Honeydew Privacy Policy

Effective date: November 11, 2025

Honeydew ("Honeydew", "we", "us", or "our") is committed to protecting your privacy. This Privacy Policy describes how we collect, use, disclose, and safeguard your information when you use Honeydew. If you have questions, contact us at pete@gethoneydew.app.

Scope

This Policy applies to information collected through the Honeydew application and related websites located at gethoneydew.app. It does not apply to third-party websites or services that we do not control.

Plain-Language AI Notice

Honeydew uses OpenAI’s API to interpret your requests, orchestrate tools, and draft responses. While the assistant is designed to provide accurate, family-ready recommendations, AI outputs may be imperfect or require review. Our team and automated filters continuously moderate prompts and responses to keep conversations safe and aligned with our community standards.

Information We Collect

Account Information: Email, family name, and profile details you provide when creating or updating an account.
Family/Workspace Data: Household relationships, roles, lists, items, routines, preferences, reminders, files, and other content you create inside Honeydew.
AI Interaction Data: Prompts, chat transcripts, voice commands, generated responses, and attachments you share with Honeydew’s AI assistant.
Usage & Diagnostics: In-app interactions, device type, app version, logs, and crash reports used to maintain reliability, security, and performance.
Voice & Media Input (optional): Audio captured for voice commands, transcripts produced by Whisper AI, and media you choose to upload (e.g., family photos or receipts).
Calendar Data (optional): If you connect Google Calendar or Apple Calendar, we access read-only event data necessary to display schedules in Honeydew and associate items. This includes event metadata (IDs, etags, titles, start/end times, location, attendees if present) and sync tokens.
Contacts (optional): Names and email addresses you choose to share so Honeydew can coordinate events or send invitations.
Analytics Logs: Aggregated metrics, page views, and feature usage captured through Google Analytics 4 (GA4) to understand product performance.
Support, Feedback & Deletion Requests: Information you provide when contacting support, submitting feedback, or using the in-app Delete My Data flow. We record deletion requests to document completion.

How We Process AI Data

Honeydew uses trusted infrastructure and third-party processors to power AI features. Prompts, transcripts, and related metadata are sent securely to OpenAI (text, image, and tool orchestration) and AWS (hosting, storage, and real-time sync). Voice inputs are transcribed using Whisper AI.

AI responses are generated on external servers; no personal data is used to train foundation models.
Conversation snippets are cached for up to 30 days to provide context, after which they are automatically deleted unless you pin them.
Moderation filters screen user inputs and AI outputs for unsafe or disallowed content before responses are delivered.
We log minimal metadata (timestamp, request type, latency) to monitor quality and abuse.

Why We Process Data & Legal Bases

Data Category	Purpose	Legal Basis
Account Information	Create and secure your Honeydew account, synchronize data across devices, and send critical service communications.	Contractual necessity; legitimate interests in security.
Family/Workspace Data	Display shared lists, tasks, and family relationships; power shared household planning features.	Contractual necessity; legitimate interests in collaboration features.
AI Interaction Data	Generate context-aware AI suggestions, automations, and summaries tailored to your family.	Consent when you start an AI session; contractual necessity to deliver requested AI assistance.
Calendar & Contacts Data	Sync events, avoid double-booking, and share plans with the people you specify.	Consent (opt-in integrations); contractual necessity for coordination features.
Voice & Media Input	Transcribe reminders, parse receipts, and attach media to lists or plans.	Consent provided when you initiate uploads or recordings.
Analytics Logs	Measure performance, troubleshoot issues, and guide product improvements without building individual profiles.	Legitimate interests in running and improving Honeydew; consent where required by law.
Support & Deletion Requests	Respond to inquiries, fulfill deletion requests, and document compliance.	Legitimate interests; legal obligations.

How We Use Information

Provide, operate, and improve Honeydew features and services.
Generate AI-assisted summaries, plans, and recommendations based on the context you supply.
Authenticate users, secure the service, prevent abuse, and detect, prevent, or address technical issues.
Display and organize your content (e.g., lists, items, and calendar associations).
Communicate with you about updates, security notices, support responses, and product education.
Comply with legal obligations and enforce our agreements.

Google API Services User Data Policy (Limited Use)

Honeydew’s use of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.

Scopes requested: https://www.googleapis.com/auth/calendar.readonly and https://www.googleapis.com/auth/calendar.events.readonly (read-only).
We use Google Calendar data solely to provide user-facing features within Honeydew (displaying events, matching chores, and building schedules).
We do not sell Google user data and do not use it for advertising.
Access tokens are stored securely and used only to provide the requested functionality.
You can disconnect Google Calendar at any time in Settings, which revokes tokens and stops synchronization.

