Privacy Policy

HomeOps by AMAI Automation Effective Date: 1 June 2025 Last Updated: 1 June 2025

1. Introduction

AMAI Automation ("we", "us", "our") operates HomeOps, a household management platform accessible at homeops.co.za. We are committed to protecting your personal information and your right to privacy.

This Privacy Policy explains what personal information we collect, why we collect it, how we use it, and what rights you have in relation to it. It applies to all information collected through the Platform, including the web dashboard, tablet kiosk, and any related communications.

By using HomeOps, you consent to the practices described in this Privacy Policy.

2. Information We Collect

2.1 Information You Provide Directly

When you create and use a HomeOps account, we collect:

Account Information

• Full name
• Email address
• Password (stored as a cryptographic hash — never in plain text)
• Household name

Household Profile Information

• Names, roles, and avatars of family members and staff
• 4-digit kiosk PINs (stored as cryptographic hashes — never in plain text)
• Staff employment details (role type, email address)

Operational Data

• Tasks, chores, and calendar events you create
• Staff responsibilities and oath signatures
• Leave requests and approvals
• Payslip data including salary amounts and tax deductions
• Report card and academic assessment data for children
• Caregiver routine records
• Urgent alert history
• Staff rewards and performance notes

2.2 Information Collected Automatically

When you use the Platform we may automatically collect:

• Browser type and version
• Device type and operating system
• IP address
• Pages visited and features used
• Session duration and timestamps
• Error logs and crash reports

2.3 Cookies and Local Storage

HomeOps uses:

• Essential cookies — required for authentication and session management (Supabase Auth cookies)
• localStorage — used to store your household ID on tablet kiosk devices and user preferences
• Analytics cookies — with your consent, used for platform improvement (Google Analytics, Microsoft Clarity)

You can manage cookie preferences via the cookie consent banner on the Platform.

3. How We Use Your Information

We use your personal information to:

| Purpose | Legal Basis | |---------|-------------| | Provide and maintain the HomeOps service | Contractual necessity | | Authenticate users and manage sessions | Contractual necessity | | Generate payslips and HR records | Contractual necessity | | Send account-related emails (password reset, invite links) | Contractual necessity | | Monitor platform performance and fix errors | Legitimate interest | | Improve the Platform based on usage patterns | Legitimate interest (with consent for analytics) | | Comply with South African legal obligations | Legal obligation | | Prevent fraud and unauthorised access | Legitimate interest |

We do not use your personal information for advertising or sell your data to any third party.

4. How We Share Your Information

4.1 Within Your Household

Information you add to HomeOps is shared within your household in accordance with the role permissions you have configured. Parent accounts have access to all household data. Staff and child accounts have access only to the data relevant to their role.

4.2 Service Providers

We share your information with trusted third-party service providers who help us operate the Platform:

| Provider | Purpose | Location | |----------|---------|----------| | Supabase | Database, authentication, file storage | EU / USA | | Stripe | Payment processing | USA | | Vercel | Hosting and deployment | USA | | Google Analytics | Usage analytics (with consent) | USA | | Microsoft Clarity | Session recording and heatmaps (with consent) | USA | | Sentry | Error monitoring | USA |

All service providers are contractually required to protect your data and may only process it for the purposes we specify.

4.3 Legal Requirements

We may disclose your information if required to do so by law or in response to a valid legal process, such as a court order or regulatory request.

4.4 Business Transfers

If AMAI Automation is involved in a merger, acquisition, or sale of assets, your information may be transferred as part of that transaction. We will notify you before your information is transferred and becomes subject to a different privacy policy.

5. Data Retention

We retain your personal information for as long as your account is active:

• Active account — data retained indefinitely while the subscription is active
• Cancelled account — data retained for 12 months after cancellation
• Suspended account — data retained for 12 months after archiving, then permanently deleted
• Payslips and HR records — retained for 5 years to support potential employment disputes and tax compliance
• Server and error logs — retained for 90 days

You may request deletion of your data at any time by contacting support@homeops.co.za. Note that some data may be retained for legal compliance purposes even after a deletion request.

6. Data Security

We implement industry-standard security measures to protect your personal information:

• All data is transmitted over HTTPS (TLS encryption)
• Passwords and PINs are stored as cryptographic hashes (bcrypt and SHA-256 respectively)
• Database access is controlled via Row Level Security (RLS) policies
• Authentication is managed by Supabase Auth with secure session cookies
• Service role keys are never exposed to client-side code
• Regular backups are performed and tested

No method of transmission over the internet or electronic storage is 100% secure. While we strive to use commercially acceptable means to protect your information, we cannot guarantee absolute security.

7. Children's Privacy

HomeOps allows households to create child profiles (users under 18). Child profiles are created and managed by the parent account holder, not by the child directly.

Child profiles have restricted access and cannot access financial data, HR records, or full administrative features. All data relating to child profiles is subject to the same protections as adult profile data.

If you believe a child's data has been collected without appropriate parental consent, please contact us at support@homeops.co.za.

8. International Data Transfers

Some of our service providers are located outside South Africa (see Section 4.2). When your data is transferred internationally, we ensure it is protected by:

• Contractual data processing agreements with our service providers
• Using providers who are certified under international data protection frameworks

9. Your Rights

Under the Protection of Personal Information Act 4 of 2013 (POPIA) and applicable privacy law, you have the right to:

• Access — request a copy of the personal information we hold about you
• Correction — request correction of inaccurate or incomplete information
• Deletion — request deletion of your personal information (subject to legal retention requirements)
• Restriction — request that we restrict processing of your information in certain circumstances
• Objection — object to processing based on legitimate interest
• Data portability — request your data in a structured, machine-readable format
• Withdraw consent — withdraw consent for analytics or marketing at any time

To exercise any of these rights, contact us at support@homeops.co.za. We will respond within 30 days.

You also have the right to lodge a complaint with the Information Regulator of South Africa: Website: inforegulator.org.za Email: inforeg@justice.gov.za

10. Cookies

10.1 What We Use

| Cookie Type | Purpose | Can Opt Out | |-------------|---------|-------------| | Essential | Authentication, session management | No — required for the service to work | | Analytics | Google Analytics — page views, usage patterns | Yes — via cookie consent banner | | Session Recording | Microsoft Clarity — heatmaps and recordings | Yes — via cookie consent banner |

10.2 Managing Cookies

You can manage cookie preferences at any time via the cookie consent banner on the Platform. You can also control cookies through your browser settings, though this may affect Platform functionality.

11. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by email or via a notice on the Platform at least 14 days before the changes take effect. Your continued use of HomeOps after the effective date constitutes acceptance of the updated policy.

12. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or your personal information, please contact:

AMAI Automation — Privacy Enquiries Email: support@homeops.co.za Website: homeops.co.za

Information Officer: AMAI Automation Registered address: South Africa

This Privacy Policy was last updated on 1 June 2025.