Privacy

Alfred is a household organizer. It keeps track of when things around a house need doing, and holds the household’s lists, including Christmas and birthday wishlists. It is operated from Alberta, Canada. This page describes what it stores, who can see it, and where it goes. Questions or requests: hello@foralfred.com.

What Alfred stores

• Your email address and your sign-in: a password (stored only in scrambled form by the sign-in service, so nobody can read it), or, if you choose Google, the email and basic profile Google shares.
• The name you enter when you create or join a household, and a person record with that name so tasks and wishlists can be attached to you.
• The household’s contents: its name and timezone, tasks, the things they attach to (home, vehicles, appliances, yard, people) and any details you record about them, and the history of what was completed, when, and at what cost.
• Lists: grocery, shopping and gift lists, with each item’s text, quantity, link, price, note and occasion, and who has claimed a gift.
• Photos you attach to wishlist items. They are shrunk on your device before upload (JPEG, PNG or WebP, up to 2 MB) and kept in private storage that only members of the household can read.

Alfred does not currently send push notifications or emails of its own, and it does not ask for your location, contacts or camera.

Cookies and tracking

Alfred sets only the cookies that keep you signed in. They come from the sign-in service, are needed for the site to work, and are not used for anything else. Alfred stores nothing else in your browser, uses no analytics, no advertising and no tracking pixels, and loads no third-party scripts, fonts or trackers. Because only strictly necessary cookies are used, there is no cookie banner to accept or decline.

Who can see your data

Every member of a household can see and edit its tasks, things, lists and list items, including everyone’s wishlist items and photos, and each member’s name. That is the point of a shared household. People who are not in the household cannot see any of it: access is enforced by the database itself, not only by the application. Anyone holding a household’s invite code can join and see everything, so share it carefully; the owner can replace the code at any time, which stops the old one working.

The owner of a household can rename it, replace its invite code, remove members and delete the household. The owner role does not give extra access to the contents.

Gift secrecy works the other way. On a wishlist, who has claimed or bought an item is hidden from the person the list belongs to. Only members the owner has marked as buying gifts can see those claims, and never on their own list. New members start without that access. The wishlist items themselves are visible to the household, so keep a surprise off a list its owner can open.

Signing in with Google

If you sign in with Google, Alfred receives your email address and basic profile information. It does not receive your password and cannot access your Google account, your contacts, or anything else. You can revoke this at any time from your Google account’s security settings.

Who processes it, and where

• Supabase provides the database, sign-in and photo storage. Alfred uses its Central Canada region, and Supabase is a US-based company.
• Vercel, a US-based company, hosts the application. Like any host, it records technical information about requests, such as IP address and browser type, to run and secure the service.
• Google, only if you choose to sign in with it.

Because these providers are US-based, your information may be processed or accessed in the United States, where the laws may differ from Canada’s. They handle data only to run Alfred. Nothing is sold or used for advertising.

How long it is kept

Alfred keeps your data until you or your household delete it. Sign-in sessions expire on their own. Beyond that, Alfred sets no separate schedule, and hosting providers may keep short-term backups for a limited time.

Your choices and rights

You can see and correct most of what Alfred holds about you in the app. You can ask for a copy of your personal information, or ask us to correct or delete it, by emailing hello@foralfred.com. You can delete your account yourself, as described next.

Deleting your data

Delete account, at the bottom of Setup, removes your login and your person record together with your own wishlist, its items, its photos and any gift claims on it. Gift claims you made on other people’s wishlists are removed too.

• If you are the only member of your household, the household is deleted with it: every task, thing, list, item and photo, and its invite code.
• If others remain, the household carries on without you. Tasks, completion history and list items you added stay for the household, no longer linked to you. Tasks that were attached to your person record stay but are no longer attached to anyone.
• If you are the owner of a household that still has other members, deletion is blocked until you hand ownership to someone else or remove the others, so no one’s data is destroyed without them.

Deletion is permanent. Alfred keeps no archive of its own; providers’ short-term backups may hold copies for a limited time. Leaving a household without deleting your account, or the owner deleting a household, is also available in Setup. If the button does not work for you, email us.

Children

Alfred is for people 13 and older. Parents and guardians can record a child as a person in their household, without a login, so tasks and wishlists can be kept for them; the adult is responsible for what is entered. Children under 13 should not have their own account. If you think one does, email us and we will delete it.

Security

Data travels over encrypted connections. Access to each household’s data is restricted in the database, photos are private, and passwords are never stored in readable form. No system is perfectly secure, so use a password you use nowhere else.

Changes

Alfred is a personal project under active development. If what it stores changes materially, this page changes with it and the date above is updated.