Privacy policy

Last updated October 18, 2026

Insatomo is a kitchen and chores app for a group of people who share a home, called a Household. This page says what the app keeps about you and your Household, who else receives any of it, how long it is kept, and how to get it deleted. It is written for the people in a Household, not for engineers. If something here is unclear, write to support@insatomo.app.

The company behind Insatomo is named in the imprint.

The short version

• Insatomo has no advertising, no analytics and no tracking in the app. We do not sell your data and we do not share it for advertising.
• What you put in is shared with your Household and with the services listed below that make the app work.
• Some features send things to outside services only when you use them: a photo you scan, a recipe web address you import, a Google Calendar you connect, a place you search for the weather.
• You can delete your account, and an Owner can delete a Household. A deleted Household can be brought back for 30 days, then it is erased.

Who is in a Household

A Household is the group that shares one Insatomo space: its Grocery Lists and other lists, kitchen inventory, recipes, meal plan, chores, rewards, calendar and pinboard. It has these kinds of members:

• Owners manage the Household. There is always at least one.
• Members have their own account and can do what Owners allow them to.
• Managed Members are people without an account, such as a young child or a babysitter. An Owner creates them. They have no login, no email address and no phone session.
• A paired device (a shared tablet on the kitchen wall or fridge) is a member of the Household too. It signs in with a one-time code an Owner creates, not with a person’s login.

Everything in a Household is visible to its members, with these exceptions:

• A list can be shared with the whole Household, with named people only, or kept private to the person who made it. Named and private lists never show on the paired device.
• A member’s email address is visible to the Owners of the Household and to no other member.
• A member’s Google Calendar is private by default; its owner chooses to share it as busy blocks only or in full, and can change that at any time.
• Owners see how many times the AI features were used (a count, not content or cost).
• A paired device shows what the Owner allows it to show and do. Some actions on it can be protected with a PIN. The PIN is a guard on the screen, not a security barrier.

Because the paired device is used by everyone in the Household, anyone standing at it, including a child or a guest, can see what it displays, and whatever the Owner has allowed it to do can be done by whoever is holding it. Keep that in mind when you decide what to show on it.

What we keep, and why

We do not collect your contacts, your precise location in the background, your advertising ID, or a profile of how you use the app.

Who receives what

Insatomo is run on a small number of outside services. Each of these receives data only as described; none is given your data to advertise or to resell.

We use no analytics service, no advertising service and no crash-reporting service.

The AI service

Some features use Anthropic’s Claude to read things and answer. It receives:

• A photo of groceries or of a receipt you scan, or a list you typed to be read.
• Photos of a cookbook or recipe page you scan, or the visible text of a web page you import when that page has no recipe data we can read directly.
• A recipe’s ingredients when you ask for a nutrition estimate or for a substitute for an ingredient (and the recipe’s title and the other ingredient names).
• A food’s name when it works out how long the food keeps, your fridge’s ingredient names for a recipe idea, and the search words you type when you search the web for recipes.

It does not receive your name, email, Household name or other members’ details. A photo can still show what is in it, so do not scan a receipt or page that carries information you do not want read, such as a payment card number. Anthropic processes this for Insatomo to give an answer and handles it under its Commercial Terms. Insatomo does not use your data to train a model of its own. THE AI PROVIDER CHANGES BEFORE LAUNCH (#2713): NAME THE NEW ONE, ITS TERMS, WHERE IT PROCESSES AND HOW LONG IT KEEPS REQUESTS, HERE AND IN THE TABLE

A photo you scan is held in your Household’s private storage until you confirm or discard the scan. A scan nobody finishes is removed from the app after 24 hours, but its photo can remain in storage (see “How long we keep it”).

Google Calendar

You connect your own Google account from your own settings; nobody else can connect it for you. Insatomo asks Google only for read-only access to your calendars and your email address. It stores an encrypted sign-in grant on its servers, never on your phone. You choose, for each calendar, whether other members see it at all, as busy blocks, or in full. Disconnecting in the app revokes the grant at Google and deletes the copied events. You can also remove Insatomo in your Google account’s security settings.

