Home Health Intelligence is the company. Home Health Intel is the name of our product. We are based in Austin, Texas. In this policy, “we” and “us” mean Home Health Intelligence.

Our iPhone app is published on the App Store by Nalo Seed LLC, the engineering company that builds Home Health Intel for us. The app and the website use the same account and the same data, and this policy covers both.

Questions about privacy go to info@homehealthintel.com. You can also write to us at Home Health Intelligence, 5900 Balcones Drive, Suite 100, Austin, TX 78731.

• Your report is yours. We do not send it to insurance companies, agents or contractors. You decide who sees it.
• We do not sell your personal data, and we do not use it for targeted advertising.
• Your photos are read by AI services (Google Gemini, OpenAI, and Anthropic’s Claude through Vercel) to score your home. We ask for your permission before the first photo is taken.
• Google Analytics runs on our website only if you say yes. It never runs in our iPhone app.
• You can delete your account yourself, in the app or on the website. See Deleting your account for exactly what that removes.

We collect what we need to produce your report and run the service:

• Account details. Your name, your email address and your password. Our sign-in provider stores the password as a one-way hash, never as the password itself. You can start a walk before you create an account. Until you do, your progress is linked to a temporary anonymous session.
• Property details. The address you enter, its map location, and facts about the home that you give us or that we look up in public records, such as the year it was built. If you choose your insurance company during the walk, we save that choice so your report can show it. We do not ask for your policy number.
• Photos. The photos you take or choose during the walk. Each photo gets a SHA-256 fingerprint on upload so the report can show it has not been changed since. A photo small enough to upload as it is keeps any embedded data your camera wrote, such as the time and place it was taken. Larger photos and HEIC photos are resized or converted on the way in, which removes that data. We do not read or store that embedded data separately.
• Your report. The scores, findings and recommendations we produce, the PDF, and the pictures we generate from your photos to show what an improvement could look like.
• Intel Guide chat. If you use the Intel Guide, we keep the short intake you fill in (your area, your role and what you are looking for), the questions you type, and the answers. If the Guide cannot answer a question, we save the question so our team can write an answer. If you ask us to email you when it is answered, we save your email address with it.
• Payments. Stripe handles payment. We never see or store your full card number. We keep a record of each order: what was bought, the price and its status.
• Email sign-ups. If you ask for the sample report or join a waitlist for your state or for Pro, we keep your email address and the details you give on that form.
• Your consent choices. When you agree to the photo terms or answer the analytics banner, we record your answer, the version you saw, the time, your browser type, and a scrambled (hashed) form of your IP address.
• Our own site activity log. Our servers log the pages you open on our website and key steps you take, such as starting a walk or reaching checkout. Each entry records the page address (including anything after a “?” in it), the time, a random ID that lives in your browser tab and ends when you close it, your IP address with its last part removed so it cannot single out your device, your browser and device type, and the page that sent you here. If you are signed in, the entry is linked to your account. The log stays in our own database, only our staff can read it, and it is not sent to any analytics company. It sets no cookie of its own and runs for every visitor.
• Aggregate site measurements. Vercel Analytics and Speed Insights count visits and measure page speed. They set no cookies and give no visitor an identifier.
• Google Analytics, only if you say yes. See Your analytics choice.
• Error reports. When something breaks, a technical report goes to our error-monitoring service, Sentry. What it contains is described under Vendors below.
• Device location, only when you ask. See the next section.

Most of this comes from you. Some comes from public sources we look up for your property, and some is created by our service, such as your scores and the activity log.

Some privacy laws, including the Texas Data Privacy and Security Act, treat a precise location (within about 1,750 feet) as sensitive data. We handle precise location in these places, and only these:

• Your property’s location. When you enter an address, we save the map location of that address so we can pull the right public data and satellite images for it.
• Location inside a photo. A photo that uploads as it is may still carry the place your phone recorded when it was taken (see Photos above). Before your first photo, the photo consent screen tells you this and asks you to agree. If you do not agree, no photos are taken.
• A Pro user’s device location. A business with a Pro account can tap “Use my current location” when starting a report or a property lookup. Only then, and only after the browser or the iPhone has asked for and received permission, we read the device’s location one time. We send it to Google to find the street address at that spot and show it with a satellite image so the Pro user can confirm the house. We do not store the device location. Once the address is confirmed, we save the property’s map location from Google, exactly as if the address had been typed in. Homeowner accounts do not have this feature.
• The map on our home page. If you choose “Use my location” there, your browser asks first. Your location, rounded to about a block, is sent to Google to draw the map and find the nearest city. We do not save it.

