Products
Residential · for homeowners Commercial · for businesses & nonprofits Partners · for pros & agents
Add-ons
Guardian · protection, coming this fall Pro · home concierge
Explore
Features Pricing
Resources
Guides Support Getting started Data & privacy About Sign in Start free →

Legal

Privacy Policy

Effective Date: July 16, 2026

This Privacy Policy describes how Eave ("Eave," "we," "us," or "our") collects, uses, stores, and discloses your personal information when you use our home management application, website, and related services (collectively, the "Services"). By using the Services, you agree to the practices described in this policy.

1. Information We Collect

1.1 Information You Provide Directly

  • Account information: name, email address, and authentication credentials (including Google OAuth tokens)
  • Property information: home address, property details, square footage, year built, and related attributes you enter manually
  • Home projects: descriptions, photos, status updates, notes, and contractor assignments
  • Contractor directory: names, contact information, and notes about service providers in your personal network
  • Maintenance records: task completions, dates, and associated notes
  • Voice input: audio captured via the voice capture feature, processed locally by your browser and converted to text before transmission to our servers

1.2 Information Collected Automatically

  • Usage data: pages visited, features used, actions taken, and timestamps
  • Device information: browser type, operating system, IP address, and device identifiers
  • Log data: server logs, error reports, and performance metrics
  • Cookies and similar tracking technologies: session cookies, authentication tokens, and preference storage (see Section 6)

1.3 Information from Third Parties

  • Google OAuth: If you sign in with Google, we receive your name, email address, and profile photo as permitted by your Google account settings
  • Property data services: We may enrich your property profile with publicly available records from third-party data providers (such as ATTOM Data Solutions), including assessor records, ownership history, and structural data
  • Weather and environmental data: We retrieve weather forecasts and environmental risk data (including FEMA flood zone information) tied to your property address via third-party APIs

1.4 AI-Processed Information

When you use our AI features (including Quick Capture, photo analysis, document extraction, and project recommendations), your input—including text, images, voice transcripts, uploaded documents, and items you confirm from a connected account—is transmitted to Google LLC, which provides the underlying AI model (Google Gemini). This content is processed under our commercial API agreement with Google and is not used by Google to train its models under the API terms on which we operate. Please review Google's privacy policy at policies.google.com/privacy. We do not use your data to train AI models without your explicit consent.

Facts that Eave derives using AI are labeled with a confidence level. Anything uncertain is flagged for your review rather than saved silently. AI output is a recommendation and is not professional advice.

1.5 Connected Accounts and Sources

When you connect an account (such as Gmail or SmartThings), Eave accesses it only to find home-related information: purchase receipts, order confirmations, warranty emails, contractor invoices, and device inventories. We request read-only access wherever the provider allows it. Nothing found in a connected account is saved to your Eave records until you review and confirm it. You can disconnect any source at any time from the Sources page, which stops all further access.

What we do not do: we do not read, store, or analyze personal correspondence. Email content that is not home-related is discarded immediately after classification and is never stored. We do not sell or share connected-account data with anyone.

Eave's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.

For SmartThings, the access token is used once to import your device inventory and is never stored.

1.6 Documents You Upload

You can upload documents—home inspection reports, appliance manuals, warranties, insurance declarations, and HOA rules—so that Eave can extract useful facts such as system ages, filter sizes, coverage amounts, and renewal dates. Extracted details are shown to you for confirmation before they are saved. Uploaded documents and the facts extracted from them are part of your home record, are visible only to you, and are deleted when you delete them or delete your account.

2. How We Use Your Information

We use the information we collect to:

  • Create and manage your account and authenticate your identity
  • Provide, operate, and improve the Services
  • Analyze your property data and generate AI-powered project recommendations, maintenance schedules, and resolution paths
  • Process photos you upload to provide visual analysis and recommendations
  • Send transactional communications (account confirmations, password resets, maintenance reminders)
  • Respond to your support requests and inquiries
  • Monitor for fraud, abuse, and security incidents
  • Comply with applicable law and respond to lawful requests from government authorities
  • Aggregate and anonymize data for internal analytics and product improvement

We do not sell your personal information, and we do not use your personal information to serve you targeted third-party advertising.

Push notifications (including task reminders, reorder suggestions, and recall and weather alerts) are delivered to your device via Expo's push notification service using a device token. You can disable them at any time in your device's system settings or in Eave's notification settings.

3. How We Share Your Information

3.1 Service Providers

We share information with third-party vendors who process data on our behalf under written agreements that restrict their use:

  • Supabase, Inc. — database hosting, authentication, and file storage
  • Vercel Inc. — application and website hosting
  • Google LLC — AI language model processing (Google Gemini), OAuth sign-in, and Calendar integration
  • Stripe, Inc. — payment processing
  • RevenueCat, Inc. — mobile subscription management
  • Expo (650 Industries, Inc.) — push notification delivery
  • Resend — transactional email delivery
  • Loops — product and marketing email delivery
  • PostHog — product analytics
  • Sentry (Functional Software, Inc.) — error monitoring
  • Cloudflare, Inc. — domain and network services

We also query public and ambient data sources on your behalf to enrich your property profile and to generate risk and weather alerts. These queries involve your property address but no account of yours: ATTOM Data Solutions, FEMA, NOAA and the National Weather Service, the US Census geocoder, the EPA, the USDA, the CPSC, and CAL FIRE.

3.2 Business Transfers

If Eave is involved in a merger, acquisition, financing, or sale of assets, your information may be transferred as part of that transaction. We will notify you via email or a prominent notice in the Services before your personal information becomes subject to a different privacy policy.

