HomeFolio
Back to HomeFolio

Signing in and your data

What we ask for, and exactly why.

HomeFolio needs an account so that a home belongs to someone and stays private to them. You can register with an email address and a password — the password is stored as a hash, so nobody here can read it — or sign in with Google or Apple and not have one at all. If you use a provider, what it hands over is below, and it is all we receive.

Sign in with Google

Choosing Continue with Google asks Google to confirm who you are. Google then passes HomeFolio three things, and nothing else:

  • Your nameFills in your display name, so the other members of a shared home see a person rather than an address. You can change it in Settings.
  • Your email addressIdentifies your account. It is what an invitation to a home is matched against, and how we reach you about the account itself. We send no marketing.
  • Your Google account IDAn identifier from Google that lets us recognise you the next time you sign in, so the account works without a password.

These are the standard sign-in scopes openid, email and profile. HomeFolio requests no other scope.

HomeFolio cannot read your Gmail, Drive, Calendar, Contacts or Google Photos, and never asks for access to them. Sign-in is used only to sign you in.

Sign in with Apple

Apple passes the same two details — your name and email address, plus an identifier for your Apple account. If you choose Apple’s Hide My Email, we only ever see the relay address, which works exactly as well.

What happens to what you put in

  • Your home content is yours. Photos, floor plans, documents and notes are stored on our own server and object storage, and are visible only to you and the people you invite into that home.
  • Nothing is sold or advertised against. There are no advertising SDKs, no marketing analytics and no third-party trackers in HomeFolio.
  • You can delete all of it. Settings → Account → Delete account removes your account, the homes you own and their files. For a copy of your data, write to the contact address at the end of this page; we answer within 30 days.
  • The full detail is in the policy below — what is collected, the legal basis for it, how long it is kept, and your rights under the GDPR.

Privacy Policy

Last updated: 17 September 2026

This Privacy Policy explains how HomeFolio (“HomeFolio”, “we”, “us”) collects, uses and protects personal information when you use the HomeFolio app and website — the home documentation and virtual tour service at https://homefolio.cloud and in the HomeFolio apps for iOS and Android.

HomeFolio is the data controller for that information. You can reach us at the address under Contact, at the end of this page.

This notice is written for transparency under the GDPR and similar laws. It is not legal advice.

1. What we collect

  • Account: name, email address, password (stored hashed) or Sign in with Apple / Google identity
  • Home content you upload or create: home name, optional address, floor plans, rooms, photos (including 360°), videos, documents, notes, links, contact details you attach to items, LiDAR / room measurements and 3D models (on supported iPhones and iPads)
  • Sharing: membership (who you invite), invite links, and member display names / emails visible to other members of a home
  • Feedback you send: your message, its category, any photo you attach, and which screen, app version, platform and language it was sent from — kept with your account so we can answer you
  • Technical: session token (cookie or on-device storage), basic server access logs (for example IP address, time, path) used for security and rate limiting

We do not use advertising SDKs, marketing analytics, or payment processors in HomeFolio today.

2. Signing in

You can register with an email address and a password, or sign in with Google or Apple.

  • Google passes us three things and nothing else: your name, your email address, and your Google account identifier. These are the standard sign-in scopes openid, email and profile. HomeFolio requests no other scope, and cannot read your Gmail, Drive, Calendar, Contacts or Google Photos.
  • Apple passes the same details, plus an identifier for your Apple account. If you choose Apple’s Hide My Email, we only ever see the relay address, which works exactly as well.

Your name fills in your display name, so other members of a shared home see a person rather than an address. Your email address identifies the account, is what an invitation to a home is matched against, and is how we reach you about the account itself. We send no marketing.

3. Why we process it (purposes and legal bases)

PurposeLegal basis
Create and run your account and homesContract (providing the service you asked for)
Store and show your home contentContract
Invite others and share a homeContract / your instruction
Sign-in with Apple or GoogleContract; the provider authenticates you
Security, abuse prevention, rate limitsLegitimate interests (keeping the service safe)
Read and answer feedback you send from the appLegitimate interests (fixing and improving the app you use)
Respond to privacy or support requestsLegal obligation and/or legitimate interests

4. Sharing

  • Other members of a home you own or join can see that home’s content and the member list (including email and display name).
  • Apple or Google if you choose their sign-in.
  • Hosting and infrastructure we use to run the service (database, object storage, server hosting, and the mail server that sends invitations, password resets and address confirmations).
  • Authorities if required by law.

We do not sell your personal information.

5. Retention

  • Account and home data: until you delete the account or home, or ask us to erase them.
  • Feedback you send: kept until you delete your account, which deletes it and any photo with it, or until you ask us to erase it.
  • Session tokens: expire after about 7 days (you can sign out earlier).
  • Invite links: expire after about 7 days if unused.
  • Server logs: kept only as long as needed for security and operations (short period), then discarded.
  • Copies cached on your device (for example panorama cache) are removed on sign-out or account deletion where the app controls them.

6. Your controls in the app

  • Delete account in Settings — removes your account, the homes you own and their files. Homes shared with you stay with their owner.
  • Delete a home if you are the owner.
  • For a copy of your data (access / portability), write to the address under Contact at the end of this page. We aim to respond within 30 days.

7. Cookies and similar technologies

HomeFolio uses an essential session cookie (homefolio_token), or the equivalent token stored on your device in the apps, to keep you signed in. It also stores local preferences and a media cache on your device. Essential login cookies do not require a marketing cookie banner, and we set no advertising or analytics cookies.

8. International transfers

Some providers (for example Apple and Google, for sign-in) may process data in the United States or other countries outside your own. Where required, we rely on appropriate safeguards used by those providers, such as Standard Contractual Clauses or an adequacy decision. Our own application database and object storage run on infrastructure we control; we aim to keep them in the EEA where practical.

9. Security

We use reasonable technical and organizational measures: access control, HTTPS in production, hashed passwords, and encrypted secrets where implemented. No method of storage or transmission is perfectly secure.

10. Children

HomeFolio is not directed at children. Do not use it if you are under 13, or under the digital consent age in your country if that age is higher. We do not knowingly collect personal data from children. If you believe a child has provided data, contact us and we will delete it.

11. Your rights (EEA / UK and similar)

Depending on where you live, you may have the right to:

  • Access your personal data
  • Correct inaccurate data
  • Delete data (“erasure”)
  • Restrict or object to certain processing
  • Withdraw consent where processing is based on consent
  • Receive a portable copy of data you provided
  • Lodge a complaint with a supervisory authority (in Norway: Datatilsynet)

To exercise these rights, write to us at the address below. You can also delete your account in the app at any time. We aim to respond within 30 days.

12. Changes

We may update this policy from time to time. The “Last updated” date at the top will change. For significant changes we may give additional notice in the app or on the website.

13. Contact

Questions about this policy, or about the data HomeFolio holds about you:

HomeFolio
Email: haakony@gmail.com
Web: https://homefolio.cloud

This policy is published at https://homefolio.cloud/privacy — the URL linked from the app and from its Google and Apple sign-in configuration.