We do not collect other kinds of sensitive data, such as health information, biometric data or government ID numbers. Face ID in our iPhone app is handled by your iPhone, and we never receive it (see The iPhone app).

• To produce your report: your HealthIntel, the FireIntel, StormIntel and RoofIntel scores, the findings, the PDF, and the evidence record that goes with it.
• To run the Intel Guide when you use it.
• To take payment and keep records of what was bought.
• To send the email you asked for or need: your report link, one reminder 48 hours later if the report has not been downloaded or paid for, the sample report, sign-in and password emails, and account deletion confirmations.
• To keep the service working and safe: finding and fixing errors, measuring speed, limiting abuse, and seeing where people get stuck so we can make the walk easier.
• To answer you when you contact us, and to meet legal duties.

We do not use your photos, your report or your chat messages to train AI models, and our AI vendors do not use them for training under our terms with them.

AI does a large part of the work in your report, so here is plainly what each service receives:

• Google Gemini receives your photos. It scores them for the fire, storm and roof modules, identifies plants, checks that each photo is clear and shows what that step asked for, and checks which parts of the property the walk has covered.
• OpenAI receives the photo each improvement picture is based on, and draws that picture for your report. It also turns your Intel Guide questions into a search key (an “embedding”) so the Guide can find matching answers.
• Anthropic’s Claude, reached through the Vercel AI Gateway, receives your photos, the property address, the public risk data we gathered for it, and an aerial image of the property, and reviews the whole property. Its findings feed your scores. Claude also writes the Intel Guide’s replies, using your intake answers and the questions you type.

The AI services identify what is in a photo. Our own scoring rules turn those findings into your scores. Please do not type anything into the Intel Guide that you do not want processed this way.

You do. The report is yours, and you decide whether to share it, with whom, and when. We do not send it to insurance companies, agents or contractors. A share link you create works for anyone who has it, so give it only to people you choose.

Our staff can see account and report data when they need to run, support or fix the service. The vendors listed below handle data only to do their part of the work for us.

Pro is a paid service for businesses, such as contractors and other professionals, that document homes for their clients. If a Pro user documents your home, you may not have an account with us, but we still hold some data about your property:

• the address and its map location, the photos the Pro user took, and the report we produced; and
• your name and email address, if the Pro user entered them.

Before starting, the Pro user must confirm that the owner has authorized them to document the property. The Pro user who ran the report can see it. If the Pro user belongs to a fire department that uses our service, other members of that department can see the reports their department runs.

If a Pro user gives you a link to your report, you can claim it. The report then moves into your own account and you control it like any other report, although the Pro user keeps access to the copy they ran. If you do not want us to hold data about your home, email info@homehealthintel.com with the address. We will tell you what we hold and remove it.

We rely on the following vendors to deliver the product. Each of them processes data only for the purposes listed and only on our instruction:

• Supabase: sign-in, our database, and private file storage for your photos, PDFs and generated pictures. It also holds our encrypted daily backup copies.
• Vercel: hosting for the website and the servers behind the app, Vercel Analytics and Speed Insights, and the AI Gateway described above. Photos and reports from before we moved file storage to Supabase are held in Vercel Blob until they are moved.
• Stripe: payments. Card numbers go to Stripe and never reach our servers.
• Resend: sends our email, such as your report link and account notices. It receives your email address and the message.
• Google Gemini, OpenAI, and Anthropic through the Vercel AI Gateway: the AI services described above.
• Google Maps Platform: address search and lookup, satellite and Street View images of the property (including the satellite images in your PDF), roof measurements from Google’s Solar API on Pro reports, turning a Pro user’s device location into an address, and the map on our home page. We send Google the address or the map location, not your name or email.
• Sentry: error monitoring. When something breaks, on our servers or in your browser, Sentry receives a technical error report: what failed, the page address where it happened, your browser and device type, and a short trail of the technical steps just before it. We tell Sentry not to collect personal data by default, and we remove your email address, your IP address and your cookies from every report. Reports from our servers also have request headers, anything typed into a form, and the part of the web address after a “?” removed before they are sent. When an error happens in your browser, Sentry also receives a short replay of the screen around the error. In that replay all text is hidden and all images, including your photos, are blocked out. We do not record replays when nothing goes wrong. Sentry also receives timing data for about 1 in 10 page loads and requests, which we use to find slow pages.
• Google Analytics 4, on the website only and only if you accept it: see Your analytics choice.
• Public risk data sources. To build your fire, storm and roof scores we look up public data by the property’s location: FEMA (the National Flood Hazard Layer, and the National Risk Index hosted on Esri ArcGIS Online), NOAA and NCEI (storm reports, the radar hail record, and daily records from the nearest weather station), the USDA Forest Service (wildland-urban interface data), the U.S. Geological Survey (aerial photos), the FCC Census Block API, the Texas A&M Forest Service (the Texas Wildfire Risk Assessment Portal, TxWRAP), OpenStreetMap through the public Overpass API (building outlines), and, for the Austin area, City of Austin open data and ArcGIS services (permits, parcels and the city floodplain model) and the Travis, Williamson, Hays and Bastrop county appraisal districts. We send only the location, never your name or email, and they return public records.
• Public conditions sources. To show current conditions for an area we query the National Weather Service alerts service (api.weather.gov), the U.S. Drought Monitor (run by the National Drought Mitigation Center at the University of Nebraska-Lincoln), and the National Interagency Fire Center incident feed, hosted on Esri ArcGIS Online. These lookups use an approximate location from your IP address, or the property location during a walk. We never send your name, email or address to them, and we do not use them to send you notifications.
• Not used yet: Truepic, and DigiCert or GlobalSign. If we turn on signed photo records in a later phase, these companies would sign photos or issue the certificate. No data is sent to them today.

