Privacy Policy

Last updated: July 5, 2026

HoneyDone (“HoneyDone,” “we,” “us”) is a household operating system that helps couples, families, and roommates coordinate tasks, projects, shopping, and home information. This policy explains what information we collect, why we collect it, who we share it with, and the choices you have. It applies to honeydone.io and the HoneyDone application.

The short version

• We collect what you enter (household, task, shopping, and home information) plus account and usage data needed to run the product.
• We never sell your data.
• Your household's data is isolated from every other household.
• Optional integrations (Google Calendar, Gmail, Home Assistant) are read-only or user-controlled, and their credentials are encrypted at rest.
• Analytics cookies are off by default — we only use them if you click “Accept” on the cookie banner.
• An AI provider may process the text you type into HoneyDone to help organize it, when AI-assisted capture is enabled for your household.

Information we collect

Account information

When you sign up (via Clerk, our authentication provider) we store your name, email address, an optional phone number, an optional profile photo, your timezone, and your locale. Authentication itself — passwords, sessions, multi-factor codes — is handled entirely by Clerk; we never see or store your password.

Household information

HoneyDone organizes people into households. We store the household's name, each member's role (e.g. adult, child) and relationship label, and household characteristics you provide (home type, ownership status, yard/garage/fireplace, pet and child counts, climate zone) — used to tailor which task “packs” and recommendations make sense for your home.

Tasks, projects, and shopping

Everything you and your household create — tasks, subtasks, projects, dependencies, assignments, shopping lists and items, notes, and free-text captures — is stored so it can be shared across your household and synced across devices.

Places and assets

If you add a place (like a preferred hardware store or your child's school), we store its name, address, and — if you enable location-based errand batching — approximate coordinates and a radius used to detect when you're nearby. If you catalog household assets (appliances, vehicles), we store what you enter about them (brand, model, purchase and warranty dates, service history).

Calendar and email (optional integrations)

If you connect a Google or Microsoft calendar, we sync event titles, start/end times, attendee lists, and busy/free status so HoneyDone can plan around your schedule. This access is read-only — HoneyDone does not create, modify, or delete events on your calendar.

If you connect Gmail, we sync message metadata only— subject line, sender, a short snippet, received time, and Gmail labels — to detect actionable household signals (bills, permission slips, deliveries, appointments). Access is read-only (Gmail's gmail.readonly scope) and we do not fetch or store full email bodies or attachments.

Google user data.HoneyDone's use and transfer of information received from Google APIs to any other app adheres to the Google API Services User Data Policy, including the Limited Use requirements.

OAuth access and refresh tokens for these integrations are encrypted at rest (AES-256-GCM) and are never exposed to the browser or to other households.

Home Assistant (optional, self-hosted)

If you connect your own Home Assistant server, we store the server URL and a long-lived access token you generate (encrypted at rest, same as above) along with the entity IDs you choose to share. We poll simple presence and time-of-day signals from your server periodically. This is your own infrastructure — we do not operate or have access to it beyond what you connect.

Push notifications

If you enable push notifications, your browser generates a subscription (an endpoint URL and encryption keys) that we store so we can deliver notifications. Delivery goes through your browser vendor's push service (e.g. Google, Mozilla, Apple, Microsoft) — we never see the notification content en route, only the delivery endpoint.

Usage and activity data

We keep an activity log of actions taken in your household (who did what, when) so household members can see a shared history, and internal analytics events (which features and “context modes” you use) to improve the product and generate insights like “desk work peaks on Sundays.” These are used only in aggregate or within your household — never shared across households.

AI-assisted features

When you type a free-text capture (a task, note, or shopping item) and AI-assisted capture is enabled for your household, that text is sent to a third-party AI model — currently OpenAI's GPT-5.4, accessed through Vercel's AI Gateway — to suggest a clean title, classification, estimated time, and related subtasks or shopping items. If Gmail is connected and AI-assisted capture is enabled, email metadata (subject, sender, snippet — not full message bodies) may similarly be classified to suggest household actions.

Whether AI-assisted capture is available depends on your plan and settings, and may change over time as we roll it out more broadly. If it is unavailable, off, or the AI call fails or times out, HoneyDone falls back to deterministic (non-AI) rules to process your input instead.

Cookies and analytics

HoneyDone uses Vercel Analytics (privacy-friendly, cookieless page-view analytics) to understand overall traffic. If configured, we also use Google Analytics 4 with Consent Mode v2: all analytics and advertising signals default to “denied” until you explicitly click “Accept” on the cookie banner. Clicking “Reject” keeps analytics off; your choice is remembered in your browser and can be changed anytime via the “Cookie preferences” link in the footer. We run no advertising network and do not use cookies for ad targeting.

Who we share data with

We do not sell your data. We share information only with the service providers (“subprocessors”) that run HoneyDone on our behalf, each bound to protect it:

• Clerk — authentication and account/organization management.
• Neon — managed PostgreSQL database hosting.
• Vercel — application hosting and Vercel Analytics.
• Google Analytics (GA4) — opt-in usage analytics (see above).
• OpenAI (GPT-5.4), via Vercel AI Gateway — AI-assisted capture and email classification, when enabled for your household.
• Browser push services (Google, Mozilla, Apple, Microsoft) — delivering push notifications you opt into.
• Google / Microsoft — if you connect calendar or Gmail integrations, solely to sync the data described above.

We may also disclose information if required by law, or to protect the rights, safety, and security of HoneyDone, our users, or the public.

Data retention and deletion

Your household's data is retained for as long as your account is active. If you delete your account through Clerk, we anonymize your user record (replacing your email, name, and photo with placeholders and disabling the account) and mark your household memberships as archived; your household's data itself is not deleted, so other members can continue using it. If your entire household/organization is deleted, all memberships are archived and the household becomes inaccessible.

HoneyDone does not currently offer a self-service data export tool. If you would like a copy of your data, or want it deleted outright, contact us at hello@honeydone.io and we will work with you directly.

Security

Data is transmitted over HTTPS. OAuth tokens and other integration credentials are encrypted at rest with AES-256-GCM. Authentication and credential storage are handled by Clerk. Each household's data is isolated and is not visible to other households. See our Security page for more.

Children's privacy

HoneyDone is not directed to children and is not intended for use by anyone under 13 (or the relevant minimum age in your jurisdiction) as an account holder. A household may track tasks or profile information about children (e.g. a child count or a school-related task) as entered by an adult household member, but children do not create their own HoneyDone accounts.

Changes to this policy

We'll update the “Last updated” date above when this policy changes, and will make reasonable efforts to notify active households of material changes.

Contact us

Questions about this policy or your data? Email us at hello@honeydone.io. HoneyDone is operated by Continuance Labs, LLC DBA HoneyDone.