Privacy Policy
Effective date: July 26, 2026
Casa (“Casa,” “we,” “us”) is a private household management app. This policy explains what information Casa collects, how we use it, and the choices you have. Casa does not sell your personal information and does not use it for advertising.
Information we collect
- Account information. When you create an account we collect your email address and a securely hashed password (handled by our authentication provider, Supabase).
- Household content you create. The information you and your household members enter into Casa — calendar events, grocery items, chores, reminders, meals and recipes, to-dos, saved household info, gift ideas, vehicles, and family/kid profiles (such as a name, color, or birthdate you choose to add).
- Google Calendar data (optional). If you choose to connect Google Calendar, we access your calendar events on a read-only basis. See the dedicated section below.
- Notification tokens. If you enable reminders/notifications, we store the device or web-push token needed to deliver them.
- Basic technical data. Standard information needed to operate and secure the service (for example, timestamps and error logs).
Google Calendar data and Google API Services
Casa's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.
When you connect Google Calendar, Casa requests a single, read-only scope:
https://www.googleapis.com/auth/calendar.readonly. With it we:
- Read your Google Calendar events and mirror them into your household's calendar in Casa so they appear alongside your other events. We do not create, modify, or delete anything in your Google Calendar.
- Use this data only to provide the calendar-sync feature to you and your household. We do not use Google user data for advertising, we do not sell it, and we do not transfer it to others except as needed to provide this feature (our hosting/database provider) or where required by law.
- Do not allow humans to read your Google data except with your consent, to comply with the law, or as necessary for security (such as investigating abuse).
- Store an access credential (a refresh token) securely so syncing can continue automatically. It is kept restricted to our backend and is never exposed to other users or in the app.
You can disconnect Google Calendar at any time from Calendar → Google Calendar in the app, which stops syncing and removes the events synced from your Google account. You can also revoke Casa's access from your Google Account at myaccount.google.com/permissions.
How we use information
- To provide, maintain, and secure Casa's features for you and your household.
- To sync and display your data in real time across your household members' devices.
- To send the reminders and notifications you set up.
How information is shared
- Within your household. Content is visible to members of your own household. Each household's data is isolated from every other household.
- Service providers. We use Supabase to host our database, authentication, and backend functions on our behalf. We do not sell your data or share it with third parties for their own purposes.
- Legal. We may disclose information if required by law or to protect the safety and security of the service.
Data retention and deletion
We keep your information for as long as your account is active. Disconnecting Google Calendar removes the events synced from that account. You can delete individual items in the app, and you can request deletion of your account and associated data by contacting us at the address below.
Security
Access to your data requires authentication, and our database enforces per-row security so that members can only reach their own household's data. Sensitive backend credentials (including any Google refresh token) are restricted to our backend services.
Children
Casa is designed for parents/guardians to manage their household. Kid profiles are created and managed by adults; children do not have their own logins. Casa is not directed to children for independent use.
Changes to this policy
We may update this policy from time to time. Material changes will be reflected by updating the effective date above.
Contact us
Questions about this policy or your data? Contact us at dmashburn3@gmail.com.