If we add a vendor that handles your personal data, we add it to this list before it starts.

We do not sell personal data. We do not use it for targeted advertising, and we do not share it with advertising networks. There are no advertising pixels on our website or in our app.

Global Privacy Control and Do Not Track. Because we do not sell data or run targeted advertising, there is nothing for these browser signals to opt you out of, and our site does not currently change its behavior when it receives one. Google Analytics, the only optional tool, stays off unless you accept it on the banner, whatever your browser sends.

Google Analytics 4 counts page views and shows us which steps people get stuck on. It stores cookies in your browser and gives your browser a random identifier. If you accept it, Google receives the page addresses you visit on our website, that identifier, and the request data any web server sees (an approximate location from your IP address, and your browser and device type). No page address on our website carries your name, email or property address, and your photos are never sent to Google Analytics. If you open a report through a share link, the link’s code is part of that page address.

It does not load until you accept it, and it never loads inside our iPhone app. Everything else on this page is needed to run the service. You can change your answer here at any time:

The app shows the same Home Health Intel service as the website, so everything in this policy applies to it. It asks for these permissions only when you use the feature that needs them. You can say no, or change your mind later in your iPhone’s Settings:

• Camera, to take photos of your property for your report.
• Photo library, to let you choose photos you already took. Only the photos you pick are uploaded.
• Location, only when you tap a “use my location” option, such as a Pro user filling in the address they are standing at. It is read once and not stored.
• Face ID, only if you turn on app lock. Your iPhone checks your face, or your passcode, and tells the app only whether it matched. We never receive your face data.

The app does not track you across other companies’ apps or websites, and Google Analytics does not run inside it. Our own activity log, error reports and aggregate measurements work the same way in the app as on the website.

You can delete your account yourself. In the iPhone app, open the Account tab and choose to delete your account. On the website, sign in and go to Delete my account. You will be asked to type DELETE to confirm.

Your account is marked for deletion straight away. We sign you out on every device and lock the account, so no one can sign in to it or use it during the next 30 days. We also email you to confirm. If you change your mind during those 30 days, reply to that email or write to info@homehealthintel.com. We will cancel the deletion and unlock your account.

After 30 days we permanently delete:

• your photos, your report PDFs and the pictures we generated from your photos, from all of our file storage;
• the homes in your account, with their addresses and map locations, and every report on them, including the scores, findings and evidence;
• your Intel Guide chats, the questions only you asked, and any requests to be told when a question is answered;
• the activity log entries and email delivery records linked to you or your account, and any feedback you sent us as a tester;
• orders you started but never paid for; and
• your account itself: your name, email address, phone number and sign-in.

We then email you once more to say it is done.

What we keep, and why.

