Home TLC — Home Maintenance Management Platform Effective Date: April 11, 2026 Published by Katalystai

This Privacy Policy describes how Katalystai ("we," "us," or "our") collects, uses, stores, and protects information when you use the Home TLC mobile application (the "App"). By using the App, you agree to the collection and use of information as described in this policy.

Home TLC helps home maintenance professionals and homeowners photograph rooms, detect appliances using AI, track maintenance tasks, schedule jobs, and manage service records. The App is available on iOS.

When you create an account, we collect:

• Email address and password (password is hashed and managed by our authentication provider)
• Full name
• User role (Professional or Homeowner)
• Company name (optional, for Professional accounts only)
• Mobile phone number (optional, for receiving SMS notifications about task reminders, invitations, and service updates)

When you add properties to the App, we collect:

• Property address
• Property owner name, email address, and phone number (optional)
• Property metadata such as year built, property type, square footage, and number of stories
• Geographic coordinates derived from property addresses for map display and geofencing

The App uses your device camera and photo library to capture:

• Room photographs for documenting property interiors
• Appliance data plate photos for extracting model and serial number information
• Service record photos documenting completed maintenance work
• Item condition photos for tracking appliance and fixture state over time

Photos are stored locally on your device and may be uploaded to our secure cloud storage. Room photos may be sent to Google's Gemini AI service for automated appliance detection (see Section 4).

With your permission, the App may access your device location for:

• Verifying and geocoding property addresses
• Geofencing: If you enable "Arrival Reminders," the App uses background location to notify you when you arrive at a client's property. This requires "Always" location permission and can be disabled at any time in Settings.

We store property coordinates (latitude and longitude) in our cloud database to support map features. We do not continuously track your real-time location.

• Push notification device tokens (for delivering maintenance reminders)
• Notification preferences (push enabled, email reminders enabled)
• Internal audit logs recording actions taken within the App (e.g., creating a home, completing a task) for debugging and data integrity purposes

We do not use third-party analytics, advertising, or crash-reporting SDKs. We do not track your activity across other apps or websites.

Professional users may add specialists or subcontractors to the App. For each specialist, we collect name, trade, email address, phone number, and optionally an hourly rate and insurance verification status.

• To provide and maintain the App's core features: property management, room documentation, maintenance task tracking, and service records
• To enable AI-powered room detection by sending room photos to Google Gemini for identifying appliances, furniture, and fixtures
• To extract appliance information from data plate photos using on-device optical character recognition (Apple Vision framework)
• To deliver push notifications for upcoming and overdue maintenance tasks
• To send SMS notifications for task invitations, maintenance reminders, estimate updates, and service-related communications
• To enable property sharing between professionals and homeowners via invitation codes
• To support widget functionality showing upcoming tasks on your home screen
• To maintain audit logs for data integrity, debugging, and compliance

We use Supabase as our cloud database and authentication provider. Your account data, property information, maintenance tasks, and uploaded photos are stored on Supabase's servers. Supabase encrypts data in transit (TLS) and at rest. Row Level Security (RLS) policies ensure that users can only access data they are authorized to view. For more information, see Supabase's privacy policy at https://supabase.com/privacy.

When you use the AI detection feature, room photographs are sent to Google's Gemini API for analysis. Google processes the image to identify objects in the room and returns structured data (item names, confidence scores, bounding box coordinates, and visual attributes such as color and material). We do not send any personal information alongside the photos. Google's use of this data is governed by their API terms of service and privacy policy at https://policies.google.com/privacy. AI detection is optional and can be disabled in the App's settings.

• Apple Push Notification Service (APNs): We send push notifications through Apple's servers using device tokens. Apple does not have access to notification content.
• Apple Vision Framework: Data plate OCR scanning is performed entirely on your device. No image data is sent to Apple or any external server for this feature.
• ARKit: Room measurements using augmented reality are processed entirely on your device. No AR data is transmitted externally.
• MapKit: Address geocoding uses Apple's mapping services. Apple's privacy policy governs their handling of location queries.

