Data we collect
- Account data: email, display name, user ID, gender (for a default avatar and member gender statistics visible to platform administrators) and avatar; when you sign in with Google, the email, display name and picture Google provides.
- Content you provide: renovation needs, flat and estate details, reference images, enquiries, messages, quote files, reviews, posts, diaries, unboxings and other uploads.
- Business User data: company details, contact name and phone, portfolio, product and offer information.
- Usage data: views, searches, saves, impressions and clicks, device and browser information, approximate location (inferred from IP) and error logs.
- Learning-centre reading records: how far you read each article, guide, FAQ and district page, how long you stayed, and the bookmarks, highlights and notes you add yourself. Signed in, they are stored in your account so they follow you across devices; signed out, they stay on your device only (we only record, anonymously, that a page was started and finished, by page ID alone and never your content).
- Transaction data: purchase records and payment status (full card details are handled by the payment service; we do not store them).
- Token records: your Token balance, the amount of each change, its reason category, time and related item number (never your questions, answers or quote content).
How we use it
We use this data to: provide and maintain Platform features; deliver enquiries you confirm to the firms you choose; show public content; recommend content and firms; handle payments, coupons and rewards; send service notices; prevent fraud and abuse and keep the Platform secure; handle reports and reviews; analyse and improve the service (including headcounts from reading progress and anonymous start and finish records that show which pages people finish: a page with fewer than 5 readers is never shown, and we never look at the content of your highlights or notes); and comply with the law.
Account and renovation brief
Account email is used for sign-in and notices. Creating an account requires the 6-digit code we email you. Private needs, reference images and unsent attachments are saved per account; after you confirm an enquiry, the receiving company only sees the details and attachments sent to it. If you forget your password, request a 6-digit code on the sign-in page; it is sent to the account email. Changing your password while signed in also needs a code.
Sign in with a Google account to manage quote requests and inspiration albums. Homore may receive the email, display name and picture Google provides under the scopes you approve. Google may process this data outside Hong Kong.
An account created with a password and not yet linked to Google stops accepting that password the first time you sign in with a Google account for the same email, and other devices are signed out. Use Google to sign in after that.
Google user data
We request only Google’s basic sign-in scopes (email, display name, profile picture) and use them only to create and sign in to your Homore account, show your name and avatar, and send account notices.
Homore’s use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. We do not sell Google user data, use it for advertising, or use it to train general AI models.
You can revoke Homore’s access at any time in your Google Account’s third-party apps settings.
Public content
Listed firm profiles, authorised portfolios and approved reviews can be viewed publicly. Private price bands on firms and portfolios are only used for budget matching and are not shown on public pages. Marketplace listings can show public prices; that is not the same as private renovation bands. Save counts are totals only; who saved is private.
Content you publish publicly (such as posts, reviews and portfolios) can be seen by other users and search engines, and may be used to display and promote the Platform under the Terms of Use.
Recommendations and coupons
Smart recommendations only attach reading history to your account after you turn them on. Impressions are for anti-spam and analysis, not treated as your interests. You can turn them off, reset, or hide a firm; a reset will not rebuild interests from old saves or coupon claims. Claimed coupons, redemptions and recommendation events are included in your data export. After account deletion, recommendation events are deleted and coupon and redemption records are unlinked from your account and kept for the merchant’s records. Coupon codes appear only on authorised redemption screens, never on public pages.
Messages and notifications
Each firm's conversation, quotes and appointments are stored separately. Device push only signals that something is new; full content needs a sign-in. You can choose device notifications in your account.
Project journey and co-management
The renovation journey lays out your schedule from the start date, durations and progress you enter, and links to your expense book, enquiries and reports. The schedule, notes, photos, walk-through records and change history are stored per project and can be seen only by the project owner and co-managers who accepted an invitation.
- Co-management: the owner can invite up to 7 people by user ID (8 including the owner); an invitee sees the project only after accepting. Members see each other’s display names and avatars, the project’s estate or address name, schedule, expenses, notes, assignments and photos.
- The owner can make a member view-only or remove them at any time; a member can leave. After leaving or removal they can no longer see the project. Only the owner can invite and remove.
- Change history: we keep the last 40 schedule changes of a project (who, when, which kind of change) so they can be restored.
