Privacy Policy

We collect only what we need to run the marketplace.

• Account details: name, email address, mobile number, password credentials and account type.
• Service details: home or service address, suburb and postcode, service preferences and booking history.
• Verification details for practitioners: driver's licence number and related identity information.
• Payment references: Stripe customer, payment method and payout identifiers — never your full card number.
• Content you create: profile photo, business details, service listings, product listings, reviews and messages.
• Technical data: device and browser information, and error logs used to keep the app working.

We use your information to create and secure your account, match you with practitioners within a service radius, confirm and manage bookings, process payments and payouts, send transactional emails, verify identity, prevent fraud and abuse, investigate incidents and disputes, and improve the product.

Where you register interest in a service that is not live in your area yet, we record your postcode so we can group demand by location and let you know when that service launches near you.

We share the minimum necessary information with service providers that help us operate:

• The practitioner you book with, or the seller you buy from: your name, contact details, service address and booking notes.
• Stripe: payments, embedded checkout, payouts and tax calculation.
• Resend: delivery of transactional and account emails.
• Supabase: secure database, authentication and file storage.
• Google Maps Platform: address autocomplete when you enter your address.
• Regulators, insurers or law enforcement where we are legally required to disclose.

Transactional messages (booking confirmations, receipts, reminders, password resets) are part of the service. Marketing emails are optional and every marketing email includes an unsubscribe link.

Access to personal information is restricted by authentication and database row-level security policies, and identity documents and profile photos are held in private storage that requires a signed, expiring link to view. Card and bank details are held by Stripe, not on Homey's servers.

No online service can promise absolute security. If a data breach likely to cause serious harm occurs, we will notify affected users and the Office of the Australian Information Commissioner as required by law.

We keep account and booking records while your account is open, and afterwards only as long as needed for legal, tax, accounting and dispute-resolution purposes. Verification documents are deleted when your account is deleted, unless we are required to retain them.

You can view and update your details in your profile, request a copy of your personal information, ask us to correct it, or ask us to delete your account. Account deletion is permanent. To make a request or raise a privacy concern, email privacy@homesbyhomey.com.

If you are not satisfied with our response, you can contact the Office of the Australian Information Commissioner at oaic.gov.au.

Homey is not intended for anyone under 18 and we do not knowingly collect information from children. If you believe a minor has created an account, contact us and we will remove it.