Privacy Policy

1. Introduction

Home Office OS ("we," "us," or "our") builds privacy-first financial software. This Privacy Policy explains how our applications handle data -- or more accurately, how they don't.

Unlike most software companies, we have no servers collecting your data, no analytics tracking your behavior, and no third-party services receiving your information. Every application we build processes data entirely on your local device.

This policy applies to Home Office OS and all associated product domains.

2. Data We Collect

The application collects nothing. Home Office OS (the desktop, mobile, and web-demo software) does not collect, transmit, or store any personal or financial data on external servers. The software does not transmit your financial data (income, assets, tax information, account numbers), your usage of the app, your device information (IP address, browser, operating system), or any location or biometric data. Your financial data is processed and stored entirely on your device. There is no server holding it, no database to breach, and no logs to subpoena.

The website collects limited contact information that you provide. When you claim a founding-member spot, request the demo or a download, or contact us, our website forms collect:

• Your name and email address, used to assign your founding-member number, send you your download or demo access, and respond to you.
• The role you select (for example, individual or financial advisor), used to understand who is using the product.

This information is submitted only when you fill out a form, is stored on our infrastructure (Cloudflare), and is used solely for the purposes above. We do not sell it, rent it, share it with advertisers, or use it to track you across the web. You can request deletion at any time by emailing [email protected].

Payment information for paid tiers is handled directly by Stripe; we never see or store your card details (see Section 5). The optional external AI may send anonymized, PII-scrubbed data to a third-party provider only if you explicitly turn it on (see Section 6).

3. Local Data Storage

Our applications may store data locally on your device using your browser's localStorage, IndexedDB, or the application's local database (for desktop/Electron apps). This data:

• Resides solely on your device
• Is encrypted with AES-256 encryption where applicable
• Is never transmitted to any external server
• Can be deleted at any time by clearing your browser data or uninstalling the application
• Can be exported in standard formats (JSON, CSV, PDF) at any time

You own your data. You can export it, delete it, or move it whenever you choose. There is no vendor lock-in.

4. Cookies & Tracking

Our applications use zero cookies. We do not use:

• First-party or third-party cookies
• Tracking pixels or web beacons
• Browser fingerprinting
• Google Analytics or any analytics service
• Facebook Pixel, LinkedIn Insight, or any advertising tracker
• Session recording tools (Hotjar, FullStory, etc.)

The only browser storage used is for your own application preferences (language selection, theme choice) -- stored locally and never transmitted.

5. Third-Party Services

Our applications do not transmit your financial data to external servers by default. All fonts are self-hosted. The external services used are:

• Stripe -- For products that require payment processing, Stripe handles payment information directly. We never see or store your payment card details. See Stripe's Privacy Policy.
• External AI Providers (optional, user-initiated) -- If you choose to connect an external AI provider, certain data may be sent to that provider's API. See Section 6 below for full details.

No other third-party services receive any data from our applications.

6. AI Assistant (Enzo)

Home Office OS includes an AI assistant called Enzo. Enzo is designed to help you understand your financial picture by answering questions, explaining calculations, and providing context for the data our 82 engines produce. Enzo operates in three distinct modes, each with different privacy characteristics:

6a. Built-In Q&A Bank (Default -- Fully Local)

By default, Enzo works entirely offline using a curated bank of approximately 1,700 question-and-answer pairs covering personal finance, tax planning, retirement, insurance, estate planning, and more. In this mode:

• No AI model is involved -- Enzo matches your question to the most relevant answer from the local Q&A bank
• Zero data leaves your device
• No internet connection is required
• This mode is always available regardless of platform or configuration

6b. Local AI Model (Optional -- Fully Local)

For more natural, conversational responses, you can download a small open-source language model that runs entirely on your device. On desktop (Electron), this is straightforward. On mobile, a smaller model variant is available. In this mode:

• The AI model runs 100% locally on your hardware
• Zero data leaves your device
• The model's sole purpose is to parse natural language and provide more conversational answers using the local Q&A bank, your financial data, and the deterministic outputs of our calculation engines
• All privacy guarantees of the core application remain fully intact

This is how we believe AI should work for sensitive financial data: the intelligence runs locally, adding natural language understanding to deterministic calculations and local heuristics, without ever exposing your information to external services.

6c. External AI Provider (Optional -- User-Initiated)

You may optionally connect an external AI provider (such as Claude from Anthropic) for more advanced conversational capabilities. This is the only mode where any data may leave your device, and it requires your explicit opt-in.

When using an external AI provider:

• PII Safeguards: Our application includes built-in safeguards that strip personally identifiable information (names, account numbers, Social Security numbers, addresses) before any data is sent to the external provider. Financial figures may be shared in aggregate or anonymized form to enable meaningful analysis, but identifying details are filtered out.
• Scoped Behavior: The external AI is instructed to stay on task and focus exclusively on financial planning topics, with some flexibility to answer general questions you may have.
• Third-Party Privacy Policy Applies: When you connect an external AI provider, you are subject to that provider's privacy policy and terms of service. We are not responsible for how the external provider handles data once it reaches their systems. We strongly recommend reviewing the provider's privacy policy before connecting.
• Our Recommendation: Exercise prudence in what financial or health-related information you share in the external chat. While our PII safeguards are active, you control what you type. The external provider's data handling practices are governed by their policies, not ours.

You can disconnect an external AI provider at any time and revert to the fully local Q&A bank or local model with no loss of functionality. The external AI is an enhancement, not a dependency.

7. Encryption & Security

Applications that handle sensitive financial data use AES-256 encryption for local storage. This is the same encryption standard used by banks and government agencies.

• All sensitive local data is encrypted at rest using AES-256
• Encryption keys are derived locally and never transmitted
• Desktop applications (Electron) use the operating system's native secure storage for credentials
• No unencrypted financial data is written to disk

8. Children's Privacy

Our applications are professional financial tools not directed at children under 13. Since we collect no data from any user, we also collect no data from children.

9. Government & Legal Requests

We cannot comply with data requests because we have no data to provide. There are no user accounts, no databases of user information, and no usage logs. A subpoena, court order, or government request would yield nothing, because nothing exists on our systems.

10. International Privacy Laws (GDPR, CCPA, etc.)

The software's local-first design means your financial data is never processed by us, so it falls entirely outside these regulations. The limited contact information you submit through our website forms (name, email, role) is personal data, and we honor your rights over it:

• GDPR (EU): Our lawful basis for the contact data you submit is your consent and our legitimate interest in responding to you and administering the founding-member program. You may access, correct, export, or request deletion of that data at any time by emailing [email protected]. Your financial data is never transmitted to us, so there is nothing for us to disclose, rectify, or erase on that front; you hold it all on your device.
• CCPA (California): We do not sell or share your personal information. The only personal information we collect is the contact data you voluntarily submit, which you may access or have deleted.
• PIPEDA (Canada) and LGPD (Brazil): The same applies. Financial data stays on your device; submitted contact data is used only for the stated purposes and is deletable on request.

If you never submit a form, we hold no personal data about you at all.

11. Changes to This Policy

If we ever change our data practices -- which would be a fundamental shift in our company philosophy -- we will update this policy and clearly communicate the changes. Our commitment to zero data collection is foundational to who we are.

12. Contact

If you have questions about this Privacy Policy or our data practices: