Privacy Policy

Effective as of November 13, 2026

1. Overview

Jonathan Terry (the "Service Provider", "we") operates UpkeepKit, a home maintenance service. This policy describes the personal information the Service collects, how it is used and shared, and the choices you have. It applies to the UpkeepKit web and mobile applications and the marketing site.

2. Information We Collect

Account and profile

Your email address (used to sign in), the names of your organization and homes, your time zone, and your preferred temperature unit.

Your content

The Things you track, maintenance schedules and recurrences you create, completed-work history, notes, and documents you upload, such as appliance manuals.

Home location

An address, ZIP code, or geographic coordinates you provide for a home. This is used to resolve weather-aware reminders for that home.

Integration data

If you connect an integration, we access the minimum data needed to perform the sync: for Google Calendar, the events (identifiers, titles, dates) used to mirror your maintenance schedule plus the tokens required to authenticate. The calendar feed uses a private feed token that identifies your subscription.

AI inputs

Content you submit to the AI assistant — questions, asset details, and manual text — in order to generate drafts for your review.

Billing

Subscriptions are sold by Paddle, which acts as merchant of record and collects payment details directly from you. We store only a reference to the subscription owner (a display name and the account it belongs to) — never card numbers.

Technical logs

Standard infrastructure logs generated by our hosting provider (for example, request logs and error reports) used to operate and secure the Service.

3. How We Use Information

We use the information above to: provide and operate the Service (scheduling, reminders, sync, the AI assistant); personalize it (time zone and unit preferences); send essential service communications (sign-in, billing receipts sent by Paddle, important notices); maintain security and prevent abuse; and comply with legal obligations. We do not sell personal information, do not run advertising, and the marketing site carries no analytics or trackers.

4. Google User Data

If you connect Google Calendar, the Service accesses Google user data through the Google Calendar API — specifically, the ability to view and edit the calendar events needed to keep your maintenance schedule in sync. That data is used only to provide this sync feature. It is not shared with third parties other than as needed to provide the Service (including storage on Google's own infrastructure), it is not used for advertising, and it is not transferred to others except as required by law or with your explicit consent. Our use of Google user data complies with the Google API Services User Data Policy, including its Limited Use requirements. You can disconnect Google Calendar at any time in the Application's settings.

5. AI Features

When you use the AI assistant, your inputs (text, asset details, and manual text) are sent to third-party model providers through OpenRouter in order to generate drafts. With hosted AI, prompts and completions are processed under a zero-retention arrangement: providers do not retain them and do not use them to train models. If you supply your own provider key ("bring your own key"), that provider's privacy terms govern your usage instead. Provider keys are stored encrypted (AES-256-GCM). AI responses are drafts only — nothing is written to your account until you review and save it. Organization owners can optionally enable per-organization debug logging for troubleshooting; while enabled, full prompt and completion content is recorded in application logs, and it is disabled again by turning the toggle off.

6. Weather and Location

To make reminders weather-aware, the location you assign to a home (ZIP code or coordinates) is sent to Visual Crossing's weather API to retrieve forecasts. Your location is not shared with advertisers or any third party for their own purposes.

7. Sharing and Third-Party Services

Personal information is shared only as described in this policy. The Service relies on third-party providers, each governed by its own terms and privacy practices:

• Google (Firebase — hosting, database, authentication, functions)
• OpenRouter (AI model gateway)
• Paddle (payments and merchant of record)
• Visual Crossing (weather data)
• Google Calendar API (calendar sync)

8. Data Retention and Deletion

Your data is kept while your account is active. You can delete your organization and its data through the Application's settings; account data is removed with it. Backups and infrastructure logs may persist for a short period before expiring. Paddle retains billing records as described in its own privacy policy and as required by law.

9. Security

The Service uses Firebase Authentication, database security rules that scope access to your organization, TLS encryption in transit, and encryption at rest for integration tokens and provider keys. No method of transmission or storage is perfectly secure, and absolute security cannot be guaranteed.

10. Children

The Service is not directed to children under 13, and we do not knowingly collect personal information from them. If you believe a child has provided personal information, contact us so it can be removed.

11. Changes to This Policy

We may update this policy periodically. The current version is always posted on this page with an updated effective date. Material changes will be announced through the Service where practicable.

12. Contact Us

If you have questions about this policy, contact the Service Provider through the support channels published within the Application or on this Site.