Privacy
Last updated 11 August 2026
The short version
We store what you put into MyHouseDesk so we can show it back to you and remind you about it. We don't sell it, we don't share it with advertisers, and we don't email you anything except the reminders you asked for. You can delete any of it, or all of it, whenever you like.
What we hold
- Your account: email address, a display name if you give one, and a securely hashed password. We never see your password in readable form.
- Your household records: whatever you add — providers, policy numbers, amounts, dates, notes.
- Your documents: the files you upload, held in private storage.
- Product analytics: which features get used, recorded against your household rather than against you personally. No tracking pixels, no advertising networks.
How your documents are protected
Uploaded files go into a private storage bucket that has no public web address — there is no URL that serves them, guessable or otherwise. When you open a document, we check you belong to that household and then issue a signed link that stops working after five minutes.
Your records are separated at the database level using row-level security, so a query from another account cannot return your data even in the event of a bug in the application code.
Every time one of your documents is opened, downloaded or read, we record it, and you can see that list in your settings. You can also turn on two-factor authentication, which we would recommend on an account holding this kind of paperwork.
Reading your documents
When you upload a file and ask us to read it, its contents are sent to Anthropic's API to extract the provider, dates and amounts. It is used to answer that one request and is not used to train any model.
You have three ways to stop that happening, and all of them are enforced on our servers rather than just hidden in the interface:
- Tick “don't read this one” when you upload a particular file. It is stored and never sent anywhere.
- Switch reading off entirely in settings. Nothing you upload will ever be sent, and every other part of the product works exactly the same.
- Don't upload it at all. For passports, PPS numbers, bank details and medical letters, this is what we would actually suggest — type in the policy number and the renewal date, which is all a reminder needs, and leave the document where it is.
When you use Ask MyHouseDesk, we send the details you have recorded — titles, providers, dates and amounts. We do not send the contents of your documents.
Who else is involved
Supabase hosts the database and file storage. Vercel serves the site. Anthropic processes document reading and assistant questions. Stripe handles payments — we never see or store your card details. Each is used only for the job described.
Your rights
You can see and edit everything we hold from inside the product. You can delete any record or document at any time, which removes the underlying file too. To have your whole account and its contents erased, email us from the address on the account and it will be done within 30 days. Under GDPR you also have the right to a copy of your data and to complain to the Data Protection Commission.