1. Who we are
Shapehaus is a home app for people who share a flat but are not family: chores in turns, due dates and bills, shared money, shared stuff, house notes and quiet hours. It is published under the Inovy brand (“we”, “us”). The controller of the personal data described here is Oğuzhan Aktay (individual developer, brand: Inovy), Türkiye. Postal address: Cumhuriyet Mah., Diyar Sk. No: 5, 16400 İnegöl, Bursa, Türkiye. Privacy contact: privacy@inovy.dev. People in Türkiye: see also the KVKK Aydınlatma Metni.
2. The short version
- Your home sees your home’s data.Tasks, dates, money, stuff and notes are shared with the people in your home, and with nobody else.
- No ads, no selling.Shapehaus shows no ads and we do not sell your data. Your home’s data is never used to target anyone.
- Usage data is anonymous and you can switch it off.It never contains names, amounts, notes or invite codes. Me › Settings › Share usage data turns it off.
- Crash reports are always on, and scrubbed.They carry technical details only, never what you typed.
- Delete in the app.Me › Settings › Delete my account. Details below.
3. Data we process
- Your account. You sign in with Apple, with Google or with a one-time email link. We receive your email address (Apple may give us a private relay address) and, if Apple or Google share it, your name. Sign-in runs on the sign-in system Inovy shares across its apps, but your Shapehaus profile and data are separate from any other Inovy app and are never shown there. We keep your language and time zone.
- You in your home. The name, shape and colour you pick, your outfit, mood (for example “Away” or “Sick”), sparks, badges and wardrobe items, and your notification and quiet-hours settings.
- Your home. The home’s name and look, its members, invites and join requests, tasks and whose turn it is, swaps and nudges, due dates and bills, expenses (what, how much, who paid and how it is split), settle-ups, shared stuff, house notes (including Wi-Fi details and notes you mark as secret), quiet hours and the activity history. Every member of the home can see this data, as the app shows it; a secret note is hidden until someone taps to show it. Your home’s data is stored on your phone and synced through our servers so everyone sees the same thing.
- Invites. An invite code (like HAUS·4821) or link works for 7 days. When someone asks to join, the people in the home see the name and shape they chose and decide whether to let them in.
- Notifications. Your turn and bill reminders, and a few reminders after you have not opened the app for a while, are local notifications planned on your phone. Messages from your housemates (nudges, swaps, money, join requests, the weekly recap) are sent by our server through the Expo push service and Apple Push Notification service; for this we store your phone’s push token. Money notifications never show an amount on the lock screen.
- Shapehaus Plus. Plus is bought through the Apple App Store; we never see your payment details. Adapty manages purchases and receives your Shapehaus account ID, purchase receipts, paywall views and technical device data. Our server keeps the home’s Plus status (plan, renewal or end date, and who pays). If the payer turns on “Split it with” your home, Shapehaus adds a shared bill to the home’s Money.
- Usage data (you can switch it off). Mixpanel (EU data residency) receives a fixed list of product events, such as “a task was marked done” or “the paywall was shown”, with a random ID for this installation (not your account ID) and device and app details (model, OS and app version). Events never contain names, amounts, notes, invite codes or anything you type. Microsoft Clarity records how screens are used (taps, scrolling and layouts) with strict masking, so text and numbers on screen are hidden before anything leaves your phone. Both are on unless you switch them off in Me › Settings › Share usage data; switching off stops both at once and resets the random ID.
- Crash reports (always on, scrubbed). Sentry (EU, Germany) receives crash and error reports with technical details: device model, iOS and app version, error codes and stack traces. Names, amounts, notes, codes, email addresses and IP addresses are removed and no user profile is attached. They stay on when you switch off usage data, because they keep the app working for your whole home.
- Feedback. If you use Me › Settings › Send feedback, we receive the topic, your message and, only if you add it, your email address, together with the app version and build, phone model, iOS version and app language.
- Email. If you write to us, we receive your email address and what you write.
Shapehaus does not use your location, contacts, camera or microphone, and does not track you across other companies’ apps or websites.
4. How we use it, and why we may
We use this data to run Shapehaus for your home (sign-in, sync, turns, reminders, notifications, money and Plus), to understand how the app is used and improve it, to find and fix crashes, to prevent abuse (for example invite code guessing) and to answer your messages and requests.
