Privacy policy
Your home holds personal details: addresses, photos, receipts and money. This page says what Loftt does with them. In short: your home stays on your phone unless you sign in, we collect only anonymous usage and crash information (and you can turn that off), and we do not sell your information or use it for advertising.
What stays on your phone
Your homes, appliances, documents, photos, reminders and notes are saved on your phone. You can use Loftt without an account. Reading labels and papers on your phone, looking things up in your records, and safety checks work without sending anything to us.
If you sign in
You can sign in with Apple, with Google, or with a code sent to your email. When you are signed in, your home (homes, rooms, appliances, documents and their files, service records, spending, checks and photos, issues, questions you asked and Home Health history) is backed up to our database and file storage, hosted by Supabase. It is visible only to you and the people you invite to that home.
If you sign in with Apple, Apple tells us your email address (or a private relay address, if you chose Hide My Email) and, the first time, your name. If you sign in with Google, Google tells us your name, email address and profile picture link. We use only your email address and name, to identify your account. We do not ask for access to your Google data, such as Gmail, Drive or Contacts. Loftt’s use of information received from Google APIs follows the Google API Services User Data Policy, including its Limited Use requirements.
Sign-in emails are sent for us by Resend, from no-reply@loftt.app. Resend sees your email address and the message so it can deliver it.
Reading photos and papers, and answering questions
Some features need a cloud service to read a photo or a paper, to answer an open question, or to describe a photo in a check. These go to Google’s Gemini service or Anthropic’s Claude service, depending on the kind of request, through our servers. This happens only after you tap Allow in the notice “Before Loftt reads this”. You can change your choice any time in Settings, Privacy, Use cloud reading. When you scan, we remove location data from photos first. For questions, we send your question, the last few messages of the chat and the records from your home that are relevant. Our servers do not keep your question, records or answer in their logs. We use the paid developer services of both companies, and under their terms neither Google nor Anthropic uses this information to train its models.
Safety levels in a check are decided by fixed rules on your phone, not by the cloud service.
Weather
To show weather items, Loftt sends only the city and country of your home (for example “London, GB”), never your street address or exact position. Our server asks a weather provider (currently Open-Meteo) for the forecast and keeps it for a few hours. If you tap “Use my current location” when adding a home, your phone’s own address service (Apple) turns the position into an address. We do not store that position.
Usage and crash information
While Settings, Privacy, Help improve Loftt is on (it is on by default), Loftt sends:
- Crash reports to Sentry: the error, app version, device model, system version and which screen. They contain no name, email address, IP address, home data, screenshots or typed text.
- Anonymous usage counts to PostHog: which parts of the app are used (for example, an appliance was added). They contain no names, addresses, photos or record ids. Nothing is stored on your phone to recognize you, so each time you open the app is a new anonymous session.
Turn the switch off at any time and nothing more is sent. We do not collect an advertising ID and we do not track you across other companies’ apps or websites.
Loftt Plus and purchases
If you buy Loftt Plus, the App Store handles your payment. We never see your card or Apple ID details. Our purchase service, RevenueCat, receives your Loftt account id and the status of your purchase (plan, trial, renewal date) so we can tell whether Loftt Plus is active. Nothing about your home, records or photos is sent for this. We also keep a count of how many assisted uses your account has made this month, to apply your plan’s limit. The count does not include what you asked or what you scanned.
News from Loftt
This is off by default. If you turn it on in Settings, Reminders, News from Loftt, your phone asks permission for notifications and then sends us a random device token so we can send you the occasional message (at most two a month). The token is not linked to your account or home. It is deleted from our server when you turn the switch off. To stop one person or program from registering thousands of devices, we briefly keep a one-way scrambled version of the network address (never the address itself), which is deleted after two days.
Who we share information with
These companies process information for us, only for the purposes above: Supabase (hosting and storage), Google and Anthropic (cloud reading, if you allow it), Resend (sign-in emails), RevenueCat (purchases), Sentry (crash reports), PostHog (anonymous usage) and Open-Meteo (weather, city and country only). Apple provides sign-in and payments, and Google provides sign-in if you choose it. Each of these companies is bound by its own terms and privacy commitments to protect the information it handles for us at least as well as this policy does. We do not sell your information.
How long we keep information
- Your online backup is kept while your account exists. When you delete your account, we delete it and your files straight away. Deleted data can remain in our hosting provider’s encrypted daily database backups for up to 7 days, then it is gone.
- Shared homes: homes you own are deleted for everyone in them when you delete your account. Records you added to a home someone else owns stay with that home, and your name is removed from them and from the home’s activity.
- Sign-in, purchase and assisted-use records are deleted with your account, including your record at RevenueCat. If you signed in with Apple, we also ask Apple to revoke Loftt’s access to your Apple ID. Apple keeps its own purchase records under its policies.
- Crash reports and anonymous usage counts are kept for the standard period of Sentry and PostHog and are then deleted. They are not linked to you.
- Weather forecasts are kept for a few hours, and the scrambled network address for News from Loftt for two days, as described above.
Your choices and rights
- Export: Settings, Your home, Export home. You get spreadsheets and copies of your photos and documents, and with Loftt Plus a PDF report. Nothing is sent anywhere when you export.
- Delete your account: when signed in, Settings, Account, Delete my account. This permanently deletes your account and your online backup straight away. You can choose to erase the home on your phone at the same time; otherwise it stays until you delete the app. Deleting your account does not cancel Loftt Plus; cancel it in your Apple ID settings. If you can’t open the app, write to privacy@loftt.app. What is deleted and what stays.
- Turn things off: usage and crash information, cloud reading and News from Loftt each have their own switch in Settings.
- Ask us: to see, correct or delete information about you, write to privacy@loftt.app. Depending on where you live, you may have further rights under local law.
Children
Loftt is made for adult homeowners and renters. It is not directed at children under 13, and we do not knowingly collect their information.
Changes
If we change this policy, we will update the date at the top and, for important changes, tell you in the app.