Privacy Policy

Introduction

ASB Media Investment Group, a company registered in England and Wales under company number 14376894 (trading as "OneHaus", "we", "us", or "our"), operates the OneHaus mobile application and website at onehaus.app (together, the "Service"). OneHaus is an AI-powered household management application available on iOS and the web.

This Privacy Policy explains what personal data we collect, how we use and share it, the choices you have, and the rights you may exercise in relation to that data. It applies to all users of the Service regardless of location, though certain sections address rights specific to the UK, European Economic Area (EEA), and California.

This policy is effective as of 23 February 2026. By accessing or using the Service, you acknowledge that you have read and understood this Privacy Policy.

Information We Collect

Personal Information

When you create an account and use OneHaus, we collect information you provide directly, including:

Account details: your name, email address, and password (or authentication credentials if you sign in via a third-party provider such as Apple or Google).
Profile information: any profile photo, display name, or preferences you set during onboarding or later in settings.
Household details: the name of your household, household members you invite, and roles or permissions you assign to those members.
Content you create: tasks, calendar events, shopping list items, recurring schedules, notes, and any other content you add to the Service.

Usage Data

We automatically collect information about how you interact with the Service, including:

App interactions: features you use, screens you visit, buttons you tap, and the time and frequency of your activity.
AI chat queries and responses: the messages you send to our AI assistant and the responses generated, which we process to deliver and improve the Service.
Task, calendar, and shopping activity: creation, completion, editing, and deletion of items, along with timestamps.
Session data: session duration, crash logs, and performance metrics.

Device Information

When you access the Service from a mobile device or browser, we may collect:

Device type, manufacturer, and model.
Operating system and version.
App version and build number.
Device identifiers (such as advertising identifiers or vendor-specific IDs).
Push notification tokens (APNs token on iOS, FCM token on Android).
IP address and approximate location derived from it.
Browser type and version when you visit our website.

How We Use Your Information

We use the information we collect for the following purposes:

Service delivery: to create and maintain your account, operate your household, and provide the core features of OneHaus including tasks, calendar, shopping lists, and recurring schedules.
AI processing: to process your natural-language queries and generate AI-assisted responses, suggestions, and automations within the app.
Calendar and contact sync: to synchronise your OneHaus calendar events with third-party calendar providers (such as Google Calendar or Apple Calendar) and optionally sync contacts, when you enable these features.
Push notifications: to send you reminders, task assignments, household updates, and other notifications you have opted in to receive.
Billing and subscriptions: to process payments, manage your subscription status, and communicate about billing matters through the Apple App Store or Google Play.
Support: to respond to your enquiries, troubleshoot issues, and provide customer service.
Improvement and analytics: to understand usage patterns, diagnose technical problems, and improve the Service's features, performance, and reliability.
Legal compliance: to comply with applicable laws, regulations, legal processes, or enforceable governmental requests.

AI and Chat Data

OneHaus uses artificial intelligence to power several features. To deliver these features, the relevant data is processed by Amazon Web Services (AWS), through its Amazon Bedrock AI service, within the European Union (EU). We name this provider so you know exactly who processes your data before you choose to use these features.

Consent is required before any of this data is shared. We ask for your in-app consent before sending any data to this AI provider, and you can withdraw that consent at any time in the app's settings. If you withdraw consent, the AI-powered features described below will no longer share your data for processing.

The data shared depends on which feature you use:

AI chat assistant: when you interact with the assistant, the messages you type and relevant household context are sent for processing so the assistant can understand your request and generate a helpful response.
Share into OneHaus: when you paste or share text into OneHaus, that text is sent for processing so the AI can extract tasks, items, events, and contacts from it.
Weekly household review: to generate personalised recommendations, your household details (for example, your vehicles, appliances, documents, and contacts, along with their labels) are sent for processing.

How your data is handled: AWS acts as our data processor and service provider. It processes the data solely to generate a response on OneHaus's behalf and is contractually prohibited from using your data for its own purposes. This processing takes place in the European Union (EU).

We do not use your chat data, household content, or any personal data to train AI models, and our AI provider is contractually prohibited from using your data to train its models. Your data is used only to provide the Service to you.

Chat messages and AI responses are retained in your account for as long as your account is active so that you can review your conversation history. You may delete individual messages or your entire chat history at any time through the app. When you delete your account, all chat data is permanently removed in accordance with our data retention practices described below.

AI-generated responses are provided for informational and convenience purposes only. They do not constitute professional, legal, medical, financial, or other specialist advice. You should independently verify any information that is important to you.

