🔐 plain-words privacy

Your things stay your things.

This is the privacy policy for The Clue-Less House — the mobile app and the website at thecluelesshouse.com, both operated by Sanctuary Sleep Co. Here's the short version of how we look after your information.

What we keep

Your email so you can sign back in. Anything you write down — symptoms, journal entries, pinned notes, folders, appointments, chats with the companions. Optional things like a preferred name or a photo of a symptom, only if you add them.

What we don't do

We don't sell your information. We don't share it with advertisers. We don't read your journal to train anything. We don't send your data anywhere it doesn't need to go.

Who can see it

Only you, signed in to your account. The companions read what you write to them so they can answer — that's it.

How it's kept safe

Everything you write travels over an encrypted connection (TLS 1.2+) and is stored on servers that encrypt the whole disk at rest (AES-256). Inside the database, every row is scoped to your account — the house can only hand your notes to you when you're signed in. No third parties see it.

Reminders and notifications

If you set a reminder on a pinned note, your device will gently nudge you when it's due — we only ask for notification permission the first time you actually schedule one, not the moment you open the app. You can turn it off any time in your device settings.

Sharing a key with someone

Nothing is shared with another person until you decide to share it and send them an invite. No passive sharing, no automatic feeds. You can revoke a key any time from your keyring.

Cleaning house

You can delete anything you've written from the Closet. If you're ready to close the whole account, go to the Closet → 'Leave the house' — one button, two-step confirm, and every note, chat, book, photo, and the account itself are permanently removed. No email required.


📋 the same thing, spelled out

Exactly what we collect, and why.

Every category below is optional except your email address — the app only holds what you choose to put in it.

Account information
Your email address, and a password (stored only as a salted hash) or a Google sign-in link. Used solely to sign you in and to send account emails such as confirmation and password reset. Never used for marketing.
Health and wellness information
Symptoms, severity ratings, sleep logs, medications and doses, appointments, journal entries, and your conversations with the companions. Stored so the app can show them back to you and build your own summaries. Never sold, never shared with advertisers, never used to train third-party models.
Photos and files
Only images you deliberately upload — a symptom photo, a product in the Pantry, a document in the Office. Stored in private storage scoped to your account.
Approximate location
Requested only when you use the Pantry's 'where did I find it' feature, and only at that moment, so the app can list nearby stores. The coordinates are used for that one lookup and are not stored as a location history. Decline the permission and the Pantry still works — you just type the store name.
Device and diagnostic information
Basic technical data such as IP address, browser or device type, and error logs. Used to keep the app running and to detect abuse of sign-in and password-reset endpoints. Security logs are kept 30–90 days.
Health app data (optional)
If you connect Apple Health or Google Health Connect, the app reads only the metrics you approve — such as steps or sleep — to show alongside your own notes. It is never written back to any third party, and you can disconnect at any time in your device's health settings.

Service providers

A small number of processors help the house run: our hosting and database provider (which stores your data encrypted), our transactional email provider (which only ever sees your email address and the message being sent), Google Maps Platform (nearby store lookup in the Pantry), and an AI model provider that processes the message you send a companion so it can reply. They act on our instructions only, and none of them are permitted to sell your data or use it for their own advertising.

How long we keep things, and how to delete them

Your content is kept for as long as your account exists. You can delete individual notes, logs, books, and photos at any time from inside the app. To remove everything, use thecluelesshouse.com/delete-account (also reachable in-app from the Closet → "Leave the house"). That permanently deletes your account, profile, every entry, chat, book, folder, photo, appointment, medication, contact, and any keys shared with or by you. It cannot be undone. The only things retained afterwards are minimal billing records if you ever paid for a plan, and security logs, typically for 30–90 days.

Children

The Clue-Less House is intended for adults, 18 and over. We do not knowingly collect information from children. A caregiver may keep notes about a child in their own account; that content belongs to the caregiver's account and is deleted with it.

Your rights

You can access, correct, export, or delete your information at any time from inside the app, or by writing to us. Depending on where you live, you may also have the right to object to processing or to lodge a complaint with your local data protection authority.

Changes to this policy

If this policy changes in a way that matters, we'll update the date below and note it in the app's mailbox.

Contact

Questions, requests, or anything that feels off — email support@thecluelesshouse.com. A real person will answer. You can also use the Contact button in the Closet.

See the House Rules for the warm bigger-picture version.

Last updated: July 28, 2026