When you or another user provides a phone number for SMS notifications, we use Twilio to deliver text messages. Twilio receives only the phone number and message content — no other personal information is transmitted. Twilio's use of data is governed by their privacy policy at https://www.twilio.com/legal/privacy.

The following disclosures apply to the Home TLC SMS messaging program operated by Katalystai:

• No Sharing of Mobile Information: Mobile phone numbers and SMS opt-in data will not be shared with third parties or affiliates for marketing or promotional purposes. Phone numbers are shared only with Twilio, our SMS delivery provider, solely for the purpose of transmitting messages you have consented to receive. This restriction applies to all categories of personal information covered by this Privacy Policy.
• Program Name: Home TLC by Katalystai.
• Program Description: Task assignment invitations, maintenance reminders, estimate notifications, appointment confirmations, and service-related updates.
• Message Frequency: Message frequency varies based on your account activity. You may receive messages when tasks are assigned, estimates are submitted, appointments are scheduled, or maintenance reminders are due. Typical users receive between 2 and 10 messages per month.
• Message and Data Rates: Message and data rates may apply depending on your mobile carrier plan. Home TLC and Katalystai are not responsible for carrier charges.
• Opt-Out: You may opt out of SMS messages at any time by replying STOP to any message received from Home TLC. After opting out, you will receive a one-time confirmation message and will no longer receive SMS notifications from the program.
• Help: For help, reply HELP to any message received from Home TLC, or contact us at info@katalystai.io.
• Supported Carriers: Messages are sent via standard SMS and are supported by all major US carriers. Katalystai is not responsible for delayed or undelivered messages caused by carrier issues.

• Local storage: The App stores data on your device using Apple's SwiftData framework and the local file system (for photos). This data is protected by your device's built-in security (passcode, Face ID, Touch ID).
• Cloud storage: Data synced to the cloud is stored on Supabase's infrastructure with encryption at rest and in transit. Photos are stored in Supabase Storage buckets with access controlled by authentication tokens and RLS policies.
• Widget data sharing: The App shares limited data (upcoming tasks, home health score) with its widget extension through an App Group container on your device. This data stays on your device.

While we implement reasonable safeguards, no method of electronic storage or transmission is 100% secure. We cannot guarantee absolute security of your data.

We retain your data for as long as your account is active or as needed to provide the App's services. When you delete items within the App (homes, rooms, items, tasks, or service records), they are soft-deleted — marked as deleted but retained in the database for a limited period for data recovery purposes.

To request complete deletion of your account and all associated data, contact us at info@katalystai.io. We will process deletion requests within 30 days, permanently removing your personal information from our active systems. Some data may persist in encrypted backups for a limited retention period.

• Camera and Photos: You can deny or revoke camera and photo library access in your device Settings. The App will function with reduced capabilities (no photo capture or AI detection).
• Location: You can deny location access or change it from "Always" to "While Using" in device Settings. Disabling background location disables arrival reminders but does not affect other features.
• Push Notifications: You can disable push notifications in device Settings or within the App's notification preferences.
• SMS Messages: You may opt out of SMS notifications at any time by replying STOP to any message from Home TLC. You may also reply HELP for assistance. Opting out of SMS does not affect in-app notifications or your ability to use the App.
• AI Detection: You can disable AI detection in the App's settings. When disabled, no photos are sent to Google Gemini.
• Account Deletion: You may request deletion of your account and data by contacting us (see Section 7).
• Data Export: You may request a copy of your data by contacting us at the email address below.

We may update this Privacy Policy from time to time. When we make material changes, we will notify you through the App or by other means prior to the change becoming effective. We encourage you to review this policy periodically. Your continued use of the App after changes are posted constitutes your acceptance of the revised policy.

If you have questions about this Privacy Policy or wish to exercise your rights regarding your personal data, please contact us at:

KatalystaiEmail: info@katalystai.io Website: https://katalystai.io

This privacy policy was last updated on April 11, 2026.