Privacy Policy

Last updated: September 16, 2026

What we collect

Account data: the email address you sign up with, and a username you choose. Passwords are handled by Supabase Auth and are never stored by us in plain text.
Item data: photos, titles, descriptions, category-specific details, and estimated values you enter for items you catalog.
Usage data: likes and nudges you send or receive, and reports you submit.

We do not currently use any third-party analytics or advertising trackers. If that changes, this policy will be updated first.

How photos are processed

When you upload a photo, it's sent to two third-party services before we store it:

Photoroom — removes the background from your item photo
Google Cloud Vision (SafeSearch)— automatically screens the image for adult or violent content before it's processed or stored, to keep the platform safe given photos on public collection pages are visible to anyone

Neither service is given any information beyond the image itself and what it needs to process it.

Who else sees your data

We use the following service providers to operate Habeo. Each processes some of your data as part of providing that service to us:

Supabase — hosts our database, authentication, and file storage
Netlify — hosts the application
Resend — sends account-related emails (signup confirmation, password reset)
Photoroom — photo background removal (see above)
Google Cloud Vision — content moderation (see above)
Cloudflare (Turnstile)— verifies you're human at signup, to keep bots and automated abuse off the platform

We do not sell your data to anyone, for any reason.

What's public vs. private

Items you mark public — including their photos and descriptions — are visible to anyone on the internet, with or without a Habeo account, and may be indexed by search engines. Items marked private are visible only to you. Estimated values are never shown publicly, regardless of an item's visibility setting — this applies at the database level, not just in what the page displays.

Your username is visible to anyone, including without a Habeo account, once you claim one. Until then, other users see only a generic label and no identifying information.

Data retention and deletion

We keep your data for as long as your account is active. You can request deletion of your account and associated data at any time by emailing hello@habeo.app. At our current scale this is a manual process handled directly by Habeo's operator; we'll delete your data within a reasonable time of your request.

Security

We take reasonable steps to protect your data, including row-level and column-level database access controls that restrict who can read what. No system is perfectly secure, and we can't guarantee absolute security.

Children's privacy

Habeo is not directed at children under 13, and we do not knowingly collect data from them. If you believe a child has provided us data, contact us and we'll delete it.

Changes to this policy

We may update this policy as the product changes. Material changes will be reflected here with an updated date.

Contact

Questions about this policy or your data: hello@habeo.app