Privacy policy

Last updated: 29 September 2026

Who we are

Grihaz is a household management app available at app.grihazhome.com. It is developed and operated by Rhyea, based in Mumbai, India ("we", "us", "our"). This policy explains what information Grihaz collects, how we use it, who we share it with, and the choices you have.

Information we collect

Account information

Your email address, which you use to sign in with a one-time code sent to your inbox. We do not use passwords.

Household information you enter

• Your home's name and the members you invite to it, identified by their email addresses.
• Details of your domestic staff and service providers: names, roles, work schedules and pay terms.
• Attendance records, extra work, deductions, payments and monthly settlements.
• Laundry records, such as items given, service type, price and whether they were returned.
• Household expenses you add yourself.

Information from Gmail, if you connect it

Connecting Gmail is optional. The section below, "How Grihaz uses Gmail data", explains exactly what is accessed.

Technical information

Our hosting and database providers keep standard server logs, such as IP address, browser type and the time of a request, to operate and secure the service.

How Grihaz uses Gmail data

What we ask Google for

• Read-only access to your Gmail (the gmail.readonly permission). Grihaz can read messages but cannot send, modify or delete anything in your mailbox.
• Your Gmail address (the userinfo.email permission), so you can see which account is connected.

What we read

Grihaz searches only for order confirmation and receipt emails from the shopping and delivery platforms you turn on in the app (for example Amazon, Blinkit or Zomato). It does not read other emails in your mailbox.

What we do with it

• When a sync runs, our server fetches the matching confirmation emails.
• The text of each matching email is sent to our AI processing provider, Anthropic, which extracts the store name, order date, order number, amount, items purchased, a spending category and a short note describing the order.
• Those extracted details are saved as expense entries in your household's ledger, visible only to members of your home.
• The email itself is not stored. Only the extracted order details are kept.

Access tokens

When you connect Gmail, Google gives Grihaz an access token so that syncing can happen without asking you to sign in each time. The token is stored on our servers and used only to fetch confirmation emails for your household. It is deleted when you disconnect Gmail.

Disconnecting

You can disconnect Gmail at any time from your Profile in the app. You can also remove Grihaz's access from your Google account at myaccount.google.com/permissions. Either way, Grihaz stops reading your email immediately. Expense entries already added stay in your ledger until you delete them.

Google API Services User Data Policy

Grihaz's use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements. In particular:

• We use Gmail data only to provide and improve the expense tracking feature you can see in the app.
• We transfer Gmail data to others only as necessary to provide that feature (to Anthropic, for extracting order details), to comply with the law, or as part of a merger or acquisition with notice to you.
• We do not use or transfer Gmail data for advertising, including personalised or interest-based ads.
• We do not sell Gmail data.
• We do not use Gmail data to develop, improve or train generalised AI or machine learning models.
• No person at Rhyea reads your Gmail data unless you give us permission for specific messages (for example, to fix a problem you report), it is necessary for security, or it is required by law.

How we use your information

• To provide Grihaz: recording attendance, calculating pay, tracking laundry and showing expenses.
• To sign you in and keep your account secure.
• To let members of the same home see and update the same records.
• To send you service emails, such as sign-in codes and invitations.
• To find and fix problems with the service.

We do not use your information for advertising and we do not sell it.

Who we share information with

We share information only with the providers that run Grihaz, and only what each needs to do its job:

• Supabase hosts our database, sign-in system and server functions.
• Cloudflare hosts the app and website and protects them from attacks.
• Anthropic processes the text of order confirmation emails to extract order details. Under its commercial terms, Anthropic does not use this data to train its models.
• Resend delivers our sign-in and invitation emails.
• Google provides access to Gmail when you choose to connect it.

We may also disclose information if required by law or to protect the safety and rights of our users.

How long we keep information

• Household records are kept for as long as your account exists, so you can look back at past months.
• Gmail access tokens are deleted as soon as you disconnect Gmail.
• Raw email content is not stored after the order details are extracted.
• If you ask us to delete your account, we delete your account and household data within 30 days, except where the law requires us to keep it.

Your choices and rights

Under India's Digital Personal Data Protection Act, 2023 and other applicable laws, you can:

• See and correct the information in your household records within the app.
• Disconnect Gmail at any time.
• Ask us for a copy of your data, or ask us to delete your account and data, by emailing [email protected].
• Withdraw your consent to our processing, which may mean you can no longer use Grihaz.

Security

All traffic to Grihaz is encrypted in transit. Household data is protected by access rules in our database so that only members of a home can read or change that home's records. No system is perfectly secure, but we work to protect your information and will tell you if a breach affects your data.

Children

Grihaz is meant for adults managing a household. It is not intended for anyone under 18, and we do not knowingly collect information from children.

Changes to this policy

If we change this policy, we will update the date at the top of this page. If a change significantly affects how we use your information, we will tell you in the app or by email before it takes effect.

Contact and grievances

For questions, requests or complaints about your data, email [email protected]. We aim to reply within 7 days.