Privacy

What we store

When you sign in with Google we store your name, email address, and profile photo URL. If you upload a profile photo, we store that image and use it instead of the Google photo. Inside your space we store what you and your space members enter: airports, traveler names, travel preferences, trackers, trips, alert rules, and fare results.

Homebound also stores privacy-safe usage records for plan accounting. These records contain a category, quantity, UTC month, status, and an opaque retry key. They do not copy prompts, messages, routes, dates, prices, recipients, email content, provider errors, or booking links.

During the beta, Homebound stores first-completion milestones for onboarding, invitations, searches, trackers, and Lauren for up to 180 days. These records use keyed pseudonymous identifiers and bounded event names. They do not contain routes, dates, prices, messages, page paths, or other free-form details.

We never see or store payment details, and Homebound never books flights on your behalf - booking links take you to the airline or Google Flights.

Lauren AI

When you use Lauren, the current conversation and the relevant Homebound data needed to answer your request are sent to the configured Ollama Cloud model provider. Homebound does not save new conversation text after the current browser session. Historical conversations saved by an earlier version remain available in account exports until the account is deleted.

Operational AI metrics store timing, model usage, tool and specialist names, categorical completion, clarification, rejection outcomes, and approval decisions. They do not copy conversation text, tool arguments, tool results, travel details, or error details into analytics records.

Where it lives

All data is stored in a self-hosted database operated by the Homebound maintainer. It is not sold, shared, or sent to third-party data brokers.

If email is enabled, alerts and space invitations are delivered through a transactional email provider. The recipient address and message content pass through it; an invitation message includes its single-use Homebound claim link.

Application errors may be sent to the maintainer's configured webhook service. Reports are bounded to an operation label, build identifier, error type, and status details; Homebound does not intentionally include travel content, account identifiers, request bodies, or conversation text.

Analytics

Homebound uses self-hosted, cookie-free Umami analytics for page views and a small set of product events, plus Vercel Analytics for aggregate web usage. These tools do not receive Homebound account ids, names, emails, routes, dates, prices, or Lauren messages from Homebound's event code.

Homebound also shows aggregate beta milestone counts in its restricted operations dashboard. The dashboard can read daily stage totals only, not subject keys or feedback text.

Beta feedback

When you send beta feedback, Homebound stores the category, message, settings-page context, your account, and your current space so the maintainer can investigate and follow up. Feedback is visible only in the owner-only admin view and is deleted after 180 days.

Do not include passwords, payment details, or private conversation text in feedback.

Advertising

Homebound's public pages may show ads served by Google AdSense to help cover hosting costs. The signed-in app itself stays ad-free. Google and its partners may use cookies to serve and measure ads, including based on your prior visits to this and other sites.

You can manage or opt out of personalized advertising at google.com/settings/ads and adssettings.google.com. More on how Google uses data from sites that use its services is at policies.google.com/technologies/partner-sites.

Sharing inside a space

A space is shared by design: members of your space can see the trips, trackers, favorites, searches, and traveler preferences that belong to that space. Don't put anything in a space you wouldn't share with its members.

Deleting your data

You can delete your account from Settings at any time. Spaces where you are the only member are deleted with it, including their trips, trackers, searches, and alerts. Spaces you share with others remain for those members.

Database backups age out automatically within 14 days, after which deleted data is gone from backups too.