Privacy

When you sign in with Google we receive your name, your email address and the URL of your profile picture. Nothing else — not your contacts, not your files, not your other Google data.

After that, we store what you create: your items, their photographs, the jobs you confirm and the dates they are due.

Photographs are stored privately. They are not public URLs, and they are served only through a request that checks you belong to the household that owns them.

Every upload is re-encoded before it is stored, which removes the embedded camera metadata — including GPS coordinates. We never see where a photograph was taken, because that information is discarded before it reaches our storage.

A photograph is sent to Anthropic so that Claude can read the label in it. That is the only third party a photograph reaches, and it is what makes the product work at all.

Deleting an item deletes its photographs too, within moments, along with everything we read off them. That covers the item's parts and their photographs as well. One thing it cannot reach: a photograph that was already sent to Claude to be read is held under Anthropic's own retention, not ours, and nothing we do here removes it from there.

One exception: a photograph you upload but never save to an item stays in our storage. There is no item to delete, and nothing sweeps them up on a schedule. If you started adding something, changed your mind, and want that photograph gone, email us and we will remove it by hand.

Reminders are sent through Resend. We email you when something you own is due, and for nothing else — no newsletters, no announcements.

Everyone in your household sees the same list. That is the entire point of a household, and it means anyone holding your invite code can join it. Treat the code the way you would a key.

We use two services. Vercel Web Analytics counts page views: which page, the country, and the kind of device and browser. PostHog records how the app is used — which screens you reach and which controls you press. Both are served from our own address rather than theirs, so an ad blocker does not quietly remove some people and leave us with numbers that look complete. PostHog stores an identifier in your browser, and we tell it your account id — not your name and not your email — so that one person's visits can be told apart from another's. The pages a reminder email links to are excluded entirely from both, and everything after the ? in an address is removed before it is sent.

PostHog also replays your screen, so we can see where the app goes wrong rather than guess. All text is hidden before it leaves your browser — your item names, your part numbers and your conversation with Claude are not readable in a recording. Your photographs and your invite code are not recorded at all, not even hidden. Recordings are kept for 30 days and then deleted. You can turn all of this off in Settings, and when it is off nothing is loaded in the first place.

There is no advertising here today, and no advertising trackers. We expect to add some — most likely links to replacement parts that pay us a commission. When we do, this page will say so and the links will be labelled, in the same release that adds them.

We do not sell your personal information.

There is no button that deletes your account. Email us and we will do it by hand.

privacy@maintainstuff.app

This page is updated in the same change that makes it wrong, not on a schedule. Parts of it are enforced by tests that fail when the software stops matching what is written here.