Privacy Policy

Effective September 21, 2026

This policy explains what Highstorm Software LLC, the operator of adulting.app ("we", "us"), collects, why, and what control you have. The short version: we collect what the product needs to work, we share it only with the infrastructure providers that run the product, we don't sell it, and we don't use your content to train AI models.

What we collect

Account data: email address, name, password (stored only as a salted hash), notification preferences, and email-verification status.

Household content you add: your household's profile and the records you create — properties, assets, vehicles, pets, tasks, projects, notes, insurance details, the providers in your directory, and profiles you choose to add about household members, including children in your care.

Uploaded documents: files you put in the vault, stored privately in object storage and reachable only through short-lived signed links generated for authenticated household members.

Operational data: authentication events (sign-ins, password changes, with IP address and browser info) kept as a security audit trail; an activity log of household actions; error reports; and standard server logs.

We do not collect payment card numbers (Stripe handles payment details when paid plans are active) and we run no advertising trackers. Signing in sets one cookie, which keeps you signed in and nothing else — it is strictly necessary, so there is no consent banner to click. Browse the public pages without signing in and we set no cookies at all. We set no analytics, advertising, or third-party cookies anywhere.

How we use it

To run the product: generating your household's plan and reminders, sharing content with your household's members, sending the emails you'd expect (verification, password reset and security notices, invites, and the digests or nudges you can turn off in settings), preventing abuse (rate limiting, a bot challenge at registration), and fixing problems (error reports). Aggregate, de-identified usage statistics help us understand what to build.

We run no AI over your content. Nothing you add, and nothing you upload to the vault, is sent to an AI provider by the Service itself. The only way your household content reaches one is a connection you open yourself, described below.

Connections you turn on

Two features hand household data to a company we don’t control. Both are off until you switch them on, and both are yours to end.

AI assistants over MCP: connect an assistant to your household and it reads and writes your content on your behalf. What it reads goes to whoever operates it (Anthropic for Claude, OpenAI for ChatGPT, or another provider you choose), and what happens to it there is governed by their privacy policy, not this one. The connection is limited to the household and access level you approved when you set it up. Revoke the key under Settings → Household to end it.

Calendar subscriptions: subscribing to your household’s calendar feed gives its address to your calendar provider (Google, Apple, Microsoft, or whoever you use), which then fetches your task titles and due dates on its own schedule and keeps them alongside your other calendar data. The address carries a secret token and needs no password, so anyone who has it can read the feed: treat it like one. Rotating the token in settings breaks every existing subscription, which is how you revoke access.

Who we share it with

No selling, no ad networks, no data brokers. Your data is processed by the infrastructure the product runs on:

Railway (application hosting, database, and document object storage) · Cloudflare (site delivery and the registration bot challenge) · Resend (transactional email) · Sentry (error monitoring) · Stripe (payments, when paid plans are active).

Assistants and calendar apps you connect yourself are not on this list: they are covered above under “Connections you turn on”, because they receive your data at your direction rather than as processors we engaged.

Beyond these processors, we disclose data only if required by law, to protect the Service and its users, or as part of a business transfer — and household content is of course visible to the members of your household, per your roles and invitations.

Children

The Service is for adults (18+). Parents and guardians may add profiles about children in their household — that information is provided by you, under your account, and visible only to your household. We don't knowingly collect information directly from children under 13; if you believe a child has created an account, contact us and we'll delete it.

Retention and deletion

We keep your data while your account is active. Deleting a document removes it from storage; removing a household member ends their access. To delete your account and its data, email [email protected] from your account address — we'll delete household content you own within 30 days, except minimal records we must keep (like billing records, security logs, and backups that expire on schedule). To export your data, ask the same way — the Service also offers API access you can use yourself.

Security

Data is encrypted in transit; documents live in private storage behind short-lived signed links; passwords are hashed; sessions use rotating tokens; sign-in activity is logged so unusual access can be spotted. No system is perfectly secure — if we learn of a breach affecting your data, we'll notify you without undue delay.

Your rights

Depending on where you live, you may have rights to access, correct, export, delete, or restrict processing of your personal data. Email [email protected] and we'll honor applicable requests. We don't discriminate for exercising them.

International users

The Service is operated from the United States, is directed to United States residents, and stores and processes data on servers in the United States. If you use the Service from elsewhere, you understand that your information is transferred to and processed in the United States, where data-protection laws may differ from those of your jurisdiction.

Changes and contact

If we change this policy materially, we'll notify you by email or in the app before the change takes effect. Questions: [email protected]. See also our Terms of Service.