Insatomo’s use and transfer of information received from Google APIs follows the Google API Services User Data Policy, including its Limited Use requirements.

Voice

Voice commands exist only on the paired device. They use the device’s own speech recognizer, and the audio stays on the device. If a device has none, an Owner can switch on Google’s recognizer for that device; the dialog then says Recognized by Google, and Google may receive the audio even when the device prefers to work offline. It is off until somebody turns it on, applies to that device only, and no recording is kept by Insatomo.

Notifications

Insatomo sends a notification to an Owner’s phone when a paired device has been quiet for more than a few hours, to a member when they become or stop being an Owner, and when a Reward is redeemed. A notification holds the paired device’s name, the Household’s name, or a member’s name and the Reward’s name, and goes through Expo and, on Android, Google as described above. Timers and reminders you set are scheduled on your own device.

Children

Insatomo is made for the whole Household, including children. It is not directed to children under 13 as account holders.

• A child under 13 needs no account. An Owner adds them as a Managed Member: a name, a color and a picture symbol. A Managed Member has no login, no email address, no password, no push token and no phone session. The app asks for no photograph, birthday or location of them.
• A child uses Insatomo through the paired device, which everyone in the Household shares. Their completed chores, points and rewards are recorded under their Managed Member name, visible to the Household.
• The Owner who creates a Managed Member is responsible for deciding to do so. An Owner can archive a Managed Member (they disappear from pickers and boards while their history stays) or delete the Household.
• Accounts start at 13. Someone aged 13 to 17 can have an account on their own phone, but only by joining a Household one of its Owners invited them to; they cannot create a Household of their own, and a parent or guardian agrees to the terms for them. As a Member they see and do what the Owners allow. The app asks for no birthday: sign-up asks only whether you are 18 or older, and if not, whether you are 13 or older. WHEN #2717 SHIPS LAWYER (#2221): WHETHER A MEMBER UNDER 16 IN THE EU NEEDS A PARENT’S CONSENT TO CONNECT GOOGLE CALENDAR OR USE LOCATION
• If you believe a child under 13 has an account or that we hold data about a child you did not create, write to support@insatomo.app and we will remove it.

How long we keep it

• While your Household exists, we keep its content, including history such as completed chores, points, reward redemptions and past calendar events. There is no automatic expiry for history.
• A Household an Owner deletes is hidden at once for everyone, its paired devices are signed out and its open invite and pairing codes are withdrawn. For 30 days any of its Owners can restore it with all its members (not its devices; they are paired again). After 30 days a daily job erases the Household and everything saved in it from the database. Deleting your own account is never held back by that window: if every Owner of a deleted Household deletes their account within the 30 days, nobody can restore it, and it is erased when the 30 days end.
• Photos in file storage (recipe photos, scanned recipe pages, scan photos, pinboard pictures) are deleted when the Household is erased, and a scan photo nobody finished is deleted with its scan after 24 hours. WHEN #2716 SHIPS When you delete a single item, the app removes its picture too; if that removal fails, the file can remain in storage although nobody in the app can reach it. Pinboard pictures, scanned pages and scan photos are private; recipe photos can be opened by anyone who has their exact link.
• Backups: the database is backed up daily and each backup is kept for 7 days, so something you delete can remain in a backup for up to 7 days after it is gone from the app. TRUE ONCE THE PROJECT IS ON SUPABASE PRO (#2712)
• Push tokens are kept until your account is deleted.
• Settings on your device are removed when you sign out, un-pair or uninstall.
• Voice recordings and AI requests are not kept by Insatomo. The AI service and Google handle what they receive under their own terms.