Third-Party Services

We rely on a number of third-party services to operate OneHaus. These services may receive or process your personal data as described below:

Apple App Store and Google Play: handle app distribution, in-app purchases, and subscription billing. Their respective privacy policies govern the data they collect during purchase transactions.
Payment processors: payment information (such as credit card details) is handled entirely by Apple or Google through their in-app purchase systems. We do not directly collect or store your payment card details.
Calendar sync providers: if you enable calendar sync, we connect to Google Calendar and/or Apple Calendar APIs to read and write calendar events on your behalf. We access only the calendar data necessary to synchronise with OneHaus.
Contact sync: if you enable contact sync, we access your device contacts solely to let you assign tasks or events to household members more easily. Contact data is not stored on our servers beyond what is necessary for the sync feature.
Push notification services: we use Apple Push Notification service (APNs) and Firebase Cloud Messaging (FCM) to deliver push notifications to your device.
Analytics: we use analytics services to understand how the Service is used, measure performance, and identify areas for improvement. Analytics data is collected in aggregate or pseudonymised form where possible.
Amazon Web Services (AWS) and Amazon Bedrock: we use AWS, through its Amazon Bedrock AI service, to power our AI features, including the chat assistant, the share-into-OneHaus feature, and the weekly household review. This processing runs within the European Union (EU). AWS acts as a data processor on our behalf under contractual terms that restrict its use of your data, and your data is not used to train AI models. See the AI and Chat Data section above for details.

Each third-party service has its own privacy policy. We encourage you to review those policies for details about how they handle your data.

Cookies and Tracking

Website: our website at onehaus.app uses cookies and similar technologies for the following purposes:

Essential cookies: required for the website to function correctly, such as session management and security.
Analytics cookies: help us understand how visitors interact with the website, which pages are most popular, and how we can improve the experience. These cookies collect information in an aggregated form.
Preference cookies: remember your settings and preferences, such as your chosen theme (light or dark mode).

You can manage your cookie preferences through your browser settings. Most browsers allow you to block or delete cookies. However, blocking essential cookies may affect the functionality of the website.

Mobile app: the OneHaus mobile app does not use cookies. It uses local storage on your device to store preferences, cached data, and authentication tokens. This data remains on your device and is not shared with third parties unless described elsewhere in this policy.

We do not sell your personal information. We share your data only in the following circumstances:

Household members: when you join or create a household in OneHaus, certain data is shared with other members of that household. This includes tasks, calendar events, shopping lists, and other content you create within the shared household. Your profile name and photo are visible to other household members.
Service providers: we share data with third-party service providers who help us operate the Service, such as cloud hosting providers, AI processing providers, analytics services, and push notification services. These providers are contractually obligated to use your data only as necessary to provide services to us and in accordance with this policy.
Legal requirements: we may disclose your data if required to do so by law or in response to valid legal processes, such as a court order, subpoena, or regulatory request. We may also disclose data when we believe in good faith that disclosure is necessary to protect our rights, your safety, or the safety of others.
Business transfers: if ASB Media Investment Group is involved in a merger, acquisition, reorganisation, or sale of assets, your personal data may be transferred as part of that transaction. We will notify you via the app or email before your data becomes subject to a different privacy policy.

Data Retention

We retain your personal data for as long as your account is active or as needed to provide the Service to you. Specific retention periods include:

Account data: retained for the lifetime of your account. When you delete your account, we delete or anonymise your personal data within 30 days, except where we are required by law to retain it for longer.
Usage and analytics data: retained in aggregated or pseudonymised form for up to 24 months for product improvement purposes.
Chat and AI data: retained for the lifetime of your account. You may delete individual messages or your full chat history at any time.
Backup and disaster recovery: copies of data in backup systems may persist for up to 90 days after deletion before being fully purged.

Shared household data: when you delete your account, content you created within a shared household (such as tasks or shopping list items) may remain visible to other household members. This data is disassociated from your deleted account. If you wish to remove specific shared content before deleting your account, you can do so through the app.

Data Security

We take the security of your personal data seriously and implement appropriate technical and organisational measures to protect it, including:

Encryption in transit: all data transmitted between your device and our servers is encrypted using TLS (Transport Layer Security).
Encryption at rest: personal data stored on our servers is encrypted at rest using industry-standard encryption algorithms.
Access controls: access to personal data is restricted to authorised personnel who need it to operate, develop, or improve the Service. We use role-based access controls and audit logging.
Infrastructure security: our servers are hosted with reputable cloud providers that maintain comprehensive security certifications and compliance programmes.

