My Home privacy notice

Version 2026-10-25.2. This notice covers My Home accounts. The main Costwise privacy notice covers the public website.

Who is responsible

Stephen Evans trading as Costwise. Email: contact@costwiseuk.co.uk. Business address: 11 Broadstone Crescent, Crowborough, TN6 2YL, United Kingdom.

What we use and why

We use your email address, account ID, sign-in/session information and home entries to provide the service you request. Home names, task dates, notes, project amounts, savings plans and quotes are information you choose to enter. You do not need to provide a home address. Our contractual basis covers running your account, saving your entries and administering subscriptions. Security and limited diagnostic logs support our legitimate interests in protecting the service. Legally required financial records are kept to meet our legal obligations.

Reminders, the calendar link and your answers about your home

Reminder emails are part of the service you sign up for, so they are on by default; you can choose a weekly summary or switch them off in Settings or from any reminder email. To send each task’s reminder once, we record which tasks a reminder covered by their ID and date, never their title, and keep that for 400 days. Links in reminder emails are signed so they only work for your account; when you use one, we keep a one-way hash of it for 60 days so it cannot be used twice. If you create a calendar link, it is a private random address: anyone who has it can see your task names and dates, so keep it private. You can replace it or turn it off in Settings. The optional answers about your home (house or flat, heating, who lives there, a few features and a broad region) are saved with your notebook and used only to suggest jobs and show regional guide prices.

Reading your home offline

When you open My Home in a browser, the app keeps a copy of your home in that browser so you can read it without a connection, and the app’s own files so it opens quickly. Signing out or deleting your account removes the copy. On a shared computer, sign out when you finish.

Measuring whether My Home works, and preventing abuse

To see whether My Home is useful and to decide what to build, the server records when your account reaches a few milestones (for example: first sign-in, first task, fifth task, first project, first quote, first record, answering the questions about your home, being sent a reminder, using a reminder link, creating a calendar link, subscribing or cancelling) and which days you opened the app. These records hold your account ID and a date only, never the text of your notebook, and we look at them as weekly totals. They are deleted with your account. This relies on our legitimate interest in running and improving the service. To stop sign-in codes being used to flood someone's inbox, each code request stores a one-way hash of the requesting IP address and of the email address for 24 hours, then deletes it.

Service providers

Supabase stores account and notebook data in our London-region project and supplies authentication. Cloudflare hosts the website and processes account requests. Resend sends sign-in, reminder and service emails. GitHub stores an encrypted nightly backup of the database, which only we can decrypt, for up to 30 days. Stripe handles payments, payment-method details, billing and fraud prevention; Costwise does not receive your full payment-card number. These providers may process support, security or delivery data internationally under their applicable data-protection arrangements. A London database region does not mean every service operation takes place in the UK.

Cookies and private entries

My Home uses essential, secure session cookies to keep you signed in. They are not advertising cookies. Cloudflare Web Analytics counts page views on My Home pages without cookies and without identifying you. The example home stores fictional entries in your browser until you clear them. The private app does not run marketing analytics, send your notes to an AI service or automatically send your information to affiliate partners. Following a public cost-guide or partner link is a separate action under the relevant site's privacy notice.

Retention and deletion

Your notebook remains available after a trial or subscription ends so you can read and export it. We keep it until you delete your account or ask us to erase it; we will review inactive account retention as the service develops and give notice before any automatic removal. Account deletion removes the active notebook, account and associated membership record. It also removes the app's Stripe customer and cancels subscriptions. Stripe may retain invoices and transaction records for legal, accounting, fraud-prevention and dispute purposes.

Deleted data may remain in restricted provider backups until those backups expire under the provider's retention settings. Our own encrypted backups are kept for up to 30 days. Backups are not used as active accounts, and if we ever restore one we first re-apply every deletion made since it was taken: we keep the account ID and date of each deletion for 60 days for that purpose only. We do not promise that backup copies vanish immediately. You can contact us for current retention information or a wider erasure request. We retain only records needed for an applicable legal obligation or dispute, and review them when that need ends.

Your choices and rights

You can correct entries, export your notebook and delete your account in Settings. You can also ask for access, correction, erasure, restriction or portability, and object to processing based on legitimate interests where applicable. Email contact@costwiseuk.co.uk; we may need to confirm your identity and normally respond within one month. You may complain to the Information Commissioner's Office. We do not use your notebook for automated decisions with legal or similarly significant effects.

Contact and changes

Contact contact@costwiseuk.co.uk about privacy, access or deletion. We will notify account holders of material changes to how their information is used. Please avoid putting sensitive personal information or other people's private details in notes unless necessary and lawful.