Your choices and how to delete

• Delete your account in the app: Delete my account in your settings WHEN #2213 SHIPS. Your login is removed immediately, with no waiting period. The history you left in a Household (tasks you completed, items you added) stays, shown under “a former member”, so the Household’s records stay whole. Your email address, your sign-in, your push token and your lists that only you could see are removed. If you are the only Owner of a Household, the app first shows you both ways out: hand the Household on to another Owner, or delete the Household. Deleting your account also disconnects Google Calendar: Insatomo’s access at Google is revoked and the copied events are deleted. If Google cannot be reached at that moment, the app tells you to remove Insatomo in your Google account’s settings.
• Delete from the web, without the app: write to privacy@insatomo.app from the address you signed up with, as the request page explains. We handle requests by hand and finish within 30 days.
• Delete a Household: an Owner chooses Delete this Household in Household settings and types its name. See “How long we keep it”.
• Leave a Household or be removed from one: you keep your account; your history there stays under “a former member”.
• Delete a single thing (a recipe, a list, a flyer, a calendar connection) in the app.
• See or correct your data: most of it is visible in the app and editable there. For a copy of your data or any other request, see “Your rights”.
• Revoke permissions (camera, photos, location, microphone, notifications) in your phone’s settings at any time; the app asks only when you use the feature. Location is read once when you tap to use your current place as the Household’s weather location, and is never tracked.

Your rights

The company named in the imprint is responsible for your data (in the GDPR’s words, the controller). Wherever you live, you can ask us to:

• send you a copy of your data, in a common machine-readable format;
• correct it;
• delete it;
• stop a use of it you object to, or withdraw a consent you gave.

Write to privacy@insatomo.app, from the address you signed up with if you can. We may ask you to confirm that the account is yours. We answer within one month, and tell you if we need longer, as the law allows. Using these rights costs nothing and changes nothing about how the app treats you.

In the EU, the EEA, the UK and Switzerland you can also complain to a data protection authority: the one where you live (EU and EEA), the ICO in the UK, or the FDPIC in Switzerland. LAWYER (#2221): WHETHER AN EU AND A UK REPRESENTATIVE (GDPR ARTICLE 27) MUST BE NAMED HERE

In US states with a privacy law (California, Colorado, Connecticut, Texas, Virginia and others), this page is the notice of what we collect, why, and who receives it. We do not sell personal data, share it for targeted advertising, or use it for profiling, so there is nothing to opt out of; for the same reason the app does not respond to Do Not Track or Global Privacy Control signals, as it tracks nothing they would stop. You can make a request through an authorized agent; we ask for proof that you authorized them. If we decline a request, you can appeal by replying to our answer, and if we decline the appeal, you can contact your state’s attorney general.

Why we may use your data

For people in the EU, the EEA, the UK and Switzerland, these are the legal bases:

Where your data is processed

Insatomo’s database and files are in the United States (Oregon), and most of the services in “Who receives what” are in the United States. If you are in the EU, the EEA, the UK or Switzerland, your data is therefore transferred to the United States. These transfers rely on the EU Standard Contractual Clauses (and their UK and Swiss equivalents) in our agreements with those services, or on the service’s certification under the EU-U.S. Data Privacy Framework. LAWYER (#2221): CONFIRM EACH RECIPIENT’S TRANSFER MECHANISM; SUPABASE’S AGREEMENT IS SIGNED IN #2712

This website

insatomo.app sets no cookies and runs no analytics or third-party scripts. Cloudflare hosts it and receives the technical details of each visit (your IP address, the page, the time and what your browser reports about itself) to deliver the page and protect the site from attacks. We keep no logs of visits ourselves.

Security

Data travels encrypted. Each Household’s data is separated in the database by rules that let only its members read it. Stored Google sign-in grants are encrypted. We keep the keys for these services out of the app. No system is perfectly secure, and a shared device is only as private as the room it sits in.

Changes to this policy

When this page changes in a way that matters, the app will tell Account Holders. The date at the top shows the latest version.

Contact

support@insatomo.app and the address in the imprint.