Draft for review — not final. Unresolved bracketed details and legal provisions will be completed before the app launches.

Homezoo Privacy Policy

Draft updated November 13, 2026 · Effective date to be set before launch · Version 2026-11-draft-3

What changed. Earlier versions of Homezoo kept everything on your phone. This version stores your household's records with us once you create an account, so the people you invite can see them too. Nothing recorded before you created an account is used for anything except running Homezoo for you.

1. Who we are

Kevin Savill, Texas, United States. Questions or requests: privacy@savillinteractive.com. This policy covers the Homezoo app, its web pages for sharing reports and receiving records, and its emails.

2. What we collect

• Account: your name, email, the sign-in ID from Apple, Google or email sign-in, language, units, time zone, that you confirmed you're 13 or older, and the choices you agree to. From you and your sign-in provider.
• Household: its name, time zone, state or region, members and their roles, and invites.
• Pets and care: profiles, photos, routines, logs (meals, litter box, weights, symptoms, notes), medicines, vaccines, health records, vet visits and clinic contact details, and foods you scan. From your household's members.
• Documents: files and photos you add, the text read from them, and records a clinic sends through a link you created or to your household's Homezoo email address.
• Device data: from a device account you link (for example Tuya Smart), such as litter box visits with time, length and your pet's weight, feeder and fountain events, and each device's name and status.
• Sign-in and security: your sessions and the name of each device you're signed in on, notification tokens, and IP addresses, used to keep sign-in and links safe from abuse.
• Usage: what features are used and how well they work, such as "a pet was added." Each event has a random ID for the app install, the app version and broad context (plan, role, number of pets, kinds of pets). It never includes pet names, values, notes, photos or document text, or your account or household ID.
• Purchases: your subscription status, from Apple. We never see your card.
• Support: what you send us when you ask for help.

We don't collect your precise location, your contacts, or advertising IDs. Homezoo is for pet records. Please don't add health information about people; if it's in a note or a document you add, it's stored like the rest of your records.

3. What stays on your phone

When your phone can do it, Homezoo reads documents and food labels, understands quick logs, answers questions in Ask, and checks for urgent topics on your phone, using Apple's on-device tools. Questions you ask in Ask and their answers aren't sent to us when they're answered on your phone.

4. How we use it

• To run Homezoo for your household: syncing, reminders, trends and alerts, reports and links you create, reading documents you add, and the notifications you allow.
• To help you when you ask for support.
• To keep Homezoo secure and prevent abuse.
• To fix problems and measure reliability, using the usage events above.
• To meet legal duties.
• Only if your household's owner switches it on: to improve Homezoo and for pet health research (section 6).

We don't use your information for advertising, and we don't make decisions about you with legal or similar effects using automated tools.

5. Who we share it with

• Members of your household, within their role. Pet sitters see care tasks, not medical records or documents.
• People you send a report link to, and clinics you send an upload link to.
• Companies that run parts of Homezoo for us. They may use the information only to provide their service to us, and must protect it as we do: - Amazon Web Services: hosting, database, file storage, email, [sign-in]. - Apple: notifications, Sign in with Apple, App Store purchases. - Google: sign-in, only if you choose Sign in with Google. - Tuya: only if you link a Tuya account. We ask Tuya for your device data on your behalf. - [Any other provider, for example the sign-in service or file scanning, once chosen.] The current list is at [URL]. We update it before adding a new company.
• OpenAI, only if you connect your own ChatGPT account and approve a specific request. It goes to OpenAI under your account and OpenAI's terms and privacy policy.
• Researchers and companies, only de-identified trends, and only if your household switched on Pet health research (section 6).
• Others when the law requires it, or to protect someone's safety. We'll tell you unless the law doesn't allow it.
• A company that takes over Homezoo, if that happens. This policy would still apply to your information, and we'd tell you first. [Counsel]

We don't sell personal information. We don't share it for cross-context behavioral advertising. We haven't done either in the past 12 months, and we don't sell or share the information of people under 16.

6. Optional data sharing

Both choices are off until your household's owner switches them on. They can be switched off at any time in Privacy and data. Teens and pet sitters can't switch them on.

• Improve Homezoo: our team studies patterns in your pets' records, with names and contact details removed, to tune alerts and decide what to build. It stays with us and is never sold.
• Pet health research: we may share or license de-identified trends, combined across many households, to researchers and companies in pet health, nutrition and insurance. We may be paid for this. Recipients must agree in writing not to try to identify anyone. We list the kinds of recipients at [URL].

