Privacy

What Homeboard keeps when you use it, in plain words.

Updated 30 September 2026

Who is responsible

Homeboard is run by Luca Barton, a sole trader in England, who is the controller of the personal data described here under UK data protection law. Contact: hello@homeboard.uk.

Without an account

Everything stays in the browser on that device: screens, settings, family and photos. Nothing is sent to Homeboard.

With an account

• Your login: your username or email, a scrambled (hashed) copy of your password and recovery key, and the home you belong to. Your password itself is never stored.
• Your home's content: screens, displays, the Family page (names, birthdays, chores, points), the calendar and news links you add, and photos you upload. Everyone in your home can see and change it.
• Children: the Family page often holds children's names, birthdays and chores. A parent or carer adds them and can change or remove them at any time; they are used only to show them on your own wall. A first name or a nickname is all the wall needs; please don't add more than that. Children don't have accounts unless an adult in the home makes one for them.
• Security records: the last 30 sign-ins and account changes, with the type of device and a rough place worked out from the network address (a town, not an address). You see these on the Account page.
• Display health: each wall display reports the screen it is showing, its app version and recent errors, for the Displays page.
• Your plan: whether your home has Plus, and when it was bought or started its trial.
• How you found Homeboard: if you say when signing up, the answer is kept with your home. It is used only to know where to tell people about Homeboard.

Paying for Plus

Payments are handled by Paddle (Paddle.com Market Ltd), which sells Plus on Homeboard's behalf. Paddle collects your payment details, email address and country, and is responsible for that information under its own privacy notice. Homeboard never sees your card details. From Paddle, Homeboard receives the transaction's reference and which home it was for.

Why it is kept, and the legal basis

• Your login, your home's content, display health, your plan and the emails about your account: to provide the service you signed up for (the legal basis is our contract with you).
• Family page details about people who don't have their own account, such as children: so your household can show its own family's names, birthdays and chores on its own wall (the legal basis is legitimate interests: your household's interest in organising its family life, and ours in providing the service; the details are only ever shown to people in your home).
• Security records: to keep accounts safe and show you who has signed in (legitimate interests: yours and ours in keeping accounts secure).
• How you found Homeboard, if you say: to know where to tell people about Homeboard (legitimate interests; it is optional).
• Payment records: because tax law requires business records to be kept (legal obligation).

Where it is kept

On Cloudflare (the website, its server and photos), Upstash (the database) and Resend (the two emails Homeboard sends about your account: a link to confirm your email address and, if you ask for one, a link to reset your password; Resend sees the address and the message). These companies store it on Homeboard's behalf, under their data processing terms. The database is in London. Photos and the nightly copies are kept in Western Europe (the EU), which the UK recognises as protecting personal data properly. Cloudflare answers each request at its data centre nearest to you, and Resend sends emails from the United States; both are United States companies, and anything they handle outside the UK is protected by the safeguards UK law approves for this (the UK's data bridge with the United States, or the International Data Transfer Addendum to the standard contract clauses), which their data processing terms include. Calendars, news and photos from other websites are fetched through Homeboard's server so old tablets can load them; those requests are not stored.

Other services the blocks use

Some blocks ask other services for what they show, directly or through Homeboard's server: Open-Meteo (weather, using your town or the place you choose), GeoJS and BigDataCloud (to find your town when location is automatic), Bing and Picsum (photos), Google Fonts (only if you pick one of its fonts for a screen), and whatever calendar, news, sports, prices or web page links you add. Those services see a request from your device or from Homeboard's server, as any website would.

Cookies and storage

Homeboard uses two cookies, both needed for it to work: one keeps you signed in, and one lets your displays load calendars and photos through Homeboard's server. The app also keeps your screens in the browser's own storage so a display works offline. There are no advertising or analytics cookies, and no tracking of any kind. This website loads its font from Homeboard itself, not from Google.

Who can see it

The people in your home. The site admin's page shows each home's name, owners, number of people and displays, plan, how you found Homeboard, size and when it was last used, never its screens, calendars or photos. The person running Homeboard has technical access to the database and only looks at a home's content to fix a problem you report. Nothing is sold or shared for advertising.

How long it is kept, and deleting it

Your home's content is kept while your account exists. To delete it: Account page, Delete account. If you are the only person in your home, its screens and photos are deleted too; otherwise they stay for the others. Each night a copy of every home (screens, family, settings and accounts, not the photos) is saved privately so it can be put back if something goes wrong; each copy is deleted after 14 days, so anything you delete is gone from the copies two weeks later. Security records keep only the latest 30 events. Payment records are kept for six years because tax law requires it.

Your rights

You can ask for a copy of your data (Account page, Save a copy of this home, gives you most of it straight away, in a file you can take elsewhere), for it to be corrected or deleted, for its use to be restricted, or object to how it is used. Where we rely on your consent, you can take it back at any time. Email hello@homeboard.uk; we answer within one month.

Complaints

If you are unhappy with how we use your data, please tell us first at hello@homeboard.uk. We will confirm we have your complaint within 30 days, look into it, and tell you what we found and what we have done without undue delay. You can also complain to the Information Commissioner's Office at any time, at ico.org.uk.