Legal

HouseRoster Privacy Policy

Last updated: 20 September 2026

1. Who is responsible for your data

HouseApps Limited, a private limited company incorporated under the laws of England and Wales with company number 17243528 and registered office at 71–75 Shelton Street, Covent Garden, London, WC2H 9JQ, United Kingdom ("HouseApps", "we", "us" or "our"), is the data controller responsible for HouseRoster. HouseApps is registered with the UK Information Commissioner's Office (ICO) under registration number ZC238380. We are the data controller responsible for HouseRoster and the personal data processed through the service. For privacy-related enquiries, contact us at legal@houseapps.co.uk.

HouseRoster is offered to users worldwide except in the EU/EEA, where we do not currently offer the app. As a UK business, we handle personal data under UK data protection law (UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018). We currently do not target or operate in the EU/EEA and therefore have not appointed an EU Article 27 representative; we have also not appointed a Data Protection Officer. We will revisit this if our EU position changes.

2. Summary

We collect the data we need to run a scheduling app, being your account details, the households and shifts you create, details of people you invite, messages you send, and limited technical data to keep the app working and secure. We show no advertisements, do no cross-app tracking, and do not sell your data. You can export or delete your data at any time in the app.

3. What we collect

We collect the following information to run HouseRoster:

Account information – your name, email address, and sign-in method. You provide this, or your sign-in provider does.
Sign-in provider information – if you sign in with Apple or Google, we receive a provider user identifier, your name, and your email as those services make available. If you sign in using email, we may send one-time verification codes or magic links to authenticate your account.
Household details – household name, address, and timezone, which you enter or which we take from your device's settings.
Information about people you invite – the names and emails a host enters to invite staff or helpers, and the status of each connection. If you have been invited but do not want an account, email legal@houseapps.co.uk and we will remove the details the host entered about you.
Shift and rota details – shift times, roles, rates, notes, recurrence, and responses that you create.
Messages – the content and metadata of messages between connected users.
Notifications and device information – push notification tokens, your notification preferences, and your in-app notification history from your device.
Calendar Sync (Premium) – a private, unguessable calendar-feed link (token) and the shift data it exposes when you subscribe to it in a calendar app.
Subscription information – your plan tier, status, and store/RevenueCat identifiers, from RevenueCat, Apple, or Google. We do not receive your full card details.
Support information – the messages you send us, a support reference, and, if you send an error report from the app, the technical details of that error.
Safety reports – if you report a conversation, we store your report, the category, your description and a reference to the reported message, and email a copy to our support inbox so we can review it. Your name and email address are on that report.
Technical, analytics, and crash information – collected automatically, such as app version, device/OS type, pseudonymous usage events, crash diagnostics, and a pseudonymous user ID.
Security and technical data – a one-way hash of the IP address used for sign-in, invite and calendar-feed requests, and the calendar app's identifier (user agent), which we keep to rate-limit abuse and to help you recognise a feed you no longer use. We do not store your raw IP address.

We do not intentionally collect special-category data (e.g. health, religion). Please do not put sensitive information into free-text notes or messages.

Some features share your information with others by design:

Invitations – inviting a person sends them your invitation and connects your accounts.
Messages – messages are delivered to the people in that conversation.
Calendar Sync (Premium) – if you enable it, anyone with your private feed link can see, in their calendar app, the shifts in that feed: date and time, title, the household name and address, the other person's name, any notes, and the rate. Your calendar provider (for example Google or Apple) will also fetch and store that content. Treat the link like a password. You can revoke it anytime by regenerating it in Settings → Calendar Sync, which immediately stops the old link from working.

Connected users see your display name, your shift activity with them, and messages you send each other. If someone invited you by email, they already have the email address they used. Your other connections are never visible to them.

5. Why we use your data

Provide the service: accounts, households, shifts, invitations, messaging, notifications, and Calendar Sync.
Send transactional emails (invitations, important account messages).
Deliver push notifications you have enabled.
Manage subscriptions and entitlements.
Keep the app secure and prevent abuse (crash diagnostics, rate limiting, audit records).
Understand and improve the app with pseudonymous / aggregated analytics.
Respond to support requests and comply with legal obligations.
Authenticate users through Apple, Google, or email-based one-time verification codes and magic links.

Contract – to provide the app (accounts, households, shifts, messaging, Calendar Sync, subscriptions).
Legitimate interests – security, abuse prevention, analytics, crash diagnostics, and basic improvement, balanced against your rights.
Consent – device notification permission (granted at the OS level). You can withdraw consent anytime.
Legal obligation – keeping limited records (e.g. proof a deletion request completed) and responding to lawful requests.

Trusted providers process data on our instructions under contract.