Despite these measures, no method of electronic transmission or storage is completely secure. We cannot guarantee the absolute security of your data. If we become aware of a security breach that affects your personal data, we will notify you and any applicable regulatory authority in accordance with applicable law.

International Data Transfers

ASB Media Investment Group is based in the United Kingdom. Your personal data may be processed in the UK, the European Economic Area, and other countries where our service providers operate, including the United States.

When we transfer personal data outside the UK or EEA, we ensure that appropriate safeguards are in place, including:

Adequacy decisions: transferring data to countries that the UK government or European Commission has determined provide an adequate level of data protection.
Standard contractual clauses: using European-Commission-approved or UK-approved standard contractual clauses with our service providers to ensure that your data is protected to the same standard as within the UK and EEA.
Supplementary measures: where necessary, we implement additional technical or organisational measures to ensure the effectiveness of the transfer safeguards.

If you are located in the United Kingdom or European Economic Area, you have the following rights under the UK General Data Protection Regulation (UK GDPR) and the EU General Data Protection Regulation (EU GDPR):

Right of access: you may request a copy of the personal data we hold about you.
Right to rectification: you may request that we correct inaccurate or incomplete personal data.
Right to erasure: you may request that we delete your personal data, subject to certain legal exceptions.
Right to restriction: you may request that we restrict the processing of your personal data in certain circumstances.
Right to data portability: you may request a copy of your personal data in a structured, commonly used, and machine-readable format, and have it transmitted to another controller where technically feasible.
Right to object: you may object to the processing of your personal data where we rely on legitimate interest as a legal basis.
Rights related to automated decision-making: you have the right not to be subject to a decision based solely on automated processing, including profiling, which produces legal effects or similarly significantly affects you. OneHaus does not currently make decisions of this nature.

Legal Bases for Processing

We process your personal data under the following legal bases:

Contract: processing is necessary to perform our contract with you (for example, providing the Service, managing your account, and delivering features you use).
Consent: where you have given us specific consent, such as for optional features like calendar sync, contact sync, or push notifications. You may withdraw consent at any time.
Legitimate interest: processing is necessary for our legitimate interests (such as improving the Service, ensuring security, and conducting analytics), provided those interests are not overridden by your rights and freedoms.
Legal obligation: processing is necessary to comply with a legal obligation to which we are subject.

How to Exercise Your Rights

To exercise any of these rights, please contact us at support@onehaus.app. We will respond to your request within one month. In certain circumstances, we may extend this period by up to two additional months, in which case we will inform you of the extension and the reasons for it.

You also have the right to lodge a complaint with a supervisory authority. In the UK, this is the Information Commissioner's Office (ICO), which can be contacted at ico.org.uk.

Your Rights Under CCPA

If you are a California resident, you have certain rights under the California Consumer Privacy Act (CCPA) and the California Privacy Rights Act (CPRA):

Right to know: you may request that we disclose the categories and specific pieces of personal information we have collected about you, the categories of sources from which it was collected, the business or commercial purpose for collecting it, and the categories of third parties with whom we share it.
Right to delete: you may request that we delete the personal information we have collected about you, subject to certain exceptions.
Right to opt-out of sale: we do not sell your personal information to third parties, and we do not share your personal information for cross-context behavioural advertising purposes. As such, there is no need to opt out, but we honour this right in principle.
Right to non-discrimination: we will not discriminate against you for exercising any of your CCPA rights. You will not receive different pricing, a different quality of service, or be denied access to the Service for making a request.

To exercise your rights as a California resident, please contact us at support@onehaus.app. We will verify your identity before fulfilling your request and respond within 45 days.

Children's Privacy

OneHaus is not directed to children under the age of 13 (or under 16 in the European Economic Area). We do not knowingly collect personal information from children under these ages.

If you are a parent or guardian and believe that your child has provided us with personal information without your consent, please contact us at support@onehaus.app. We will take steps to remove such information from our systems promptly.

Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or other factors. If we make material changes, we will notify you by posting a notice within the app, sending you an email, or both, at least 30 days before the changes take effect.

The "Last updated" date at the top of this page indicates when the policy was most recently revised. Your continued use of the Service after the updated policy becomes effective constitutes your acceptance of the changes.

Contact Us

If you have questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us:

Email: support@onehaus.app
Company: ASB Media Investment Group (trading as OneHaus)
Company number: 14376894 (registered in England and Wales)