Privacy
Privacy Policy
Last Updated · April 27, 2026
Home Health Intelligence (“HHI”, “we”) builds a homeowner-first multi-peril risk platform. Our wedge is that the homeowner owns the report. This page explains, in plain English, what we collect, why we collect it, and what we will never do with it.
Who we are
Home Health Intelligence is the entity. Home Health Intel is the consumer brand. We operate from Austin, Texas. You can reach us at info@homehealthintel.com.
What we collect
To produce a HealthIntel and a carrier-aligned PDF report, we collect:
- Account data. Name, email, password hash. Stored in Supabase.
- Property data. The address you assess, plus public risk data we pull on your behalf (FEMA National Risk Index, which is our wildfire exposure source, and satellite imagery).
- Photos. The walk-around shots you upload during a guided assessment. EXIF metadata (timestamp, geotag) is preserved because carriers require it for evidence.
- Payment data. Handled entirely by Stripe. We never see your card number.
- Product analytics. Vercel Analytics and Speed Insights, used in aggregate to keep the app fast.
What we do with it
We use your data for one thing: producing your report and the services you paid for. Specifically:
- Compute your HealthIntel and per-module scores.
- Generate the carrier-aligned PDF and canonical NGDS JSON evidence bundle. (C2PA + PAdES-LTV signing ships in a later phase.)
- Email your report (via Resend) when it’s ready.
- Identify plant species in your defensible-space photos using a third-party vision model.
We do not sell your data. We do not share your report, your photos, or your address with carriers, agents, or contractors unless you affirmatively share it yourself.
Who sees your report
You do. By default, no one else. The carrier-aligned bundle exists so that you can hand it to your carrier at renewal, on your terms, on your timing. See our data handling page for the technical details.
Subprocessors
We rely on the following vendors to deliver the product. Each of them processes data only for the purposes listed and only on our instruction:
- Supabase: auth, Postgres, and storage for your account and reports.
- Vercel: hosting and edge compute. Vercel Blob is where your uploaded photos and your PDF report are stored.
- Stripe: payments. Payment card numbers never reach our servers.
- Resend: transactional email (the email that delivers your report download link).
- Google Gemini API: AI vision for the wildfire tagger. Photos you upload are sent to Gemini for tagging and returned to your report. Google does not retain the images for model training under our API terms.
- OpenAI: plant species identification and visualization image generation.
- Google Maps Platform: address autocomplete and satellite imagery for your property location.
- Public risk-data APIs: to build your storm, roof, and water intel we query public government data by your property location: FEMA (the National Flood Hazard Layer for flood zones), the FEMA National Risk Index (hosted on Esri / ArcGIS Online), NOAA / NCEI (storm event records), the USDA Forest Service (SILVIS wildland-urban interface data), and local government sources for the Austin area: the City of Austin Open Data Portal and ArcGIS services (building permits, parcel records, and the city floodplain model) and the Travis, Williamson, Hays, and Bastrop county appraisal districts. We send the location, not your identity, and these sources return public record data only.
- Vercel AI Gateway (routing to Anthropic and OpenAI) powers the WOOI Agent chat. When you use the chat, the questions you type and the intake context you provide (your area, your role, and what you are looking for) are sent through the gateway to the language model that generates the reply and to OpenAI for the embedding that retrieves matching knowledge-base answers. Do not type information you do not want processed this way. These providers do not use your chat content to train their models under our API terms.
- Truepic (Phase 1.5): on-device photo signing for the C2PA evidence chain.
- DigiCert / GlobalSign (Phase 1.5): X.509 certificate issuance for the C2PA chain.
Your rights
You can request a copy of your data, correct inaccuracies, or delete your account at any time. Email info@homehealthintel.com and we will respond within 30 days. California and EU residents have additional rights under CCPA and GDPR, which we honor regardless of where you live.
Retention
Reports stay in your account until you delete them. If you cancel, your account and reports are deleted within 30 days unless you ask us to keep them.
Children
HHI is for property owners and is not directed at anyone under 18. We do not knowingly collect data from minors.
Changes
We will post any material change to this page and, if you have an account, email you. The “Last Updated” date at the top always reflects the current version.