Privacy policy
Last updated: 25 September 2026
This policy describes how Domeaz handles personal data. It covers the Domeaz app on iOS and Android, and this website.
1. Who is responsible
The data controller is:
- MJoy-IT VOF, trading as Domeaz
- Abeelweg 156, 3053 PD Rotterdam, the Netherlands
- Chamber of Commerce 42007160 · VAT NL869255897B01
- Email: hello@domeaz.app
We have not appointed a data protection officer. For an organisation of this size and with these processing activities, the GDPR does not require one.
2. What data we process
2.1 Data you enter yourself
- Your account: your email address and a password. The password is stored encrypted (hashed); we cannot see it. If you sign in with Sign in with Apple or Google, we receive your name and email address from them — with Apple that can be a private relay address if you choose so. No password reaches us in that case. For what happens at Apple or Google themselves, they are the responsible party; see their own privacy policy.
- Your profile: your name, an avatar (an emoji with a colour) and your language choice.
- Your home or homes: the name of the home and the timezone. A home has no address.
- The contents of your record: devices (brand, model, serial number, purchase date, warranty period), contracts (provider, amounts, term, notice period), maintenance tasks and chores with their completion history, contacts (name, phone, email, address — as you enter them), free-form home information and attachments such as receipts, photos, manuals and documents.
- What you give to the AI features: a photo of a type plate (Smart Scan), brand and model (manual finder), and for Help with a fault your description of the problem plus an optional photo. We don’t keep that description or the advice; see § 4.
- Housemates: who you invite, and — for people who don’t use the app — the name and avatar you fill in for them.
2.2 Data that is created automatically
- A push token per device on which you turn on notifications, so we can send you reminders. A push notification contains the name of the item it is about, for example “Washing machine”; that text travels via Google to your device. A reminder email contains the name of the device, contract or home and goes via Resend. The logo in our emails is loaded from domeaz.app; that leaves an ordinary technical log line with us.
- Error reports when something goes wrong in the app: the type of error and where in the app it occurred. Deliberately no screen recordings and no session logging.
- Your preferences: which kinds of notifications you want to receive, whether urgent matters from all your homes may show up on your home screen, and which tips you have dismissed.
- Use of the AI features: per home we record which feature was used when — not what you asked or what the answer was. We need that to keep track of the free allowance.
- An admin log per home: who added or removed a member, or changed a role, and when. Admins of that home can view it.
- Technical logs kept by our service providers: IP address, device or browser type, app or page version and the time of each request. This is part of keeping a service running and is kept by them for their own, usual period — typically a few weeks to a few months.
2.3 Subscription data
If you take out Premium, we process the status of your subscription: whether it is active and until when. Your payment details never reach us — Apple or Google process those.
If we give you Premium as a gift, for example as a tester or through the press, we also record that we gave it: for how long, when, and a short internal note saying why. We keep that for as long as your account exists, and it disappears when you delete your account.
2.4 What we do not do
- No advertising, and no advertising SDK in the app.
- No profiling, no automated decision-making.
- No selling or renting out data to third parties.
- No tracking your behaviour across other apps or websites.
- No location tracking. An address only enters the app if you type it in yourself for a contact; we do not read out your device location.
- No training of AI models on your photos or questions — not by us, and not by Anthropic (see § 4).
- On this website: no cookies and no personal data in the statistics. See the cookie and storage policy.
3. Why we process this data
| Purpose | Legal basis |
|---|---|
| Creating your account and letting you sign in, including via Apple or Google | Performance of the contract |
| Storing and showing your home record, including shared with housemates | Performance of the contract |
| Sending reminders about warranties, notice periods, maintenance and chores | Performance of the contract |
| Smart Scan, the manual finder and Help with a fault | Performance of the contract, at your request |
| Keeping track of the free AI allowance | Performance of the contract |
| Managing your subscription | Performance of the contract |
| Finding bugs and keeping the app stable | Legitimate interest: a working service |
| Preventing misuse, admin log per home | Legitimate interest: security |
| Legal obligations, such as bookkeeping | Legal obligation |
4. Who we share data with
We use a number of service providers. They process data solely on our instructions, under a data processing agreement.
| Party | For what | Where |
|---|---|---|
| Supabase | Database, sign-in, storage of attachments, server functions | Frankfurt (EU) |
| Resend | Sending email: confirmation, password reset, reminders, weekly digest | EU/US |
| Google (Firebase Cloud Messaging) | Delivery of push notifications | EU/US |
| Anthropic | Smart Scan, the manual finder and Help with a fault | US |
| RevenueCat | Subscription management | US |
| Sentry | Error reporting (without personal data) | Germany (EU) |
| Vercel | Hosting and visitor statistics for this website | EU/US |
There are also parties that do not work on our instructions but are themselves responsible for what they do with your data:
- Apple and Google (App Store, Play Store): payment and billing of your subscription.
- Apple and Google (Sign in with Apple, Google Sign-In): if you sign in with them. They give us your name and email address; what they record themselves is in their privacy policy.
What goes to Anthropic
This deserves a separate explanation, because it is the only place where content you supply leaves for an AI service. You start all three features yourself; without your action, nothing is sent.
- Smart Scan: the photo you take of a type plate, to read out brand, model, serial number and category.
- Manual finder: the brand and model of a device, to find a manual for it.
- Help with a fault: your description of the problem (up to 1000 characters), a photo if you add one, and from the device its name, category, brand, model, purchase date and warranty date. The serial number is deliberately not sent. We don’t store the advice that comes back: close the screen and it’s gone.
