How we protect your data
No big words. Below is what we do to protect your data, and also what we do not promise.
What we do
- Only you and your housemates see your home
- Who can see what is enforced in the database itself, per home. You only get data for a home you are a member of, even if something went wrong in the app.
- Encrypted connection and encrypted storage
- All traffic between the app, this website and our servers runs over an encrypted connection. The data is stored in Frankfurt with our hosting provider Supabase, which encrypts the storage.
- We cannot read your password
- Passwords are stored hashed. When you choose a password we check whether it appears in known data breaches, and reject it if it does. You can also sign in with Apple or Google.
- Receipts and documents are locked away
- Attachments are kept in private storage. The app fetches them through a temporary link that is valid for ten minutes.
- On your phone
- So you can read without a connection, the app keeps a copy of your records on your device, for 24 hours at most. It is covered by your device's encryption and is gone as soon as you sign out.
- Run by two people
- Only the two partners of MJoy-IT have access to the admin environment, with two-step verification wherever the service offers it. Test and production data are kept apart.
- Backups
- Backups are made automatically. They are overwritten within 30 days, so what you delete is then really gone.
- You stay in control
- You can export everything as a single zip file and delete your account yourself, straight from the app.
What we do not promise
- No system is watertight, and neither is ours. So we do not promise 100% security; we promise to take it seriously and to be open when something goes wrong.
- Your data is not end-to-end encrypted. The server has to be able to read it to send you a reminder in time.
- The app does not have its own two-step verification yet. If you sign in with Apple or Google, theirs applies.
- If you use Smart Scan, the manual finder or Help with a fault, that photo or question goes to our AI processor. Exactly what is sent is in the privacy policy.
- Domeaz has not been tested or certified by an external party.
Found a vulnerability?
Please email us, ideally with enough detail to reproduce it and without sharing your own data or anyone else's. We read everything ourselves and usually reply within two working days.
The full story is in the privacy policy.