- Notices: members receive notices of project changes, notes and assignments (merged into one per project); timed reminders follow your own schedule, at most one a day, and you can turn them off or tap “not for me” at any time. Device push must be switched on by you in notification settings.
- Read-only share links: the owner can create a link valid for up to 30 days and close it at any time. Anyone with the link, signed in or not, sees only the estate name, dates and steps, never notes, photos, amounts or members. The server stores only a hash of the link, not the link itself.
- AI: only after the project owner turns on “AI uses my project” in the account does the AI use your schedule to answer, handled as described in this policy.
- Offline viewing: a summary kept so you can see progress without signal is stored only on your device and cleared when you sign out or switch accounts.
- Weather notices: typhoon and Black Rainstorm notices come from public Hong Kong Observatory data; none of your personal data is sent out.
- Exports: calendar files, PDFs and progress cards are produced when you ask; once downloaded or shared, a copy is outside our control.
- Renovation diaries and unboxings: content you choose to publish to a diary or unboxing is “Public content” above.
Market price reference index
When analysing a quote you can separately tick “Contribute prices anonymously” (off by default). Only then does the server re-read the quote and store just the amounts, quantities, units, trade codes, flat type, area and quote month, plus a hash of the quote text to prevent double counting. It never stores the original quote, file name, company name, address, phone number or your identity. A signed-in user’s account ID and a visitor’s daily source hash are used only against abuse and never appear in public statistics. Public pages only show totals built from at least 5 quotes. Visitor contributions carry no identity, so they cannot be withdrawn one by one; signed-in users can ask to delete their contributions through a data request.
Service providers and cross-border processing
We use these categories of service providers to process data for us, disclosing only what each service needs: cloud hosting and database (such as Vercel and Supabase), file storage (Cloudflare R2), sign-in (Google), push notifications (Google Firebase Cloud Messaging), AI analysis services, payment services (such as Stripe), error monitoring and performance diagnostics (Sentry) and email delivery.
AI quote analysis sends the quote text to an AI service provider only after you agree to processing. Two further options are off by default and independent: (1) contribute prices anonymously to the market reference index (numbers, flat type and area only; your identity is never made public); (2) contribute anonymously to improve the Homore quote model — only REDACTED quote text (names, phones, addresses, emails, HKID, BR and company names masked) plus structured labels are stored, never the original file. For both, the platform keeps a private link only you use, so you can delete or withdraw; deleting that record also deletes the matching sample.
Questions you type or speak into “Ask AI” in the drawing-reading guide are sent to an AI service provider only to answer you on the spot; we do not send your name, phone, address or any drawing geometry with them, and we do not use your questions to train AI models.
These providers may process data outside Hong Kong. Apart from the above, sharing you direct (such as sending an enquiry to a firm) or legal requirements, we do not disclose your personal data to third parties, and we never sell it.
Direct marketing
We will not use your personal data for direct marketing, or provide it to others for that purpose, without your consent. You can stop promotional messages at any time in notification settings or by email.
Media and devices
Uploads are stored on Cloudflare R2; sign-in and platform records use Supabase. Private attachments are checked on every open. The PWA offline mode does not cache private conversations or quotations. Unsent message text, attachment references and unconfirmed send identity are kept on this device for 7 days, then cleared when you reopen the conversation. They restore only after you sign in to the same account and pass the conversation check, and are never sent automatically. Signing out clears these drafts; clearing browser data or device storage can also remove them.
We use essential cookies and device storage for sign-in, language and drafts. We also record which pages you view and how long each is in front of you, to understand how the Platform is used: when signed out, only by a random ID in a cookie (the server keeps a monthly-changing encrypted hash of it); when signed in, linked to your account and visible only to platform administrators, never published or used for advertising. Private pages are recorded by section or layout template only (for example “Renovation plan · Budget”), never their content, anything you type, or IDs; when you arrive from a link in an AI search service (such as ChatGPT or Doubao), only the name of that service is recorded, never the referring address or the conversation; what you do in the Renovation academy (such as which card you open or which link you follow) is recorded the same way, by item ID only, never what you type; when an account is deleted, these records are unlinked from it.
