hosting and delivery (Vercel), database infrastructure (Supabase/PostgreSQL), transactional email (Resend), subscription/payment administration (Paddle), Australian connected banking where enabled (Basiq), text messages for reminders where a member has turned them on (Twilio), web-push/browser delivery, AI response generation for Luna on this website and inside the application, and for reading the words of a document when a member asks for that (Anthropic), and the existing FlowDesk/Supabase marketing lead system for HomePool enquiry and Luna records.

FlowDesk separation: HomePool lead records use HomePool-specific source labels inside the FlowDesk lead database. This is an internal operational integration only. HomePool retains its own legal notices and product policies; FlowDesk's legal pages are not the legal source of truth for HomePool.

HomePool may also disclose information when required by law, to protect users or the service, in connection with a corporate transaction subject to appropriate safeguards, or when you direct or consent to the disclosure.

7. Luna and AI processing

The current marketing Luna flow collects identity/contact details before chat so the enquiry can be linked to a support record. Those identity fields are not intentionally inserted into the AI prompt by the current implementation, but the conversation messages themselves are sent to the configured AI provider to generate a response. If you type personal or financial information into the conversation, that content may therefore be processed by the AI provider. Do not enter passwords, bank credentials, full account numbers or information you do not want included in the conversation record.

Luna inside the application. Households whose membership includes Luna can ask her questions in the signed-in application. To answer, HomePool sends the AI provider your question, the conversation on your screen, a summary of your own household's figures as your Home screen shows them (for example your balance, what is safe to spend, upcoming bills with their names and amounts, your categories and how far setup has got) and your steps from the last hour as kept by Luna Hindsight. It also sends, of what you yourself are allowed to see: the names of the bills, incomes and debts in your household's plan, with each one's category and whether it is paused; the last fifteen lines of your household's Activity record, which say who changed what and when, and so can name other members of your household; and the last twenty-five transactions recorded in the accounts you are allowed to see, each with its date, description, amount, category and the name of its account. A transaction's description can name another person or a business. Nothing a member keeps private from you is sent with your question. HomePool does not store that conversation unless you press the button to send it to HomePool support. Luna cannot change anything by herself: what she offers appears as a button, and nothing happens until you press it. That includes pausing, enabling or deleting a bill and renaming a category, and a delete is asked about once more before it is done. If no AI provider is available, the answer comes from HomePool's own built-in rules and you are told so.

Luna Hindsight. Your steps are your own: no other member of your household can see them. They are shown to Luna when you ask her a question, sent with a request for help when you choose to send one, and can be read by the HomePool support team when you contact them about a problem — each time a member of that team opens a member's steps, who looked and why is recorded. You can read exactly what is kept, and switch the record off, in Settings; switching it off deletes what was kept. Steps are deleted after seven days.

Reading a document. In Document Intelligence a photo or a file you choose is read on your own device and is not uploaded: only its words are sent to HomePool when you ask for them to be analysed, and HomePool does not keep them. For a household in Germany, France or the Netherlands the words are read in that country's language as well as in English; that reading happens on your device and in HomePool itself, and no AI provider is sent anything by it. Where HomePool offers an AI reader, there is a box you can tick for one document at a time. Only when you tick it are the words of that document, up to 24,000 characters, sent to the AI provider to be read, and the screen says so before anything is sent. A bill's words can include names, addresses and account numbers, yours and other people's. HomePool keeps neither the document nor what was found in it; it counts that a reading happened, with no word of the document. What the AI gives back is shown only where it is written in your document, and is a suggestion for you to check.

HomePool does not use Luna to make a solely automated decision that produces a legal or similarly significant effect on a person. Luna is a product/support assistant, not a financial adviser.

8. Australian Open Banking / Consumer Data Right

When Australian CDR/Open Banking is enabled, the consent experience and a dedicated CDR/consent notice must identify the participating provider, HomePool's role under the executed Basiq arrangement, the data scopes, purposes, consent duration, withdrawal choices and deletion/de-identification treatment. This general Privacy Policy does not replace any CDR policy, consent dashboard or consent knowledge-base disclosure required for that deployment.

Disconnecting connected banking in HomePool removes the member's connected accounts and bank-imported transaction history from HomePool without deleting unrelated manual household data, subject to any law or CDR rule that requires a different treatment.

9. International processing and transfers

HomePool is marketed worldwide and uses service providers that may process information in Australia and other countries. Where Australian Privacy Principle 8 applies, HomePool will take reasonable steps required for overseas disclosures. Where the GDPR or UK GDPR applies, HomePool will use an applicable transfer mechanism or other recognised safeguard where required. Provider locations and sub-processors can change, so HomePool will maintain a current processor/transfer register before broad public launch.

Where HomePool's data is held. As of 13 October 2026, the servers that run the signed-in HomePool application and the database behind it are both in Tokyo, Japan (the Amazon Web Services region ap-northeast-1). The household and account information described in this policy is held there, wherever in the world you use HomePool. Enquiries and Luna conversations from this website are held in the separate lead system described in section 6, not in that database. The other providers named in section 6 handle what they are sent in their own locations.

10. Retention

HomePool keeps personal information only for as long as reasonably necessary for the purpose for which it was collected, account/service operation, security, dispute handling, legal obligations and legitimate record-keeping. Account and financial records are retained while needed to provide the account and are deleted or de-identified when no longer required, subject to backups and legal requirements. Marketing enquiries are retained while relevant to the enquiry/launch relationship and suppression records may be retained so an unsubscribe request continues to be honoured. Steps kept by Luna Hindsight are deleted after seven days, or at once when you switch the record off; the steps sent with a request for help are kept with that request. HomePool will publish more specific retention periods where a market requires them.

11. Security

HomePool uses access controls, tenant/household isolation, authenticated server-side visibility rules, encrypted network connections and other technical/organisational controls appropriate to the service. No internet service can guarantee absolute security. HomePool maintains incident-response processes and will make required notifications if a qualifying data breach occurs.

12. Your privacy choices and rights

Depending on where you live, you may have rights to access, correct, delete, restrict or object to processing, receive a portable copy of certain information, withdraw consent and complain to a privacy regulator. Australian users may complain to the Office of the Australian Information Commissioner after first giving HomePool a reasonable opportunity to resolve the issue. EEA/UK users may also have rights under applicable GDPR/UK GDPR rules and may complain to their competent supervisory authority.

You can opt out of HomePool marketing at any time using the unsubscribe method in the message or by contacting HomePool. A support or walkthrough request does not itself opt you into general HomePool marketing.

13. Children

HomePool accounts are intended for adults who can enter into the applicable service agreement. Do not create an account if you are under the minimum legal age to contract in your jurisdiction. Household records should not contain unnecessary information about children.

14. Changes and contact

HomePool will update this policy when data practices materially change and will provide additional notice where required. For privacy requests or complaints, use Support. The final operator legal identity/direct privacy contact remains a pre-general-release legal completion item.