Legal

Privacy Policy

Last updated 13 September 2026

HomeRoam is used by families with children, so the short version matters more than the long one: we collect the minimum needed to write your lessons, we never sell anything to anyone, and there is no advertising or third-party tracking in the app.

Who we are

HomeRoam is made by Lanternfish Labs LLC. You can reach a human at hello@homeroam.app.

What we collect

Your account

An email address and password, or an Apple ID via Sign in with Apple. If you use Apple's private relay, we only ever see the relay address.

About your children

A first name, a grade level, and the illustrated field mark they pick. That's all. We ask for a first name only because lessons read better when they say your child's name. We never ask for a last name, birth date, photograph, school, or contact details for a child, and there is nowhere in the app to enter them.

Where you're going

A coarse home location — rounded to roughly three decimal places, which is neighbourhood-level, not street-level — plus how far you're willing to travel. We use it to find places near you and to measure distance. We never store a street address, and we do not track your location in the background. Location permission is requested only if you tap "use current location," and you can type a town or ZIP code instead.

Your lessons

The places you choose, the subjects, the generated lessons, your edits, and which lessons you marked complete. This is what makes your Field Log and records work.

Photos you add to a lesson

You can add photos to a lesson as memories of the day, from your camera or your library. They are stored privately for your household, sized down before upload, and shown only to people signed into your household. They never appear on anything HomeRoam shares or publishes, and we never look at them. Camera and photo library access is requested only when you tap to add a photo, and you can decline. The card you can share from a stamp is a designed image of the stamp and your child's rank; it contains no photo.

Notifications

If you allow notifications, the app registers a push token for your phone so we can send a few messages of our own — a heads-up when your free week is ending, and at most once, a nudge if a family that used to write lessons has gone quiet. The token identifies the phone, not you, and is deleted when you sign out. We ask for notification permission only when you plan a trip, never at launch.

Diagnostics

Our servers keep short-lived operational logs (for example, that a lesson request failed) so we can fix faults. The app also reports crashes and errors to a crash reporting service: what went wrong, where in the code, the phone model and OS version, and the app version, tagged with your account's internal ID so a repeated crash is one issue rather than many. Your email address is never included, and anything that looks like an address is removed before a report leaves the phone. None of this is used to build a profile of you.

What we never do

• We do not sell or rent your data, or your children's data, to anyone.
• We do not show advertising, and we do not share data with ad networks.
• We do not use third-party analytics or advertising SDKs in the app. The one third-party SDK that sends anything is crash reporting, described above, and it is configured to report errors only.
• We do not track you across other apps or websites.
• We do not ask children to create accounts. The account belongs to a parent.

Who processes data on our behalf

We use a small number of service providers, each doing one job, none of whom are permitted to use your data for their own purposes:

• Supabase — hosts the database, the private storage for lesson photos, and sign-in. Your household's data is isolated at the database and storage level so one account cannot read another's.
• An AI model provider — writes the lessons. We send the place, subject, grade level, teaching stance and your child's first name. We do not send your email address, your location coordinates, or anything about your account.
• Google Places — finds and describes real places. It receives a search term or a coarse map area, never your identity.
• Apple and RevenueCat — process subscriptions. Apple handles all payment details; we never see your card. RevenueCat tells us only whether a household's subscription is active.
• Expo — delivers app updates and, if you allow notifications, passes our push messages to Apple's and Google's notification services. It receives the push token and the text of each message.
• Sentry — receives crash and error reports as described under Diagnostics. Never your email address.
• Apple Maps and Google Maps — draw the map on your child's Field Log. On iPhone that is Apple Maps; on Android, Google Maps. Each receives the area of the map being drawn so it can supply the tiles, and Google's map software may use device identifiers for its own operation. Neither receives your identity from us.

Children's privacy

HomeRoam is designed to be operated by a parent or guardian, who provides the limited information about their children described above. We do not knowingly collect personal information directly from a child. If you believe a child has provided us information beyond what a parent entered, email us and we will delete it.

How long we keep things

Your lessons and records stay until you delete them or close your account. Deleting a lesson removes it, its stamp and its photos. Deleting a child removes their lessons and stamps. You can remove any single photo at any time. Closing your account deletes your household's data from our systems, photos included; backups age out within 30 days. Push tokens are deleted when you sign out. Crash reports are kept by the crash reporting service for 90 days and then deleted. One thing survives deletion: a one-way hash of the email address (or Apple identity) that started a free week, with the date it started. It cannot be turned back into an address, and we keep it only so the free week cannot be restarted by closing an account and opening a new one.

Your choices

• Edit or delete any lesson, any child, or your home location at any time in the app.
• Ask us for a copy of your data, or for it to be deleted, at hello@homeroam.app. We'll respond within 30 days.
• Revoke location permission in your phone's Settings; HomeRoam keeps working with a typed town or ZIP.
• Turn notifications, camera, or photo library access off in your phone's Settings at any time. Lessons, stamps and records work exactly the same without them.

Depending on where you live you may have additional rights — for example under the GDPR or the CCPA — including access, correction, deletion, and the right to object. We extend the choices above to everyone regardless of location. We have never sold personal information and have no plans to.

Where data is held

Our database and functions run on servers in the United States. If you use HomeRoam from elsewhere, your data is transferred there.

Changes

If we change this policy in a way that materially affects you, we'll update the date above and tell you in the app before it takes effect.

Contact

Lanternfish Labs LLC — hello@homeroam.app