To learn where people run into difficulty, we also record: whether you use a phone, tablet or computer and whether you opened the installed app; how far down each page you scroll (25, 50, 75 or 100%); and how many times each part of a page (for example the header, a content section or the main button) is tapped — only the part, never the tap position, the text tapped or anything you type. These three are kept with your page-view record, linked as described above. Separately, we keep daily totals, by page type, of rapid repeated taps, forms left unsent (form type only), page errors and failed requests, install-prompt and push-permission choices, and the number of searches (never the search words); these totals are not linked to you personally. All of this is used only to improve the Platform, is visible only to platform administrators, and is never published or used for advertising.
When you try the AI without signing in, we store a random ID on your device (a cookie and browser storage), used only to count your trial uses; the server keeps only its encrypted hash, the counts and a network hash that changes daily, never the IP address itself, and never links them to your identity.
Error monitoring and diagnostics
To find and fix faults we use Sentry, an error-monitoring and performance-diagnostics service. When a page or the server fails, Sentry receives the error message, the address of the page (without URL parameters), the browser and device type, and a short trail of what happened before it, such as page changes. We first remove cookies, request bodies and identity-related headers, and we do not send your personal identity to it. About one in ten visits is also sampled for performance tracing.
For a small share of visits (about one in ten) and every time an error occurs, a replay of the screen is recorded (Session Replay): all text and input fields are masked, and images and video are not recorded. Private pages (such as messages, enquiries, quotes, account settings, drafts and checkout) are not recorded, and an error raised there never starts a recording. This is used only to find and fix faults, and is never published or used for advertising.
Retention and account deletion
Raw browsing records and foreground time are retained for up to 400 days, then removed. Aggregate statistics without personal identity may be retained longer.
We keep personal data only as long as needed for its purpose. You can view, export, correct or delete your account at any time under Account settings › Data requests. After a deletion request we confirm it is you and, within 30 days, stop your sign-in and delete your personal data: sign-in email and password, name, user ID, avatar, bio, gender, addresses, project details (as owner, including the schedule, notes, photo links, share links and change history; photos you uploaded as a member are removed), AI conversations and memory, learning-centre reading records (progress, bookmarks, highlights and notes), community posts and comments, follows, notifications, stored data exports, and photos and files you uploaded but did not share with a firm.
These records stay under the name “Deleted account” because the receiving firm, other users or the law need them: enquiries, conversations, attachments, quotations and reviews you sent to firms; messages you left in group chats and notes you left in a co-managed project (the words stay but are no longer linked to any account, and the project owner can still delete them); reports and sanctions; orders and payments (kept for accounting and legal requirements, unlinked from your account). Your former user ID is retired and kept so nobody can impersonate you.
Content you published that others have quoted or shared, and anonymised statistics, may not be fully removable.
Your rights
Under the Hong Kong Personal Data (Privacy) Ordinance you have the right to access and correct your personal data. Make a request through Data requests or by email; we will act after verifying the account and may charge a reasonable fee as the law allows.
Security
We take reasonable technical and organisational measures to protect your data, including encrypted transmission, access controls and access checks on private attachments. No online transmission or storage can be guaranteed completely secure.
Children
The Platform is not intended for children under 13 and we do not knowingly collect their personal data. If you believe we have, contact us and we will delete it.
Updates and contact
We may update this policy from time to time and will announce material updates on the Platform.
This page explains how Homore (homore.app) currently handles data. To view, export, correct or close an account, use Data requests in account settings. Signing out only ends this device session; it does not delete the account or complete a data request. Operator: Homore. For privacy questions or data requests, email homore.hk@gmail.com; we verify the account before acting.
Social identity and avatars
Each resident has two avatars: the company-facing avatar is used for quotes, appointments and company chats, where companies see your name and this avatar; the social avatar is used in the community, messages, estate groups and your social profile. Keeping them apart protects you from being identified through your avatar or name when you ask questions in the community.
You can choose "Anonymous" on your social profile: other users only see a fixed alias and a character avatar, not your name, user ID or employer, and cannot find you in search or newly follow you; existing followers stay but only see the alias. Anonymity does not affect company chats, where companies still see your company-facing identity. Your social profile shows the date you joined Homore.