Privacy policy

The principle: local, unless you want otherwise

Homeshift is an app for your iPhone and iPad. Boxes, items, rooms, tasks, furniture, storage, defects and photos live exclusively on your device by default. No account, no sign-in, and no server of ours ever learns about them.

Everything beyond that you switch on yourself and can switch off again at any time. Homeshift has no advertising, no analytics tools, no tracking and no disclosure to third parties for advertising purposes.

Who is responsible

The controller for data processing is the operator of Homeshift, reachable at support@homeshift.ch. A message to that address is all it takes for questions about your data, for a deletion or for questions about this policy.

What stays on the device

Without the cloud switched on, no content leaves your device. That explicitly includes the features that usually wander off into a cloud:

• Photo recognition, text and label scanning and packing suggestions run entirely on the device. No image and no text is sent anywhere for analysis.
• The AR mode for finding boxes uses the camera on the device only.
• QR labels, PDF export, CSV and JSON archives are generated on the device.
• The activity log (who changed what) is kept on the device; it only goes to the cloud with a shared move.
• Settings such as reminder times or export preferences live in the local user settings.
• At launch the app loads a list of further apps from apps.bognar.net; it sends nothing about you.

Addresses and map

When you enter an address or look at the neighbourhood of the new home, the app queries a map service: Apple Maps (MapKit) with what you type, and for addresses in Switzerland additionally the service of the Federal Office of Topography swisstopo. The privacy terms of those providers apply. The addresses of your move belong to the move and live where it lives: on the device, and in Homeshift Cloud only if you put it there.

From four days before moving day, the app shows the weather for that day. To do this it turns the addresses of your move into coordinates and asks Apple Weather (WeatherKit) with them. Apple gets the place and the day, not your name and not your move. The forecast stays on this device, it does not go into Homeshift Cloud and is fetched again after a few hours.

Private iCloud backup (optional)

You can switch on a backup in your own iCloud account. It is written to your private CloudKit database. We have no access to it, and people helping with a shared move cannot see it either. Apple's privacy policy for iCloud applies.

The backup can be switched off at any time. You remove existing copies like any other iCloud content in the system settings of your device.

Packing suggestions and task templates are fetched from a public CloudKit database. Nothing of yours is transmitted; it is a fetch like that of a web page.

Homeshift Cloud (optional, per move)

If you want to run the same move on several devices or invite helpers, you put exactly that move into Homeshift Cloud. That is a deliberate action per move; all others stay local.

For that you need an account. You can sign in with Apple or with Google, both without a password. The provider sends us a user identifier and, if you agree, your e-mail address and your name. If you choose Apple's relay address, we never learn your real address. If both ways lead to the same confirmed e-mail address, it is the same account. We do not store a password.

The cloud then holds the contents of the shared move: rooms, boxes, items, tasks, furniture, defects, storage, the activity log with the display name of the person who changed something, and, only if you switch on “Share photos”, the photos. Plus the member list of the move and open invitations.

• Access is enforced on the server per move and membership. Every move stays strictly separate from every other.
• Invitation links expire, can be revoked and are stored only as a hash, never in plain text.
• Your sign-in tokens live exclusively in the keychain of your device.
• Photos are transferred only for the exchange and deleted from the server automatically after 48 hours. Permanently they live on the device and in your private iCloud backup.
• A cloud copy that has not been changed for 90 days expires by itself; activity log entries are deleted after 90 days. The cloud is a handover point, not an archive.

Who runs the cloud technically

Homeshift Cloud runs on the infrastructure of Cloudflare, Inc. (Workers, D1 database, R2 storage), which provides compute, database and file storage for us as a processor. The data is located in Western Europe. Beyond that we do not pass your data on to anyone, unless we are legally obliged to.

Operating the service produces technically necessary connection data (IP address, time, requested resource). It serves operation and abuse prevention and is not combined into profiles.

When you sign in, the provider you chose, Apple or Google, learns that you are signing in to Homeshift. Apple's or Google's privacy policy applies to that.

This website

homeshift.ch is a static website without accounts, forms or cookies, served through Cloudflare Pages. It produces the same technically necessary connection data as the cloud.

To count visits we use Cloudflare Web Analytics: without cookies, without fingerprinting, without profiles. We see how many people open which page from which country, not who.

Purchases

Purchases and subscriptions are handled by Apple through the App Store. We see neither your payment method nor your billing address. Homeshift only learns from the device which unlock applies. Apple's privacy policy applies to the purchase.

Deleting your data, your rights

You delete local data in the app or by removing it from the device. Without a backup it is then gone for good.

For the cloud there is “Delete account” in the settings. That removes your cloud data and your sign-in identity in one step: shared moves, memberships, invitations and transferred photos. The moves on your device are not affected. After the deletion the app checks with the server instead of merely claiming it.

If you only want to take a shared move back, you stop sharing as its owner: the server copy including photos is deleted, helpers lose access, and the move continues locally.

You have the rights to access, rectification, erasure, restriction and data portability. For portability you do not need to ask us: Homeshift exports your complete data at any time as PDF, CSV or JSON, without an account and without a purchase. You may also lodge a complaint with the competent data protection authority, in Switzerland the Federal Data Protection and Information Commissioner.

Legal bases

The Swiss Federal Act on Data Protection (FADP) applies. Where the European General Data Protection Regulation (GDPR) applies, we process data to perform the contract with you (Art. 6(1)(b) GDPR: account, cloud, purchases), on the basis of our legitimate interest in secure operation (point (f): connection data, abuse prevention) and with your consent (point (a): sharing photos), which you can withdraw at any time.

Children

Homeshift is not aimed at children and does not knowingly collect data from children.

Changes

If what the app does changes, this policy changes with it. The date above says which version applies. We additionally point out material changes in the app.