This policy says what HomeButlr knows about you and your home, why, who else sees it, where it is kept, for how long, and what you can do about it. There is no separate legal text: this is the policy.
1. Who we are
HomeButlr is made and run by Adibeam Solutions Pvt Ltd, a company incorporated in India. For your personal data we are the data fiduciary under India's Digital Personal Data Protection Act, 2023 and the rules made under it, and the data controller under the EU's General Data Protection Regulation where it applies. This policy is also published under section 43A of the Information Technology Act, 2000 and the Information Technology (Reasonable Security Practices and Procedures and Sensitive Personal Data or Information) Rules, 2011. By using HomeButlr you confirm that you are at least 18 and able to enter a binding contract under the Indian Contract Act, 1872.
Our grievance officer is the Privacy team at Adibeam Solutions Pvt Ltd, at grievance@homebutlr.com.
2. What we collect, why, and who sees it
Each line below names one kind of data, what we use it for, and who other than you can see it.
Account: your name, the phone number or email you sign in with, your photo if you add one, and the age confirmation. Used to run your account and reach you. Seen by the members of your home (name and photo) and by the providers that deliver your sign-in codes and emails.
Your home: its name, type, size, the year you moved in, its PIN code, city and state, and a photo if you add one. Used to describe your home to you and to the butler, and to set the right region and language. Seen by the members of your home.
Your things and papers: what you own, its brand, model, serial number, price and purchase date, the bills, warranty cards and documents you attach, photos, notes, and the service history you keep. A bill can carry your address or a GST number; we treat everything on a document you attach as your personal data. Used to keep your records, work out warranty and service dates, and answer the butler's questions. Seen by the members of your home according to their role.
Reminders and preferences: the reminders you set, who they are assigned to, your lead times, daily reminder time and quiet hours, and the device token that lets us send a push notification. Used to send the reminders you asked for, when you asked for them. Seen by the members of your home; the token goes to Apple's and Google's push services.
The butler: your questions and its answers, kept with your home so the conversation makes sense next time. Sent to our AI provider to be answered, under a contract that forbids using them for anything else.
Voice: when you tap the microphone, your phone's own speech recognition turns your words into text; we receive the text, never the audio. When the butler speaks, its reply text is sent to a speech service and the audio is streamed to your phone and stored nowhere.
Device and usage: the app version, phone model and operating system, crash reports, and pseudonymous events such as "a bill was scanned" or "a reminder was resolved". Used to find faults and see which parts of HomeButlr are used. Never contains the words you typed or the contents of your papers. Seen by our error-reporting and analytics providers under contract.
3. What we do not collect
No government identity numbers. No date of birth: you confirm you are 18 or over and we keep only that. No gender, profession or income. No precise location: your PIN code is the closest we come, and you type it. No access to your contacts, call log or messages. No advertising identifiers and no advertising or tracking software in the app. No card numbers, ever. No photos from your phone except the ones you choose to add.
4. Why we use your data, and on what basis
We use your data to run HomeButlr for you: to keep your records, read the bills you photograph, generate and send reminders, answer your questions, let your family share your home, keep your account secure, and give you support when you ask for it. We also use pseudonymous usage data to fix faults and improve the app, and we may send you news about HomeButlr if you opted in; you can opt out in Settings at any time.
From time to time we may ask how HomeButlr is doing for you — whether the care tasks and reminders are helping, and whether you are happy with them. A question may refer to your own things or reminders so that it is relevant to you; it is shown only to you, inside the app, and answering is always optional. We ask because our aim is a well-maintained home and fewer repair bills, and your answers tell us where we fall short. They are kept with your home, used only to improve HomeButlr and to build the aggregate statistics described below, and deleted with your account. You can ignore any question, and you can turn them off in Settings.
Under India's DPDP Act we process your data with your consent, given when you sign up and confirm each thing you add, and for the purposes you would reasonably expect from a service you asked for. Under the GDPR, where it applies, the bases are performing our contract with you, our legitimate interest in keeping the Service secure and improving it, and your consent for anything optional.
You can withdraw consent at any time: stop using an optional feature, turn it off in Settings, write to grievance@homebutlr.com from your registered email or phone, or delete your account. We act on a withdrawal within 7 business days. Withdrawing does not undo processing that was lawful before it. Withdrawing consent for something the Service cannot run without (your sign-in, your records) ends your account; withdrawing it for something optional (news from us) changes nothing else.
You can opt out of news and tips at any time. You cannot opt out of the messages needed to run your account: sign-in codes, security alerts, notices about these terms or the law, and the reminders you yourself set.
5. Artificial intelligence
When you photograph a bill or a product sticker, the photo is sent to our AI provider, Google (Gemini), to read the details from it. When you scan a room, the video you choose — with its sound, so the butler can hear which room you name — is sent to the same provider to list the things in it; it is deleted from our storage once processed and from the provider within 24 hours. When you ask the butler a question, the question and the record it needs to answer (your thing, its papers, its reminders) are sent to the same provider. These are processed under a data-processing agreement, are not used to train the provider's models, and are not kept by the provider beyond the request. Nothing is saved to your record until you confirm it.
The butler's spoken replies are produced by Google Cloud Text-to-Speech from the reply text alone; no audio of yours is ever sent. Speech recognition runs on your phone's own platform service.