Third-Party Processors & Integrations

We work with trusted providers to deliver Honeydew. Each partner only receives the data needed to perform their services and is required to safeguard it:

OpenAI (policy): Processes prompts and generates AI responses.
Amazon Web Services (AWS) (policy): Hosts our infrastructure and encrypted databases.
Firebase Authentication (policy): Manages secure account login and session tokens.
Google Calendar API (policy) & Apple Calendar/iCloud (policy): Sync optional calendars you connect.
Google Workspace Email (policy): Sends support and deletion confirmation emails.
Google Analytics 4 (policy): Provides aggregated product analytics.

We do not allow third parties to use your personal data for advertising or to train their own models.

Device Permissions

Honeydew requests access to specific device features only when you choose to use them:

Microphone: Capture voice commands so Honeydew can transcribe reminders and tasks.
Photo Library: Attach family photos or receipts to shared lists.
Contacts: Share events and reminders with family members you select.
Calendars: Sync with your calendars to create and manage family schedules.

Permission prompts appear in context after you initiate an action. You can disable access at any time in iOS settings.

Legal Bases (EEA/UK)

Contract: To provide the service you request.
Legitimate Interests: To secure, maintain, and improve Honeydew.
Consent: For optional integrations like Google Calendar.
Legal Obligation: To comply with applicable laws.

How We Share Information

Service Providers: We may share information with vendors who process data on our behalf, under confidentiality obligations.
Legal: We may disclose information to comply with law, regulation, legal process, or governmental request.
Business Transfers: In connection with a merger, acquisition, or asset sale, subject to standard safeguards.
We do not sell your personal information.

Data Retention

We retain personal information for as long as necessary to provide the service and for legitimate and essential business purposes, such as maintaining security logs and complying with legal obligations.

AI interaction history and transcripts are stored for up to 30 days by default, unless you pin or export a conversation.
Lists, items, and events persist until you delete them or remove your account; household archives are purged within 30 days after deletion.
Calendar sync metadata and mappings are deleted when you disconnect Google or Apple Calendar or delete your account, subject to encrypted backup retention up to 35 days.
Uploaded media is deleted immediately when you remove it in-app and fully purged from backups within 35 days.
Analytics logs are aggregated and retained for 14 months to observe seasonal trends.
Support tickets and deletion requests are retained for 12 months to demonstrate compliance.

When you submit a deletion request, we remove active data within 7 days and roll encrypted backups off our systems within 35 days.

Deletion Workflow

Honeydew offers self-serve deletion so you stay in control of your data:

Open Settings → Privacy → Delete My Data in the Honeydew app to start the request.
Confirm via email: We send a verification email to ensure the request is legitimate. Follow the link to finalize the deletion.
Removal window: We delete active records within 7 days and confirm completion via email. Encrypted backups roll off within 35 days.
Follow-up: If you do not receive confirmation, reply to the email or contact pete@gethoneydew.app. We log deletion requests to verify resolution.

Security

We use industry-standard administrative, technical, and physical safeguards designed to protect personal information. This includes encrypted transport (TLS 1.2+), encryption at rest for stored data, and strict authentication controls via Firebase Authentication. Access to production systems is limited to trained personnel, and sensitive content is never used to train external models. No method of transmission or storage is completely secure, and we cannot guarantee absolute security.

Your Rights and Choices

Access/Update: Update your account information directly in the Honeydew app.
Disconnect Integrations: Revoke Google Calendar, Contacts, or other integrations in Settings.
Delete Data: Use the in-app Delete My Data option (Settings → Privacy) to remove your account, AI history, and associated records. You will receive a confirmation email; if you do not hear back within 7 days, contact pete@gethoneydew.app or submit the support form.
Appeal: If you believe a request was handled incorrectly, reply to the confirmation email to request a review.
California Residents: You may exercise CCPA/CPRA rights to know, access, delete, or correct personal information, and to opt out of certain disclosures by contacting us.
EEA/UK Residents: You may have GDPR rights, including access, correction, deletion, portability, objection, and restriction. You may lodge a complaint with your local data protection authority.

Data Protection Officer: Pete Ghiorse (pete@gethoneydew.app).

AI Safety & Moderation

Honeydew applies automated and human-reviewed safeguards to prevent unsafe or abusive use of AI features. Inputs and outputs may be analyzed for moderation purposes consistent with our Terms of Service, and our team may review flagged content to improve safety. If you encounter harmful content, please report it via in-app feedback or email.

International Transfers

We may process information in the United States and other countries where we or our providers operate. Where required, we use appropriate safeguards for cross-border transfers.

Children & Shared Families

Honeydew is designed for parents, guardians, and caregivers coordinating household responsibilities. Guardians control which family members are invited, what data is shared, and may create child profiles to view schedules without granting direct account access. We do not knowingly collect personal data from children under 13 without verifiable parental consent.

Changes to This Policy

We may update this Policy from time to time. If we make material changes, we will provide notice as appropriate. The “Effective date” above reflects the latest version.

Contact

Honeydew Support
pete@gethoneydew.app