Privacy notice
Last updated: 2026-10-14.
Home Sweet Plan is a family organizer made by one developer, Mehmet Cinar. This notice says what the app and its server keep about your Family, where, for how long, and how to have it deleted. Nothing is sold, and nothing is used for advertising. The app contains no analytics or crash-reporting service; the one measure of the pilot is the Activity described below.
Signing in
Adults sign in with their Google account through Firebase Authentication, a Google service. Google tells the server who you are with a signed token holding your Google account id, your name, your email address and the address of your profile picture. The server keeps the account id, to recognise you, and the address of your profile picture, so that your Family sees it next to what you take. Your name and email address are read from the token each time and shown on the Account screen; the server does not store them. Firebase Authentication keeps them in its own record of your Google sign-in. Children never sign in and have no account.
What the server stores
For each Family, in its own database:
- The Family: its name, its time zone, and the time of the morning reminder.
- Its Members: for each, the display name and colour given in the app, whether they are an adult or a child, and the day they joined. For an adult, also their Google account id and the address of their profile picture. A child Member is only a name and a colour.
- Tasks and Events: their title, notes, place, dates and times, how they repeat, pauses and changes to one occurrence, who they are assigned to, who an Event concerns, who completed a Task and when.
- Projects: their title, whether they are ended, when they were created, and the order of their Tasks.
- Invitations: when an Invitation expires and when it was used. The link itself is not kept, only a fingerprint of it that cannot be turned back into the link.
- Devices: for each phone where an adult allowed notifications, its Firebase installation id and the adult signed in on it, so reminders reach it.
- Activity: what each Member did with a Task (created, assigned, took, completed, reopened, deleted, planned it for a day or left it without one) and when, and the days each Member used the app. It tells whether the app helps both adults share the work; it is read only by the developer, for the pilot.
- Sent reminders: which reminders went out, so none is sent twice.
No Family sees another's data.
Notifications
At the first launch, Firebase gives the app on your phone an installation id and registers it with Google, whether or not you allow notifications; the server keeps it only once you do. Your phone is notified through Firebase Cloud Messaging, a Google service, when an adult of your Family assigns you a Task or an Event, and for each Reminder: an Event about to start, the Tasks due today. The notification carries the title of the Task or Event and its day, so these pass through Google's servers. Nothing else of your Family's plan does.
Where it is hosted
The server and its database run on a virtual server rented from Contabo, in its data centre in France. The app reaches it only over HTTPS. Each night a copy of the database is sent to a storage bucket outside that server, at Backblaze in the Netherlands, so a lost server does not lose your plan.
How long it is kept
Your Family's data is kept as long as the Family exists. A Task or Event you delete is deleted at once; the Activity records that mention it stay, because they belong to the Family. A child Member you remove is deleted and taken off the Events they were part of; the Tasks and Events assigned to them are left without an Assignee. Deleting a Project deletes its Tasks. The Lists, their Items and their photos left the app on 2026-10-14: the server deletes them with the version that removed them, and the nightly copies that still hold them disappear within 30 days. The nightly copies are kept 30 days, then deleted. The server keeps no log of who visits; its error logs hold at most 30 MB for each part of it, the oldest lines deleted first.
Deleting your Family's data
The app cannot delete a Family yet. Write to the contact below and the developer deletes your Family: the database then deletes everything it holds about it (Members, Tasks, Events, Projects, Invitations, Activity). The developer also deletes the Devices of its adults, which are kept per Google sign-in rather than per Family. The nightly copies that still hold them disappear within 30 days. Your Google sign-in in Firebase is deleted as well. Uninstalling the app alone deletes nothing on the server.
The waitlist for the beta
Before it is public, the app is tested by a few families invited from a waitlist on homesweetplan.com. Joining it sends the server, and only it:
- the email address of your Google account, the one Google Play adds to the testers;
- whether you have an Android phone, since the beta runs only on Android;
- the time you consented to be kept on the list.
They are kept in the same database as the app's, and used only to invite you to the beta by hand; no email is sent automatically, and nothing is shared with anyone. The server counts how often one internet address joins, to stop a robot filling the list; that count stays in the server's memory and is gone within the hour.
The list is deleted when the app opens to everyone on Google Play, and in any case 12 months after you joined. You can leave it before: the page that confirms your sign-up gives you a link that deletes it at once. If you lost the link, join again with the same email for a new one, or write to the contact below. Joining again keeps one sign-up, from the day you first joined, with your latest answer; the last five links you were given still work. The list does not check that the email is yours: someone who knows it can get a link the same way and remove your sign-up, and you can then join again. A deleted sign-up stays in the nightly copies of the database for 30 days, then disappears with them.
