Privacy Policy

When you approve an assistant connection, it is linked to your current Pro installation. The assistant can receive your guide allowance and guides generated from the appliance details and questions you provide; it cannot read your on-device home library, photos or task history. Connection records are retained for the periods needed to authorize access and protect the service: access lasts one hour, refresh credentials expire within 30 days, and app-client registrations expire after 90 days. Expired records are purged during registration.

For reliable request replay, CasaCaddy retains the installation identifier, request identifier, a fingerprint of the input, state and returned guide for 30 days. The ordinary guide cache described below still applies. Your assistant's retention rules govern copies it receives. Revoking access prevents later calls but cannot erase those copies. Deleting the installation's server data removes its owned connection and request records.

• Transient appliance photos. The unit photo and any optional model-plate photo are sent over an encrypted connection to our API and an AI model provider to perform recognition. CasaCaddy processes those image bytes in request memory and does not persist the photos in its database or server file storage after the request. The original photo you choose to save remains on your device. We retain cryptographic fingerprints of image and request data so an identical request from the same installation can reuse a result without another AI call. Current fingerprints include both supplied images, any hint, and the anonymous installation identifier. They do not store the raw images or hint text.
• Recognition content. We retain the complete result returned for a scan: category, item name, brand, model, serial number, confidence, specifications, estimated age, and suggested maintenance tasks. The record also includes an image hash for earlier requests or a current request fingerprint, the AI model used, request cost/token counts, timestamp, and anonymous installation ID.
• An anonymous installation identifier and app version.The app stores a server-issued random device ID and credential in Keychain on iOS or encrypted Android Keystore-backed storage on Android. On Android, Google Play services Block Store also keeps a recovery copy while device backup is enabled; it is allowed into Google cloud backup only when end-to-end encryption is available. Our server stores only a hash of the credential. These values connect recognition records, daily usage, generated guides, and purchase status for that installation; they are not linked by CasaCaddy to a name, email address, Apple ID, Google account, or advertising identifier.
• Product interaction and usage.We retain per-day AI recognition and fresh-guide counts for quota enforcement, plus a random per-visit capture-session ID with its attempt count and time so retaking a photo of the same appliance isn't charged twice. A generated guide cache contains the guide, model used, hit count, timestamps, a hashed cache key derived from the request, and the anonymous device that created it. A lifetime free-scan count is kept in Keychain on iOS or encrypted Android Keystore-backed storage on Android for abuse prevention. Android also mirrors that count to Google Play services Block Store, with cloud backup allowed only when end-to-end encryption is available.
• Apple purchase status. Apple processes payments. We use product, transaction and entitlement details to verify Pro access, including purchase, expiration and revocation information. We do not retain the signed transaction itself, payment-card details or Apple ID. Separate pseudonymous entitlement records help prevent refunded purchases from restoring access; those records are retained for the operating life of the purchase service. A minimal record of verified App Store notifications is eligible for removal after 400 days during subsequent verified notification processing, as described under retention below.
• Google Play purchase status.Google processes payments. We check purchase tokens with Google and retain a hash of the token, product, purchase state, entitlement, expiration, verification and revocation details, and links to anonymous installations. We do not store the purchase token itself, payment details, order ID or Google account. Separate records of voided or replaced purchases are retained for the operating life of the purchase service to prevent those purchases restoring access. Short-lived usage counters help protect the service. Purchase links and unshared purchase records are removed when you delete the installation's server data.
• Recall checks.About once a week, for items that have both a brand and a model number, the app sends that brand, model, and the item's random on-device reference to our API, authenticated with the anonymous installation credential. The API looks them up in the U.S. Consumer Product Safety Commission's public recalls database (saferproducts.gov) and returns any matches. The CPSC receives only the brand and model query, from our server rather than your device. CasaCaddy does not store these lookups; matches are saved on your device.
• Share links (optional).Only when you create a read-only share link, the app sends a summary of your home to our API: the home's name and health score, item names, categories, brands, model numbers, install years and warranty dates, and upcoming and recently completed task titles and dates. It never includes your ZIP, serial numbers, costs, notes, photos, or phone numbers. The API encrypts that summary into the link itself and stores nothing; anyone you give the link to can view the summary until it expires 30 days later.
• Your three-digit ZIP prefix. ZIP entry is optional on iOS and currently required during Android setup. It lets the app choose a climate schedule. Only the first three digits are saved, and they stay on your device. CasaCaddy does not upload them to its API or put them in contractor-search links.