HomiNote
Privacy Policy
Last updated: 8 November 2026 · Contact: support@tibrcode.com
HomiNote is an organiser for families, groups of friends and work teams (lists, budget, calendar, health, group hub, chat and calls) available at hominote.com and as an Android app, with an iPhone app coming. This policy explains what data HomiNote handles, where it goes, why, and the choices you have.
1. Who is responsible
HomiNote is developed and operated by Tibrcode Software Development, Abu Dhabi, United Arab Emirates, which decides how the data described here is handled (the “controller”). For any privacy question or request, write to support@tibrcode.com.
2. Your content stays on your device
Everything you create (lists, notes, expenses, documents, health records, recipes, memories) is stored on your own device, in the browser's storage (IndexedDB). HomiNote works without an account, and we run no server that keeps your notes.
3. What leaves your device, and when
Each feature that needs the internet asks first and names the service it uses. Nothing from your content is sent before you agree to that feature. You can withdraw any consent at any time in Settings → Privacy, and the feature stops at once. Three things happen without a feature consent, and none of them carries your content:
- Loading the website. Opening hominote.com loads the app from our host, Vercel. Like any website, the host receives your IP address and browser details.
- Update checks. The website asks our server whether a newer version was published. The Android app installed from our website reads, at most once a day, a small public file on our download site (Firebase Hosting, run by Google) to learn whether a newer version exists. Neither check sends any identifier or data of yours. You can turn the app's check off in Settings → About. Apps installed from Google Play or the App Store are updated by the store.
- Advertising in the Android and iPhone apps, described in section 5.
4. The services we use, by name
- HomiNote AI: our own AI service, which runs on Cloudflare Workers AI (Cloudflare, Inc.). It is the default for every AI feature: tips, the smart chef, reading receipts and documents, and meal analysis. Sends: the text of your request, and the photo when you ask about one. It is processed to answer and is not stored by us.
- Pollinations.ai: alternative free AI models you can choose in Settings → AI. Sends: the text of your request.
- Google Cloud Vision (Google LLC): reads the text of a receipt or photo you choose to scan, through our server. The photo is not stored. OCR.space is used as a backup only when our server cannot be reached.
- Open Food Facts (the open food database, a non-profit): looks up a product when you scan its barcode in Find it or in the pantry. Sends: the barcode. The store buttons in Find it open the store's own website (for example Amazon, noon or Carrefour) with what you searched for; that store then applies its own privacy policy.
- Your own AI key: Google Gemini, Groq, OpenAI, Anthropic, Together AI, or an OpenAI-compatible service you name, used only if you add your own key. Requests then go straight from your device to that provider, under its terms. Your key is encrypted on your device (AES-GCM) and is never sent to us.
- Google Firebase (Google LLC): the optional family hub, with sync, chat, calls and notifications. Sends: your family hub data (members, tasks, messages, shared lists), a device token for notifications, and your sign-in identity (anonymous, or email, Google or Apple if you create an account). Stored in Google Cloud.
- Calls connect directly between the two devices. To find that path, each device asks Google's public STUN servers, which see its IP address. When no direct path exists, the call is relayed by Cloudflare. Calls are end-to-end encrypted, and the relay cannot read or hear them.
- Google AdMob and Google AdSense (Google LLC): advertising, see section 5.
- Vercel (Vercel Inc.) hosts the website, and Firebase Hosting hosts the Android download.
5. Advertising
The Android and iPhone apps show Google AdMob ads: a banner in a strip fixed at the top of the screen, apart from the app's own content, and at times banners in cards marked “Advertisement” inside the pages. To serve and measure ads, Google may use your device's advertising ID, your IP address and approximate location, and your interactions with ads, under Google's advertising policies.
- Where the law requires consent (the EEA, the UK and Switzerland), Google's consent form is shown before any ad is requested. You can change your choice later in Settings → Privacy → Ad privacy choices, where US state privacy choices are also available.
- The website will show Google AdSense ads once our site is approved. Until then it shows no ads. On iPhone, once the app is released, nothing will be tracked without your permission (App Tracking Transparency).
- In the family-member app, which children may use, every ad request is marked as directed to children: Google then shows only general-audience ads, chosen without any personal data, and asks no consent.
- HomiNote never shares your lists, notes, expenses or family content with advertisers, and ads are limited to family-appropriate content.
6. Children
The HomiNote owner app is intended for adults: parents and guardians. A parent may invite family members, including children, into the family-member app, whose ads are only general-audience ones chosen without personal data. Children should use it only with a parent's permission. We do not knowingly collect personal information from children beyond what a parent enters into the family hub. If you believe a child has given us data without permission, write to us and we will delete it.
7. Legal bases and international transfers
- Consent: each online feature (AI, reading text from photos, the family hub) and, where the law requires it, personalised ads. You can withdraw it at any time.
- Providing the service you ask for: for example, delivering family messages and calls once you turn the family hub on.
- Legitimate interests: keeping the service secure and within its free limits (a daily usage counter, abuse prevention) and telling you about updates.
The providers above may process data outside your country, including in the United States, under the safeguards they offer, such as the European Commission's Standard Contractual Clauses.
8. How long data is kept
- Content on your device: until you delete it. Settings → Clear all data erases everything on the device, including local backups.
- Family hub data you sync: while the family hub exists.
- Call records: deleted automatically within hours of the call.
- AI requests, and photos sent to have their text read: processed and discarded, never stored by us. Providers you use with your own key keep data under their own policies.
- A daily usage counter per user, to keep text reading and call relays within free limits.
9. Your rights, and deleting your data
You can see, export, correct and delete your data, withdraw any consent, and object to its use. Most of this is in the app. For anything else, write to support@tibrcode.com and we will answer within 30 days. You may also complain to your data protection authority.
- Settings → Data exports everything to a backup file.
- Settings → Clear all data erases everything on your device.
- If you created an account, Account → Delete account deletes it and its record in the cloud. If you own a family hub, the hub is deleted with it: members, tasks, chats, call records and push tokens, for everyone in the family. Your data on the device stays.
- If you cannot open the app, email support@tibrcode.com from the address linked to your account, or include your family code. We delete it within 30 days and confirm by email. The steps are also at hominote.com/delete-account.
10. Security
All traffic is encrypted (HTTPS/TLS), and calls are end-to-end encrypted. Our database rules restrict each family hub to the devices enrolled in it. Every device in a family can read the hub's messages, including messages between two members. Your own AI keys are encrypted on your device. A backup file you export can be read by anyone who has it, so keep it somewhere safe.
11. Changes
We update this page before any change in how data is handled takes effect, and change the date at the top.