Privacy policy

Effective October 10, 2026. HUMANS is a private household app operated by Jacques Human. For privacy questions or requests, contact jskape@gmail.com.

Information we use

HUMANS stores authorised users’ email addresses, household membership, financial entries, account balances entered into the app, bill details and receipt metadata. Users may upload invoices and receipt photographs. These files can contain names, addresses, account references and purchase details.

Gmail access

The administrator may authorise read-only Gmail access. This permission technically allows the app to read the connected mailbox; the current automated importer searches for invoice emails from configured water, gas, fuel and daycare suppliers, including daycare invoices forwarded by the household member from October 1, 2026 onward, excluding spam and trash. It reads matching messages and PDF and Word attachments to identify suppliers, billing months, proposed amounts and due dates. It does not send, change or delete Gmail messages.

Matching invoice documents are copied to the connected personal OneDrive HUMANS folder. Extracted bill information and import identifiers are stored in Supabase. Imported values require review before recording payment. The app does not use Google user data for advertising, sale, or training general-purpose AI models. HUMANS’ use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.

OneDrive access

The administrator may grant Microsoft file read/write access. HUMANS uses this connection to create and access its dedicated folder, upload invoices and receipts, and retrieve files for viewing or download. Uploaded document contents are stored in OneDrive, rather than Supabase file storage. Removing an attachment link in HUMANS does not delete its OneDrive file.

Storage and service providers

Cloudflare serves the website. Supabase provides authentication, database storage and backend processing. Google provides Gmail access, and Microsoft provides OneDrive storage. These providers process information as needed to provide their services. OAuth refresh tokens are stored on the backend and are not exposed to app users. Financial records and receipt links are restricted through household permissions. Shared records and their attachments may be visible to authorised household members; personal records are restricted.

Retention and control

Records and uploaded files remain until removed by the operator. Voiding transactions and detaching receipts preserve records or files and do not constitute deletion. You may request deletion or correction using the contact email above. Deletion of OneDrive files must be handled separately from removal of database records.

You can revoke Google access in your Google Account’s third-party connections and Microsoft access in your Microsoft account’s app permissions. Revocation prevents future access; it does not remove previously imported bills or stored files. Contact the operator to remove stored connection credentials and imported data.

Policy updates

This policy will be updated when the app’s data practices change. The current policy remains publicly accessible here and linked from the app.