• Order and payment records for reports that were paid for, given free or refunded: the amount, the report type and the payment reference, with the link to you removed. We keep these for tax and accounting, and Stripe keeps its own payment records.
• A record of your deletion request (your email address and the dates), as proof that we handled it.
• Your consent records, with the link to your account removed: what we asked, which version, your answer, the time, a scrambled (hashed) form of your IP address, and your browser type. These show that we asked before we collected.
• Intel Guide questions that other people also asked, with the link to you removed. The question text stays so we can keep answering it.
• Reports that belong to someone else. If you claimed a report from a Pro user, it goes back to that Pro user as it was before you claimed it. A report run by a fire department stays with the department. See Homes documented by a Pro user. To have your property data removed from those reports too, email info@homehealthintel.com.

Copies of your data can also remain in backups for a short time after deletion (see How long we keep data).

• Your account and reports: until you delete them (see above).
• A walk started without an account: if you never create an account, finish a walk or buy a report, the temporary session and everything in it are deleted automatically after 7 days.
• Our site activity log: 12 months, then deleted.
• Intel Guide chats: kept with your account and deleted when you delete your account. Questions saved for our team to answer are deleted with your account too, unless other people asked the same question; then we keep the question without the link to you.
• Email sign-ups (sample report and waitlists): kept until you ask us to remove them. The unsubscribe link in our email stops further email.
• Orders, payment records, deletion records and consent records: kept for tax and accounting, and as proof of what we did.
• Backups: we make an encrypted copy of our database each day and delete each copy after 35 days, always keeping the newest 7. Our hosting provider also keeps its own short-term backups. Until a backup is deleted, it can hold data you have since deleted. Backups are used only to restore the service.
• Error reports: kept by Sentry for the period its service retains them, then deleted by Sentry.
• AI services: they process your photos and messages to return a result to us. Any copy they keep is governed by their terms with us, which do not allow them to train on it.
• Older files in Vercel Blob: kept until they are moved to Supabase, or until you delete your account, whichever comes first.

Wherever you live in the United States, you can ask us to:

• confirm whether we hold personal data about you;
• give you a copy of it, in a format you can reuse;
• correct data that is wrong;
• delete it; and
• stop any sale, targeted advertising or profiling that has legal or similarly significant effects on you. We do none of these today, but you may still ask.

How to ask. Email info@homehealthintel.com and tell us what you would like. You can also write to Home Health Intelligence, 5900 Balcones Drive, Suite 100, Austin, TX 78731. To delete your account you can also use the steps in the app or on the website described above. You do not need an account to make a request.

Checking it is you. To protect your data, we confirm that a request comes from you, usually by replying to the email address on your account or by asking you to sign in. We ask only for what we need to do that.

Someone acting for you. You can have another person make a request for you. We will ask for your signed permission, and we may ask you to confirm your identity with us directly.

Timing. We answer within 45 days. If we need more time, we will tell you why within those 45 days, and we can take up to 45 more days where the law allows. Requests are free.

No penalty. We will not charge you more, give you a worse service, or treat you differently for using these rights.

If we decline all or part of your request, we will tell you why. You can appeal by replying to our decision, or by emailing info@homehealthintel.com with the subject “Privacy appeal”. We will answer your appeal in writing within 45 days and explain what we decided and why.

If we deny your appeal, you can contact your state attorney general. In Texas, that is the Office of the Attorney General (texasattorneygeneral.gov). In Colorado, it is the Colorado Attorney General (coag.gov).

• Texas and Colorado. The Texas Data Privacy and Security Act and the Colorado Privacy Act give residents the rights listed above, including the right to appeal. This policy is our notice under those laws.
• New Mexico. New Mexico does not have a general consumer privacy law. The rights above still apply to you, because we offer them to everyone.
• California. How we respond to Do Not Track signals is described under No selling and no targeted advertising. The only other company that may collect data about your activity across different websites over time is Google, through Google Analytics, and only if you accept it.

Our database and file storage are with Supabase, in the United States (US East). Our website and servers are hosted by Vercel. Traffic to and from our service is encrypted, and our storage provider encrypts data at rest. Database rules limit each account to the properties and reports it is allowed to see. New photos and reports are kept in private storage and opened through short-lived links. Our backup copies are encrypted. Only admin accounts can use our staff tools.

No system is perfectly secure. If a security incident affects your data, we will tell you as the law requires. More detail is on our data handling page. To report a vulnerability, email info@homehealthintel.com with the subject “Security”.

Home Health Intel is for property owners and the professionals they work with. It is not meant for anyone under 18, and we do not knowingly collect data from children. If you believe a child has given us personal data, email info@homehealthintel.com and we will delete it.

We will post any change on this page and update the date at the top. If a change is material and you have an account, we will also email you before it takes effect.