Privacy policy

The short version

• To sign up you give an email address and a ZIP code or postcode. Nothing else is required.
• Your household plan is kept on your device and in your household account, so a lost phone does not mean a lost plan.
• We never sell your information, never show ads and never track you across other sites.
• Your local authority sees only counts by area, such as how many households in a ZIP code or UK postcode sector have a plan. Never names, emails, full postcodes or plans.
• Our usage analytics are anonymous and run through our own servers: no cookies, no screen recordings, no profiles, and every word on screen is hidden from them.
• You can see, download or delete everything we hold about you at any time.

Who we are

Household Plan is run by [Company name]. For anything about your information, email hello@example.com.

[Company name] decides how your information is used, so it is the data controller under UK GDPR and responsible for it in the US.

What we collect, and why

• Your email address: to send your sign-in codes and to let you recover your account. We do not send marketing.
• Your ZIP code or postcode: kept in full with your plan, to show the hazards, guidance and contacts for your area. Readiness is counted for your local authority by a wider area only: the 5-digit ZIP code in the US, the postcode sector (such as TS10 1, a few thousand homes) in the UK. You can search your address to fill your postcode in; we keep only the postcode, never the address, and we never use your device location.
• Your household plan: whatever you choose to enter, such as first names or nicknames, rough ages of children, what you have at home, where you would meet, and the contacts you would call. You decide how much to add, and every question can be skipped.
• Anonymous usage: which screens are opened and which buttons are tapped, so we can see what helps and what confuses. This is not linked to your account.
• Security logs: technical records such as IP addresses, kept briefly to protect the service from abuse.

What we never collect or do

• We do not sell, rent or trade your information.
• We do not show advertising or use advertising trackers.
• We do not use your device location or contacts list. If you add a contact, you type it.
• We do not record your screen or keep what you type in our analytics.
• We do not give your plan to your local authority, your landlord, your insurer or anyone else.

What your local authority sees

When a council, county or city supports the service, it sees a dashboard of counts by area: for example, how many households in a ZIP code have a plan, know their evacuation zone or have water for three days.

It never sees names, email addresses, plans or anything a household wrote: only numbers. Because authorities receive only counts, your household information is not held on their behalf.

Analytics

We use PostHog to count how the app is used, sent through our own servers rather than directly to a third party. It runs in its most private mode: no cookies or other storage on your device, no session recordings, no profiles, nothing linked to your account, and every word and value on screen is masked before anything is sent. What remains is counts of screens and taps.

Who helps us run the service

These companies process information for us, under contracts that limit them to doing so:

• Cloudflare: hosting the app and website, and sending sign-in emails.
• Neon: the database that keeps household accounts.
• PostHog: anonymous usage analytics, as above.
• Open-Meteo: looks up the town, ZIP code or postcode you type to find your area. It receives only what you type, as any website does when you search it.
• Zippopotam.us: looks up the ZIP code or postcode you type at sign-up, to find its town and region. It receives only the code, never who typed it.
• Photon by komoot (OpenStreetMap): only if you choose to search your address to fill in your postcode. It receives what you type; we keep only the postcode it finds, never the address.

Where your information is kept

Household accounts for US authorities are kept in the United States. For UK authorities we will keep them in the United Kingdom. Where information does cross borders, we rely on the UK International Data Transfer Agreement or the UK Extension to the EU-US Data Privacy Framework.

How long we keep it

• Your account and plan: until you delete them. Deletion is immediate in the app, and backups clear within 30 days.
• Security logs: up to 30 days.
• Anonymous counts: kept, because they cannot identify anyone.

Children

The service is for adults planning for their household. It is not directed at children under 13, and children cannot sign up. Parents and carers may add a child to their own household plan, such as a first name or nickname and an age band, so the plan includes them.

Your rights

In the UK, our legal bases are providing the service you signed up for (your account and plan) and our legitimate interests in keeping it secure and improving it (security logs and anonymous analytics). You can complain to the Information Commissioner's Office at ico.org.uk.

• See what we hold about you, and download it.
• Correct anything that is wrong.
• Delete your account and everything in it.
• Object to or restrict how we use your information.
• Email hello@example.com for any of these. We reply within 30 days.

Security

Information is encrypted in transit and at rest. Access to production systems is limited to the people who run the service. The service is independently tested for security every year.

Changes

If we change how we use your information, we will update this page and tell you in the app before the change applies. Last updated 12 November 2026.