6. Who we share data with
The members of your home, according to the role you give them. The companies that run parts of the Service for us, each under a contract that limits them to our instructions: Supabase (database, sign-in, file storage, hosted in the European Union), Google (Gemini for reading bills and answering the butler; Cloud Text-to-Speech for its voice; the YouTube Data API for finding how-to videos, which receives only a product type and a task, never your data), Expo with Apple and Google (push notifications), MSG91 (one-time codes by SMS and WhatsApp), Resend (email), Sentry (error reports, EU), and PostHog (pseudonymous usage analytics, EU). Product information for our catalogue (a manual's link, a brand's care number) is fetched from public web pages by services that never see your data. The contact and feature-request forms on our website use Cloudflare Turnstile to check that a visitor is a person, not a program; Cloudflare's handling of that check is covered by its Turnstile Privacy Addendum (cloudflare.com/turnstile-privacy-policy). Our website also uses PostHog (EU) to count visits and see which pages help and where visitors come from — with a cookie only if you choose Accept all in its cookie banner, without one if you choose Necessary only, and not at all before you choose. For a visitor who accepts, the country and city are worked out from the connection; the IP address is not stored either way. The website's Cookies page (homebutlr.com/cookies) has the detail.
We may publish aggregate, non-identifying statistics — in the app, on our website and with partners — such as how many homes own a particular brand, or what homes spend on repairs as a share of what their things cost, and how that changes for homes that keep up their care tasks. Every such figure is built from at least 100 homes, is rounded, and cannot be traced back to any home, person or thing; no individual or household data ever leaves the Service.
We disclose personal data when the law requires it, to comply with a court order or a lawful request from an authority, or to protect someone's safety. If HomeButlr is ever acquired or merged, your data moves with it under this same policy and you will be told.
We do not sell personal data. We do not share it with advertisers. There is no advertising in HomeButlr.
7. Where your data lives
Your data is stored on servers in the European Union, encrypted in transit and at rest, and backed up there. We chose the EU because it lets us hold every user to the same high standard. For users in India, this transfer is lawful under section 16 of the DPDP Act, which permits personal data to be processed outside India except in countries the government restricts; the EU is not one. If India later requires data of this kind to be kept in India, we will move it, and if we ever change where your data is kept we will tell you in the app or by email before the change. Some providers named above process data in other countries under contracts that carry the same protections.
8. How long we keep it
Your records: for as long as your account exists. A thing you delete: 7 days in the bin, then gone. A bill photo being read: 24 hours after the reading is done, then deleted from the processing store; the copy you attached to your thing stays with it. A deleted account: a 7-day grace period, then removal, with backup copies expiring within 30 days. Export files: 7 days. Records of who did what (without any content): 12 months. Usage analytics: pseudonymous, 24 months. We keep only what the law obliges us to keep beyond these periods.
9. Security
Every request to our servers is encrypted. Every table is protected by access rules that let a person read only their own homes; those rules are tested automatically before every release. Files are served through short-lived signed links. Our own staff cannot browse your documents from the support console; it shows account facts and never file contents. To help fix a record that is incomplete, support can see the names, brands and kinds of your things, may suggest a brand you accept or ignore, and may leave a short note on a thing; each such look is logged. Support never sees your bills, photos, prices, serial numbers, notes or conversations. Sign-in is by one-time code or by your Google or Apple account, so there is no password of ours to steal. No system is perfectly secure. If a breach of personal data ever affects you, we will tell you at your registered email or phone, with what happened, what data it touched, what it may mean for you and what we have done, and we will notify the Data Protection Board of India under section 8(6) of the DPDP Act and the rules under it, and any EU authority the GDPR requires, within the time the law sets. You are responsible for keeping your phone and your sign-in codes to yourself.
10. Your rights, and how to use them
Access and export: Settings → Export my data gives you everything, in a readable format, by email. Correction: edit anything from the app. Deletion: Settings → Delete my account; see section 8 for timing. If you cannot open the app, write to the grievance officer from your registered email or phone; we confirm it is you with a one-time code and delete on the same timeline. To delete one thing, one document or one reminder rather than everything, delete it in the app; to ask us to remove something you cannot reach yourself, write to the grievance officer. Withdrawing consent: stop using an optional feature, or delete your account. Marketing: opt out in Settings or from the email itself. Nomination: under section 14 of the DPDP Act you may name a person to exercise these rights for you if you die or cannot act; write to the grievance officer to record one. Complaints: write to our grievance officer (section 12) first; we acknowledge within 48 hours and resolve within 30 days, as the DPDP Rules require. If you are not satisfied, you may complain to the Data Protection Board of India under section 18 of the Act, or, if you are in the EU, to your national data-protection authority. We may ask you to confirm your identity before acting on a request, and we will never treat you differently for exercising a right.
11. Children
HomeButlr is for adults. You must be 18 or over to have an account, and we do not knowingly hold data about anyone younger. A home's records may mention a child in the household, for example as a family member you name or as the person a reminder is for; by adding that, you confirm you are the child's parent or lawful guardian and consent on their behalf, as section 9 of the DPDP Act requires. If you believe a child has an account of their own, tell us and we will remove it within 72 hours.
12. Changes, and how to reach us
We may update this policy as HomeButlr grows or the law changes. The date at the top will change, and if the change matters we will tell you in the app or by email before it applies. The current version is always in the app and at homebutlr.com.
Grievance officer: Privacy team at Adibeam Solutions Pvt Ltd, grievance@homebutlr.com. Everyday help: care@homebutlr.com, or WhatsApp from the Help screen in the app (a chat there runs on WhatsApp's own terms).
Questions about either document? Write to care@homebutlr.com.
Adibeam Solutions Pvt Ltd · Registered office: A-145, Sector 46, Noida 201301, Uttar Pradesh, India