Privacy Policy

Last updated: to be completed before going live.

1. Data controller

Sly Software Services — [legal form / registration number to be completed], [address to be completed], [DPO or responsible contact to be completed]. This Privacy Policy informs users (hereafter "Users") of the MyHomeHearth site about the collection, use and protection of their personal data, including the use of cookies.

2. Data collected

• Account data: username, e-mail, password (hashed, never stored in plain text), preferred language, timezone, phone number (only if SMS notifications are enabled).
• Data entered by the User in each module: garden (layout, plants, planting history), contacts directory (including, where applicable, contacts tagged "medical"), notes, recipes, calendar (events, meals, appointments — including, where applicable, appointments tagged "medical"), stock and shopping list, uploaded music and video files. Data tagged "medical" (contact or appointment) may constitute a special category of data under Article 9 of the GDPR; it is entered solely on the User's own initiative, for their personal organizational use, and is never analyzed or exploited by MyHomeHearth for any other purpose.
• Household sharing data: if the User joins a household, data from the Garden, Stock, Shopping and Calendar modules becomes visible to other members of that household. Contacts, Notes and Recipes always remain strictly personal.
• Minimal technical data for security: IP address (registration and login-attempt rate limiting), login timestamps.

3. Purpose of processing

This data is processed solely to provide the service to the User who entered it (and, where applicable, to other members of their household for shared modules — see section 2). No data is sold, rented or used for advertising purposes.

4. Legal basis for processing

Processing of your data is based on contract performance (providing the subscription service), on your explicit consent for e-mail and SMS notifications and for voluntarily entering data tagged "medical", and on the publisher's legitimate interest in improving the service and preventing fraud.

5. Retention period

Data is kept for as long as the account exists. Deleting the account (from the "My Account" page) immediately and permanently erases it.

6. Data sharing

• Our payment provider (PayPal), for secure subscription management — we do not store any banking data.
• Our e-mail delivery provider, for account activation, password resets and notifications you have consented to.
• Other members of your household, only for the modules you voluntarily share by joining it (Garden, Stock, Shopping, Calendar — see section 2).
• Competent authorities, only where legally required.

Your data is never sold or shared with third parties for commercial purposes.

7. Security

We implement appropriate technical measures to protect your data against unauthorized access, loss or disclosure: salted password hashing (PBKDF2), CSRF protection on every form, progressive per-account login-attempt throttling, and e-mail verification when logging in from an unusual context.

8. Cookies and similar technologies

MyHomeHearth only sets one cookie, the session cookie (JSESSIONID), strictly necessary for the service to function (login, account management, security). No tracking or advertising cookies are used.

9. Managing cookies

As the session cookie is strictly necessary, no banner is shown to accept only essential cookies. You can nevertheless manage or delete this cookie at any time in your browser settings; deleting it will end your current session.

10. Your rights

Under GDPR, you have the right to access, rectify, erase and port your data, to restrict processing, and to withdraw your consent at any time. Account deletion and exporting all of your data (right to portability) are available self-service from the "My Account" page. You can disable e-mail or SMS notifications at any time from that same page. For any other request, contact us (see section 11).

11. Contact

For any request regarding this Policy or your personal data, you can write to us at: noreply@myhomehearth.com [to be replaced with a dedicated contact address before going live].

← Back to home