3.3 Legal Requirements

We may disclose your information if required by law, regulation, legal process, or governmental request; to enforce our Terms of Service; to protect the rights, property, or safety of Eave, our users, or others; or to detect, prevent, or address fraud or security issues.

3.4 With Your Consent

We may share your information with third parties when you have given us your explicit consent to do so.

4. Data Retention

We retain your personal information for as long as your account is active or as needed to provide the Services. You may request deletion of your account and associated data at any time (see Section 7). We may retain certain information for legitimate business purposes such as fraud prevention, legal compliance, or dispute resolution, even after account deletion, as permitted by applicable law. Anonymized or aggregated data may be retained indefinitely.

5. Data Security

We implement administrative, technical, and physical safeguards designed to protect your information, including:

  • Encryption of data in transit using TLS 1.2 or higher
  • Encryption of data at rest within our database
  • Row-level security (RLS) policies ensuring users can access only their own data
  • Access controls limiting employee access to personal information on a need-to-know basis

No method of transmission over the internet or electronic storage is 100% secure. We cannot guarantee absolute security but will notify you as required by law in the event of a data breach affecting your information.

6. Cookies and Tracking Technologies

We use cookies and similar technologies to operate the Services, maintain your session, and remember your preferences. We do not use advertising or cross-site tracking cookies.

  • Session cookies: required for authentication; deleted when you close your browser
  • Persistent cookies: store your preferences and keep you logged in

Most browsers allow you to control cookies through settings. Disabling cookies may impair your ability to use the Services. We do not currently respond to Do Not Track (DNT) signals, but we do not track users across third-party websites.

7. Your Privacy Rights

Depending on your state of residence, you may have the following rights with respect to your personal information. We honor these rights regardless of which state you live in.

7.1 Rights Available to All Users

  • Access: Request a copy of the personal information we hold about you
  • Correction: Request correction of inaccurate or incomplete personal information
  • Deletion: Request deletion of your personal information, subject to certain legal exceptions
  • Portability: Receive your data in a structured, machine-readable format
  • Disconnection: Remove any connected account at any time from the Sources page, which stops all further access to it
  • Opt out of sale or sharing: We do not sell or share your personal information for cross-context behavioral advertising, so this right is automatically honored

How to exercise these rights: you can delete your account and its associated data—including your properties, records, documents, and connected-source tokens—from within the app at any time. To request an export of your data, email support@eavehome.app and we will provide it in a structured, machine-readable format; a self-serve in-app export is on our roadmap. We do not charge for these requests and will respond within the timeframe required by applicable law.

7.2 California Residents (CCPA/CPRA)

California residents have additional rights under the California Consumer Privacy Act, as amended by the California Privacy Rights Act (effective January 1, 2023):

  • The right to know the categories and specific pieces of personal information collected about you
  • The right to know the business or commercial purposes for collecting your information
  • The right to know the categories of third parties with whom we share your information
  • The right to limit use and disclosure of sensitive personal information
  • The right not to be discriminated against for exercising your privacy rights

To submit a California privacy request, contact us at support@eavehome.app. We will verify your identity before processing your request and respond within 45 days (extendable by an additional 45 days with notice). You may designate an authorized agent to make a request on your behalf.

Categories of personal information collected in the preceding 12 months: identifiers, commercial information, internet or electronic network activity, geolocation data, and inferences drawn from this information.

7.3 Virginia Residents (VCDPA)

Virginia residents have rights under the Virginia Consumer Data Protection Act, effective January 1, 2023, including the right to access, correct, delete, and obtain a portable copy of personal data, and the right to opt out of profiling in furtherance of solely automated decisions that produce legal or similarly significant effects. To appeal a decision regarding your rights request, contact support@eavehome.app.

7.4 Colorado Residents (CPA)

Colorado residents have rights under the Colorado Privacy Act, effective July 1, 2023, including the right to access, correct, delete, and obtain a portable copy of personal data, the right to opt out of profiling, and the right to appeal a denial of a rights request.

7.5 Other State Residents

Residents of Connecticut, Texas, Oregon, Montana, Delaware, New Hampshire, New Jersey, Nebraska, Iowa, Indiana, Tennessee, Minnesota, Maryland, and other states with enacted comprehensive privacy laws as of the effective date of this policy have similar rights to access, correct, delete, and opt out of certain processing. We honor these rights for all users. Contact support@eavehome.app to submit a request.

8. Children's Privacy

The Services are not directed to children under the age of 13, and we do not knowingly collect personal information from children under 13. If you believe we have inadvertently collected information from a child under 13, please contact us immediately at support@eavehome.app and we will delete such information promptly.

9. Third-Party Links and Integrations

The Services may contain links to third-party websites or integrate with third-party services (such as Google, mapping services, or YouTube). This Privacy Policy does not apply to those third parties. We encourage you to review the privacy policies of any third-party services you access through Eave.

10. International Data Transfers

Eave is based in the United States. If you access the Services from outside the United States, your information will be transferred to and processed in the United States. By using the Services, you consent to this transfer. We take steps to ensure that any international transfer of personal information is conducted in compliance with applicable law.

11. Changes to This Policy

We may update this Privacy Policy from time to time. When we make material changes, we will notify you by updating the effective date at the top of this policy and, for significant changes, by sending an email to the address associated with your account. Your continued use of the Services after the updated policy takes effect constitutes your acceptance of the changes.

12. Contact Us

If you have questions, concerns, or requests regarding this Privacy Policy or our privacy practices, please contact us:

For California residents: you may also contact us by email to submit a verifiable consumer request, or submit a complaint to the California Privacy Protection Agency at cppa.ca.gov.