- Contract (GDPR Art. 6(1)(b)): your account, your home’s shared data, sync, notifications you allowed, Plus and feedback.
- Legitimate interests (Art. 6(1)(f)): scrubbed crash reports, security and abuse prevention, and anonymous usage data that you can switch off at any time.
- Legal obligations (Art. 6(1)(c)): answering privacy requests and keeping records the law requires.
For Türkiye, see the KVKK Aydınlatma Metni.
5. Who processes it for us
These providers process data on our behalf, under contract and our instructions:
- Supabase (EU, Ireland): sign-in, database and server functions; stores your account, your home’s data, push tokens, Plus status and feedback.
- Expo (US), Apple Push Notification service: delivery of notifications from your housemates.
- Adapty: purchases and Plus status.
- Mixpanel (EU): anonymous usage data, as described above.
- Sentry (EU, Germany): crash and error reports.
These companies are independent controllers under their own privacy policies:
- Microsoft (Clarity): masked screen-usage recordings, only while usage data is on. See the Microsoft Privacy Statement.
- Apple and Google: Sign in with Apple or Google (only if you choose them) and App Store purchases.
International transfers: your account and your home’s data are stored in the EU (Supabase, Ireland). Expo, Adapty, Microsoft, Apple and Google may process data in the United States or other countries. For transfers out of the EU, EEA, UK or Türkiye we rely on adequacy decisions (such as the EU-U.S. Data Privacy Framework for certified providers), standard contractual clauses or the other safeguards the law provides.
6. Your choices
Me › Settings › Share usage data switches Mixpanel and Clarity off together. Notification types and quiet hours are in Me › Settings and in your iPhone’s Settings. Me › Settings › Export my data gives you a copy of your home and your own changes as a file. You can also email privacy@inovy.dev and we will apply your choice.
7. Keeping and deleting data
We keep your account and your home’s data while you use Shapehaus. Things you delete in the app stay restorable for 30 days and are then removed for good. When the last person leaves a home, the home is archived for 30 days and then deleted. Notification delivery records are deleted after 30 days and feedback after 12 months. Push tokens are deleted when you sign out on that phone.
Deleting your account: open Me › Settings › Delete my account, type the confirmation word and confirm, or follow the steps on the delete account page. You have 14 days to change your mind by signing in again; after that the deletion is final. We delete your profile, your outfits, badges and sparks, your push tokens, your join requests, your feedback and your Plus payer link. In homes you shared, your name becomes “Former housemate”, so the money and the history still add up for the others; the shared records stay with the home. The shared Inovy sign-in is removed too, unless you still use it for another Inovy app, in which case only your Shapehaus data is deleted. If you used Sign in with Apple, we also revoke Shapehaus’s access to your Apple ID. Deleting your account does not cancel a Plus subscription: cancel it in your iPhone’s Settings › your name › Subscriptions.
Purchase records held by Apple and Adapty, and data already received by Mixpanel, Microsoft and Sentry, are kept by those providers under their own policies; they are not linked to your name.
8. Who can use Shapehaus
Shapehaus is for people aged 16 and over and is not directed at children. If we learn that someone under 16 has an account, we will delete it. If you believe this has happened, email privacy@inovy.dev.
9. Your rights
Depending on where you live, you can ask for access to your data, a portable copy, correction, deletion or restriction, and object to processing based on our legitimate interests. Email privacy@inovy.dev; we may ask you to confirm the request from your account’s email address. We answer within one month (GDPR, UK GDPR), 30 days (KVKK) or the period your local law sets. You can also complain to a data protection authority, for example where you live or work in the EU or EEA, the UK Information Commissioner’s Office or Türkiye’s Kişisel Verileri Koruma Kurulu.
10. This website
The Shapehaus pages on inovy.dev use Vercel Web Analytics, which counts page views without cookies and without identifying you. They do not use Microsoft Clarity or advertising trackers. Vercel, our web host, processes your IP address and request details to deliver the pages and keep them secure.
11. Changes
If we change this policy, we update the date at the top of this page and, for important changes, tell you in the app.
12. Contact
Privacy questions and requests: privacy@inovy.dev. General support: support@inovy.dev. Post: Oğuzhan Aktay (Inovy), Cumhuriyet Mah., Diyar Sk. No: 5, 16400 İnegöl, Bursa, Türkiye.