Privacy Policy

Last updated: 6 August 2026

This policy explains what personal data Home+ collects, why we collect it, who we share it with, and what rights you have over it. It covers both this website and the Home+ mobile apps for iOS and Android.

1. Who we are

Home+ is an independently run service based in the United Kingdom. We are the data controller for the personal data described in this policy, which means we decide what is collected and why, and we are responsible for looking after it.

For anything about your data or this policy, contact privacy@myhomeplus.io. For general help with the service, contact support@myhomeplus.io. If you need our full contact details in order to make a formal request or a complaint, email us and we will provide them.

2. What we collect

Account details. Your name, email address, phone number, and a securely hashed password. Optionally a profile photo. We never store your password in a readable form.

Your property, including precise location. Your home’s full street address, postcode, and its latitude and longitude, along with details such as property type, number of bedrooms and bathrooms, year built, tenure, heating type and EPC band. The coordinates come from the postcode or address you enter, or from a pin you place on a map. We do not use your device’s GPS and the apps never request location permission.

Documents and photos you upload. Insurance policies, gas safety certificates, EICR and EPC certificates, warranties, receipts and similar records, plus photos of your property and of jobs. Photographs are uploaded as you supply them, which means any metadata your camera embedded (such as the time taken, and in some cases location) is included. If that concerns you, remove metadata before uploading.

Jobs, quotes and reviews. Job descriptions and photos, your preferences and answers about the work, the quotes you receive, and any rating or written review you leave about a tradesperson.

Messages. The content of messages you exchange with tradespeople through the app, and whether a message has been read.

Home management data. Your Home MOT checklist answers, tasks, reminders, compliance dates, and annual spend totals you record.

Preferences. Your notification and marketing settings, and your theme choice.

Technical data. When you use the website we receive your IP address and browser information. Our servers keep standard security and error logs.

3. What we do not collect

We think this is worth stating plainly, because it is unusual. The Home+ mobile apps contain no analytics, advertising, attribution or crash-reporting software of any kind. We do not collect your device’s advertising identifier, we do not build a profile of you for advertising, we do not track you across other companies’ apps or websites, and we do not sell your personal data. The apps do not ask for tracking permission because they have nothing to track you with.

We also do not collect health data, and we do not ask for your date of birth.

4. Why we use it, and our lawful basis

To provide the service (performance of a contract). Creating and running your account, storing your documents, generating your Home MOT score and reminders, passing your job details to tradespeople so they can quote, and carrying your messages.

To keep the service secure and working (legitimate interests). Authentication, preventing fraud and abuse, diagnosing faults, and improving how the product works. We balance this against your interests and use the least data that achieves it.

To send marketing (consent). We only send marketing email if you have opted in, and you can withdraw at any time from Settings or the unsubscribe link. Withdrawing does not affect service messages such as expiry reminders, which are part of the product.

To meet legal obligations. Tax, accounting and responding to lawful requests.

5. Automated analysis of your documents by AI

When you upload a document, we send its contents to OpenAI so that a vision model can read it and suggest details such as the expiry date, so you do not have to type them in. Documents you file under Energy & EPC receive further automated analysis to extract your energy rating and improvement suggestions.

This means the contents of documents you upload — which may include your name, your address and other personal details printed on a certificate — are processed by OpenAI on our behalf as our processor, under terms that prohibit them from using your data to train their models. Suggestions are only suggestions: you can edit or ignore them, and nothing is decided about you automatically. This is not automated decision-making producing legal or similarly significant effects under Article 22 of the UK GDPR.

If you would prefer a document not to be analysed this way, please do not upload it, and contact us if you would like it removed.

6. Who we share it with

We do not sell your personal data. We share it only as set out here.

Tradespeople. When you post a job, the details you provide — including the job description, photos, your location and postcode — are made available to tradespeople so they can quote. If you accept a quote, your contact details are shared with that tradesperson so the work can go ahead. Tradespeople are independent businesses and are separate data controllers for what they do with your details.

Our suppliers. Hosting, storage, email delivery and the AI processing described above. They act on our instructions.

Services the apps contact directly. Some features send data from your device straight to a third party rather than through our servers:

Legal and business transfers. Where required by law, and to a buyer if the business is sold, in which case this policy continues to apply until you are told otherwise.

Where we share data with a third party, we require them to protect it to at least the standard set out in this policy.

7. Where your data goes

Our infrastructure is in the United Kingdom and the European Economic Area. The AI processing described in section 5 involves a transfer to the United States. Where data leaves the UK we rely on the UK International Data Transfer Agreement, the UK Addendum to the EU Standard Contractual Clauses, or an adequacy decision, together with additional safeguards where needed. You can ask us for details of the safeguards used.

8. How long we keep it

We keep your account and its contents for as long as your account is open. If you delete your account, we delete or irreversibly anonymise your personal data without undue delay, except where we have to keep something longer:

• Records of jobs and payments, kept for as long as UK tax and accounting law requires.
• Records of reports and safety issues, kept for as long as we need them to act on repeat abuse.
• Backups, which are overwritten on a rolling cycle and are not used to restore deleted accounts.

Messages you have sent to a tradesperson remain visible to that tradesperson in their own account, in the same way an email you have sent stays in the recipient’s inbox.

9. Deleting your account

You can delete your account and its data at any time, in two ways:

• In the app: Settings → Security → Delete account. You will be asked to confirm your password, and the deletion is immediate and permanent.
• Without the app: use our account deletion page, which works even if you have uninstalled the app.

Deletion cannot be undone. We cannot restore a deleted account, and support cannot recover it for you afterwards.

10. Keeping it safe

Data is encrypted in transit. In the mobile apps, your sign-in tokens are stored in the device’s secure hardware-backed store — the iOS Keychain or the Android Keystore — not in ordinary app storage. Access to production systems is restricted and logged.

No system is perfectly secure. If a breach affects your rights we will tell you and the ICO as the law requires.

11. Your rights

Under the UK GDPR you have the right to: be informed about how we use your data; access a copy of it; have inaccurate data corrected; have your data erased; restrict how we use it; object to processing based on legitimate interests; receive your data in a portable format; and withdraw consent at any time where we rely on it.

To exercise any of these, email privacy@myhomeplus.io. We will respond within one month. There is no charge unless a request is manifestly unfounded or excessive.

If you are unhappy with how we have handled your data you can complain to the Information Commissioner’s Office, Wycliffe House, Water Lane, Wilmslow, Cheshire SK9 5AF, at ico.org.uk/make-a-complaint or on 0303 123 1113. We would rather you came to us first so we can put it right.

12. Children

Home+ is for adults. You must be 18 or over to create an account. We do not knowingly collect personal data from children. If you believe a child has given us their data, contact privacy@myhomeplus.io and we will delete it.

13. Cookies

This website uses cookies. Non-essential cookies are only set after you agree to them, and you can change your choice at any time. Our Cookie Policy explains what each one does. The mobile apps do not use cookies or any advertising technology.

14. Changes to this policy

If we change this policy we will update the date at the top, and for significant changes we will tell you in the app or by email before they take effect.

15. Contact

Privacy and data rights: privacy@myhomeplus.io
General support: support@myhomeplus.io