Home1 for Businesses — Ireland's Home Services Marketplace

1. Who We Are

Home1.app (“we”, “us”, “our”) operates a platform that connects homebuyers with property-related service providers. This Privacy Policy explains how we collect, use, store, and protect your personal data when you use our website, mobile application, and business portal.

2. Data We Collect

We collect the following categories of personal data:

Account data: name, email address, and password (hashed) when you create an account.
Profile data: country, region, language preference, buyer type, and homebuying stage progress.
Business data: business name, address, service categories, coverage areas, and contact details (business users only).
Usage data: pages visited, features used, calculator inputs, and scheme checker results.
Communication data: messages sent through in-app chat between homebuyers and service providers.
Device data: device type, operating system, and app version (collected automatically).

3. How We Use Your Data

We use your data to:

Provide and improve our services, including personalised homebuying guidance.
Connect homebuyers with relevant service providers in their area.
Process business applications and manage service listings.
Send transactional emails (account verification, team invitations, application updates).
Detect and prevent fraud, abuse, and violations of our Terms.
Generate aggregated, anonymised analytics to improve the platform.

4. Legal Basis for Processing

We process your data based on: (a) contract performance — to deliver the services you have registered for; (b) legitimate interest — platform security, fraud prevention, and service improvement; and (c) your consent — where required, such as displaying your business profile to consumers.

5. Data Sharing

We do not sell your personal data. We share data only in these circumstances:

Service providers and homebuyers: when you initiate contact through the platform, your profile information is shared with the other party.
Infrastructure providers (sub-processors): we use Supabase for database hosting and authentication; Postmark for transactional email delivery; Anthropic for AI-powered features (Home Guide, AI search assistant); and Google Places API for address autocomplete. Each processes only the data necessary for their function under a Data Processing Agreement with us.
Legal requirements: we may disclose data if required by law, regulation, or valid legal process.

6. Data Storage and Security

Your data is stored securely using Supabase with encrypted connections (TLS), row-level security policies, and access controls. We retain account data while your account is active. On deletion, account data is anonymised within 30 days. Financial records (invoices, transactions) are retained for up to 7 years to meet our legal and audit obligations.

7. Your Rights

Under GDPR, UK GDPR, and applicable data protection laws, you have the right to:

Access the personal data we hold about you.
Request correction of inaccurate data.
Request deletion of your data (subject to legal retention requirements).
Restrict or object to certain processing.
Receive your data in a portable format.
Withdraw consent at any time without affecting prior processing.

Business users can delete their account via Dashboard → Settings. Consumer app users can request deletion through the app's account settings. We will respond to data rights requests within 30 days.

8. Cookies and Local Storage

The business portal uses essential cookies for authentication and language preference. The mobile app uses device-local storage (AsyncStorage) for preferences and offline functionality. We do not use third-party tracking cookies or advertising pixels.

9. Children

Our services are not directed at individuals under 18 years of age. We do not knowingly collect personal data from children.

10. Changes to This Policy

We may update this Privacy Policy from time to time. Material changes will be communicated via email or in-app notification. The “Last updated” date at the top of this page indicates when the policy was last revised.

11. Supervisory Authorities

You may lodge a complaint with the data protection authority in your jurisdiction:

Ireland: Data Protection Commission — dataprotection.ie
UK: Information Commissioner's Office (ICO) — ico.org.uk
Germany: Your relevant Landesdatenschutzbehörde
USA: Your state attorney general's office

12. Contact

If you have questions about this Privacy Policy or wish to exercise your data rights, please contact us via the support section of the platform.