For the manual finder and Help with a fault, Anthropic uses its own search feature, which in turn queries an external search engine (currently Brave Search). Brand, model and search terms from your problem description can therefore reach that service too.
Anthropic uses what we send only to produce your answer and not to train models, and deletes input and output within 30 days — the standard period for commercial customers. If you don’t want this, don’t use these three features: the rest of the app works without them.
5. Transfers outside the EU
Your home record is stored in the European Union, in Frankfurt. Some of the service providers above are based in the United States. Google, Resend, Sentry and Vercel are certified under the EU-US Data Privacy Framework; with Supabase, Anthropic and RevenueCat we have concluded the European Commission’s standard contractual clauses.
6. How long we keep data
| Data | How long |
|---|---|
| Your account, profile and record | For as long as your account exists |
| Deleted items (trash) | 30 days, then permanently gone — including the files |
| Completed chores | 90 days after completion, then gone. The cost entry (amount, date, category and name) stays in the maintenance history |
| Maintenance history (what was done when) | For as long as the home exists — it is your home’s history |
| Archived devices, contracts and contacts | Until you throw them away; archiving is your choice |
| Invitations | Valid for 14 days; an expired invitation disappears 30 days after that |
| Sent and cancelled notifications | 90 days |
| Use of the AI features (home, feature, time — no content) | For as long as the home exists; needed for the free allowance |
| Admin log of a home | 12 months |
| Subscription events | 90 days with us, even after your account is gone — RevenueCat links them to a subscriber id, not to a name or email address |
| Orphaned files in storage | Cleaned up weekly |
| Your input at Anthropic | Deleted within 30 days (see § 4) |
| Error reports and email logs | According to the standard retention period of Sentry and Resend |
| Backups | Overwritten within 30 days |
After deleting your account, your profile, your record and your attachments are gone immediately, with the exceptions listed on the delete account page. Anything above with its own period — subscription events, error reports, email logs, backups — simply runs out that period. Records we are legally required to keep remain for as long as the law requires.
7. Your rights
You have the right to access, correct, erase, restrict and port your data, and the right to withdraw consent you have given.
Two of these sit directly in the app, under Me → My data:
- Export my data produces a single zip file. It contains
export.jsonwith your account (including how you sign in: Apple, Google or email), your profile, your memberships, your homes and all content — marked per item as active, in the trash or archived — plus your push tokens, your own AI usage records, notifications sent to you, redeemed promo codes and your subscription events from the last 90 days. The zip also contains all attachments of your homes: photos, receipts, PDFs and manuals. Housemates appear by the name you see in the app, not by their email address. - Delete my account deletes your account permanently. You first see what will happen, type DELETE to confirm, and then it’s done. Your customer profile at RevenueCat is wiped as well and the push token on your device is revoked. Details are on delete account.
For the other rights you can email hello@domeaz.app. We respond within a month.
If you disagree with how we handle your data, you can lodge a complaint with the supervisory authority in your country — see § 11 below. If you live in the Netherlands, that is the Autoriteit Persoonsgegevens (autoriteitpersoonsgegevens.nl).
8. Data about other people that you enter
In Domeaz you also record data about other people: a plumber’s phone number, a housemate’s name. For that data, you are the one who decides what gets recorded. Only enter what you need, and remove it if it’s no longer accurate. If such a person asks us to delete their data, we refer them to you or to the home’s admin, unless the law requires otherwise of us.
9. Children
Domeaz is not intended for children. You must be at least 18 years old to create an account; you confirm that when you register. If we notice an account belongs to a child, we remove it.
10. Security
All traffic runs over encrypted connections. Passwords are stored hashed and are not readable by us. Access to data is restricted per home in the database itself, so you only see what belongs to a home you’re a member of. Attachments are stored in protected storage and are only served through ten-minute temporary links. The same measures are explained in plain language on the Security page.
For use without an internet connection, the app keeps a copy of your record on your device. That copy falls under your device’s standard encryption, not a separate encryption by Domeaz, and disappears once you log out or remove the app. See also the cookie and storage policy.
11. Where you live
We are based in the Netherlands and this policy is written from a GDPR perspective. We apply the GDPR to everyone who uses Domeaz, wherever you live. If you live outside the EU, the following also applies:
- European Economic Area. Everything above applies to you; your supervisory authority is the Autoriteit Persoonsgegevens, or that of your own EEA country.
- Switzerland. The supervisory authority is the Federal Data Protection and Information Commissioner (FDPIC).
- Canada, including Québec. For questions about your data you can reach us at hello@domeaz.app; we are the party responsible for personal information.
- Brazil. You can reach us via hello@domeaz.app as the communication channel under the LGPD; the supervisory authority is the ANPD.
- United States. We do not sell or share your data with third parties for their own purposes — see § 2.4. US state laws such as the CCPA do not apply to us: we are too small for that.
- Anywhere else. Contact us at hello@domeaz.app; we respond within a month.
This does not affect your statutory rights in your own country.
Domeaz is not available on the App Store or Play Store for the United Kingdom: that requires a local representative under Article 27 UK GDPR, which we have not appointed. This section will be updated once that changes.
12. Changes
We update this policy as the app changes. The date at the top shows the latest change. In case of a major change, we’ll let you know in the app.
13. Contact
MJoy-IT VOF, Abeelweg 156, 3053 PD Rotterdam — hello@domeaz.app