Supabase – authentication, database, file storage, and backend functions. Data is hosted in the West EU (Ireland) region. Processing is governed by Supabase's Data Processing Agreement (DPA).
RevenueCat – subscription and entitlement management. RevenueCat processes data on our behalf under a DPA. Data may be processed in the United States and other countries where RevenueCat and its service providers operate.
Apple App Store / Google Play – payment processing and billing; their own privacy policies apply.
PostHog – product analytics (pseudonymous; user-id only). Data is hosted in the European Union (EU-hosted project). PostHog processes data on our behalf under a DPA.
Sentry – crash and error diagnostics (PII-scrubbed; user-id only). Data is hosted in the European Union (EU-hosted project). Sentry processes data on our behalf under a DPA.
Resend – transactional email delivery. Data is hosted in the European Union (Ireland, eu-west-1). Resend processes data on our behalf under a DPA.
Purelymail – email hosting for customer support communications. Purelymail processes data on our behalf to receive and store support emails.
Firebase Cloud Messaging / Apple Push Notification service – push notification delivery. As well as your device token, the notification itself passes through these services; for a chat notification that includes the sender's name and the first part of the message. Turn push off in Settings if you would rather it didn't.
Google Firebase – the push notification service assigns your app installation an identifier, which Google processes to deliver notifications. Firebase Analytics and Firebase Ads are switched off in HouseRoster.
Your device's maps app – if you tap a household address to open it in maps, that address is handed to your device's maps app.
Cloudflare – hosting, content delivery and security for houseroster.com, privacy-friendly website analytics, and the service that delivers Calendar Sync feeds. Cloudflare may process IP addresses and technical request information, and Calendar Sync feed content passes through it.

We may also disclose data if required by law, to protect users or our rights, or as part of a business transfer (e.g. merger) with appropriate safeguards. We do not sell your personal data.

8. No advertising, no profiling

HouseRoster shows no advertisements, uses no advertising identifiers (such as Apple's IDFA or Google's Advertising ID), and performs no cross-app or cross-site tracking. We do not profile you for advertising and do not make automated decisions that produce legal or similarly significant effects about you. Our analytics are pseudonymous and used only to understand and improve the app.

9. International transfers

Some of our service providers may process personal data outside the United Kingdom and EU/EEA, including in the United States and other jurisdictions where they or their subprocessors operate.

Where personal data is transferred internationally, we rely on appropriate safeguards as required by applicable data protection laws. These may include the UK International Data Transfer Agreement (IDTA), the UK Addendum to the EU Standard Contractual Clauses (SCCs), adequacy regulations, or other lawful transfer mechanisms.

The following providers may involve international transfers: RevenueCat, Apple App Store, Google Play, Firebase Cloud Messaging, Apple Push Notification Service, Cloudflare, and Purelymail. Supabase, Sentry, PostHog and Resend host our data in the EU but are operated by companies with entities outside the UK, so limited support access from abroad is possible under their contracts. Further information about their transfer safeguards is available in their respective privacy documentation.

10. How long we keep data

Account and app data: while your account is active.
After deletion: we permanently delete your account and personal data after the 14-day grace period. Two things deliberately survive, because they belong to someone else's record: a completed shift you worked or hosted stays in the other person's read-only history, including the date, time, title, location, rate and the name each of you used; and if a host added you as a contact, the name and email address they entered for you stay in their own connection list. Deleted data may persist briefly in our hosting provider's routine backups before those age out. We keep a minimal, non-personal record that a deletion happened.
Support messages and analytics / crash records: kept no longer than we need them and reviewed periodically.
Operational security records, such as rate-limit and delivery logs: kept while they remain useful for preventing abuse.
Data exports in storage: removed after their 7-day download window.

11. Your rights

Subject to UK GDPR, you can:

Access / download your data – Settings → Download my data (a ZIP export in JSON + CSV), or contact us.
Delete your account and data – Settings → Delete account (14-day grace period, then permanent).
Correct inaccurate data – you can change your display name in the app. To change the email address on your account, or to correct details someone else entered about you, email us at support@houseroster.com.
Object to or restrict processing in certain circumstances, including our analytics and crash reporting. Email support@houseroster.com and we will switch off analytics and diagnostics for your account.
Withdraw consent where we rely on it.
Data portability – your export is machine-readable (JSON + CSV).

If you ask us to correct, delete, or restrict your data, we will also pass that on to the providers who received it where they offer a way to do so. We respond within the legal timeframe (usually one month). You can complain to the UK Information Commissioner's Office (ICO), ico.org.uk – though we would appreciate the chance to help first at legal@houseapps.co.uk.

12. Children's privacy

HouseRoster is for people 16 and over and is not directed at children under 16. We do not knowingly collect data from under-16s; if you believe we have, please contact legal@houseapps.co.uk and we will review it.

13. Security

We protect data with encrypted connections (TLS), encryption at rest, access controls, database row-level security, private storage with short-lived signed download links, and pseudonymisation in analytics / crash tools. We use secure authentication mechanisms including Apple Sign In, Google Sign-In, and email-based one-time verification codes or magic links. HouseRoster has no passwords, so there are none to store or lose. Access to production systems is limited to the people who operate the service. Secrets are never written to our logs. No system is perfectly secure, but we work to protect your information.

Some of your schedule and chat is stored on your device so the app works offline. It is protected by your device's own security and is cleared when you sign out.

14. Data breaches

If a data breach affecting your information occurs, we will investigate, contain and mitigate it, and notify the ICO and affected users where the law requires (generally within 72 hours of becoming aware of the breach for qualifying breaches).

15. Cookies and tracking

The HouseRoster mobile app uses no advertising cookies and no cross-app tracking. houseroster.com uses no cookies: we measure visits with Cloudflare Web Analytics, which is cookieless, stores nothing on your device and does not follow you across sites. When you tap a store badge on our website, the link carries a campaign tag so Apple or Google can tell us which advert brought you; the app itself never reads it.

16. Changes to this policy

We may update this policy. The current version is always in the app under Settings and at houseroster.com/privacy, with the date it last changed. For material changes we will tell you in the app.

17. Contact

Privacy and legal: legal@houseapps.co.uk · App support: support@houseroster.com · HouseApps Limited, 71–75 Shelton Street, Covent Garden, London, WC2H 9JQ, United Kingdom.