What "de-identified" means here:

• Never included: names, emails, addresses, photos, documents, notes, clinic names, device serial numbers, precise locations, Ask conversations, or anything added by a teen or a pet sitter.
• Only records added after the switch was turned on.
• Device data only where the device company's terms allow it.
• Data is grouped so that no group is smaller than [minimum size], so no household can be picked out.
• We keep the data de-identified, we don't try to re-identify it (except to test our own methods), and we require every recipient by contract to do the same.

Switching off stops future use and leaves your household out of the next research data set. Trends already shared can't be taken back.

7. AI and what leaves your phone

• On your phone: Apple's on-device tools, when your phone supports them.
• ChatGPT: only if you connect your own account. Before anything is sent, you see exactly what will be sent and approve it, each time. We send only what's needed for that question, without your name, email, address or household name. Documents are sent only if you pick that document. You can turn on "Never send documents off this device." Teens and pet sitters can't use it.
• We keep a record of when something was sent, where and why, but not what it said. You can see these in the app.

8. Pet records and the law

Pet records aren't covered by HIPAA, the U.S. law that protects people's medical records. Some states have rules about how vets share records; those rules apply to vets, not to Homezoo. We still treat your pets' records as private.

9. Staff access

Our support staff can see your account, plan and device status when helping you. They can open your household's records only if the owner approves that request, for up to 24 hours, or in a logged emergency, for up to 1 hour. Every access appears in Privacy and data under "Who has seen what."

10. Security

Data is encrypted when it travels and when it's stored. Each household's files have their own key, and deleting a household destroys that key. Access by our staff is limited and logged. Homezoo isn't end-to-end encrypted: our systems have to process your records to build reports, alerts and shared links. No system is perfectly secure. If a breach affects your information, we'll tell you as the law requires.

11. How long we keep it

• Your household's records: until your household deletes them. Something you delete is removed for good after 14 days.
• Deleting your account or household: you can undo it for 14 days. After that, it's removed from our live systems within 30 days, and from backups within a further 35 days. A deleted household's files can't be opened even from backups, because its key is destroyed. What you added to a household shared with other people stays with that household.
• Raw messages from your devices: 27 months, then deleted. The pet records built from them stay until your household deletes them.
• Usage events: 14 months.
• Our staff-access log: 2 years. A record that we completed a request, such as a deletion: [period].
• Report links: until they expire (after 1, 7 or 30 days) or you turn them off.
• Download links for your data: 7 days.

If we learn that a child under 13 has an account, we delete it and its information within [period].

12. Your choices and rights

In the app you can see, download, correct and delete your information, change the sharing choices, turn notifications on or off, and disconnect devices and ChatGPT. Depending on where you live, including California, Colorado, Connecticut, Virginia and other states with privacy laws, you may also have the right to:

• know what we collect, use and share, and get a copy in a portable format;
• correct it;
• delete it;
• opt out of the sale or sharing of your information, targeted advertising and profiling (we don't do these);
• appeal if we say no to a request.

To make a request, use the app or email privacy@savillinteractive.com. We confirm it's you through your signed-in account or your email. Someone you authorize can make a request for you; we may ask for proof. We answer within 45 days, or tell you if we need up to 45 more. To appeal, reply to our answer or email privacy@savillinteractive.com with "Appeal." If we still say no, you can contact your state attorney general. We treat a Global Privacy Control signal as a request to opt out of sale and sharing. We won't treat you differently for using your rights.

13. Children and teens

Homezoo is not for children under 13. Members aged 13 to 17 have a limited role: no sponsored content, no off-device AI, and they can't switch on data sharing. Nothing they add is used for data sharing. If you think a child under 13 has an account, email privacy@savillinteractive.com and we'll delete it.

14. Emails

We send emails you need, such as invites, sign-in and security notices, download-ready and deletion notices, and notice of changes to these documents. The weekly summary is off unless you turn it on. We send product news only if you opt in, and every one has an unsubscribe link that works within 10 business days.

15. Changes

If we change this policy in a way that matters, we'll tell you in the app and by email at least 30 days before. We'll ask for your consent first if a change would let us use information we already have in a new way.

16. Languages

This policy is available in English and Spanish.

Contact: Kevin Savill, Texas, United States, privacy@savillinteractive.com

Read the Terms of Service.