Privacy policy

1.Our promise, and its only exceptions

That sentence is meant literally. It is about people who would use your information for themselves: contractors, lenders, advertisers, data brokers. Two things sit next to it, and we want you to see them here rather than find them later.

• Service providers. To run the Service we use a small number of providers that handle information only to do a job for us and are not allowed to use it for themselves. Examples are the server that hosts the site and the AI model that reads the quote you paste. They are listed under who handles your information for us. That is not selling or sharing: they receive only what the job needs and act on our instructions.
• The law. If a court order or other legal process requires us to hand something over, we may have to. We will disclose only what the order covers and we will tell you if we are able to. Because we keep very little, there is very little to hand over.

Your request reaches a contractor only when you send it yourself: the app drafts a message and you send it from your own phone or email. We do not contact a contractor, lender or anyone else on your behalf.

2.What we collect

What you give us

• Quote text. The text you paste or dictate when you decode a quote, and the state or ZIP code you enter with it. We use it to produce your result. We do not keep it on our servers unless you choose to save a project to your account.
• Saved in this browser. If you use the "Save in this browser" list, the last few decodes are kept in your browser's own storage on your device. We never receive them, and clearing your browser data removes them.
• Account details, only if you make an account: an email address and a password. The password is stored as a one-way hash, never in readable form. An account is optional and is only needed to save projects.
• Saved projects, only if you choose to save one to your account.
• Waitlist email, only if you leave one to hear about a possible paid pass. We store the address and the date, use it to measure interest and to tell you if the pass launches, and send nothing to it today.
• Messages to us, and anything you tell us in feedback.

What your device sends automatically

• Technical logs. Like any website, our servers see your IP address, browser type, the pages you request and the time. We keep these briefly for security and debugging, and use your IP address to slow down abuse.
• Usage counts. We count a few actions in the app, for example that a quote was pasted, a result was shown, a draft was shared, a finder search ran or a button was clicked, with an analytics tool we host ourselves. The counts carry categories and numbers only, never the text of your quote, your name or your email. See the cookie notice.

What we deliberately do not collect

• Precise location. We never read your device's location. The contractor finder works from a ZIP code you type yourself.
• Payment details. There are no payments in the app today. If that changes, card details would be handled by a payment processor and we would update this policy before it starts.
• Government ID, Social Security or bank account numbers. Please do not paste them into a quote.
• Your contacts, or advertising identifiers.

Public records about contractors

The contractor finder shows license information that state licensing agencies publish as open data. It describes businesses and licensed individuals, not you. We do not store reviews or listings from Google or Yelp; the finder only links out to a contractor's own pages.

3.How we use it

• To read your quote and write the explanation you asked for.
• To draft a quote-request message that you then send yourself.
• To run your account and the projects you save, if you make one.
• To keep the Service secure, prevent abuse and fix problems.
• To count how the Service is used, so we can improve it.
• To answer you when you contact us, and to follow the law.

We do not use your information for advertising, we do not build advertising profiles, and we do not use what you paste or say to train AI models. The explanation you receive is written by an AI model; we do not use it to make any decision about you that has legal or similarly significant effects.

4.Voice and audio

You can speak instead of typing. How that works depends on your device.

• Your browser's built-in dictation. Many browsers, for example Chrome and Safari, offer speech-to-text. When you use it, the browser's maker may send your audio to its own speech service under its own privacy policy. We do not receive that audio and cannot control that service.
• Our transcription fallback. If your browser has no dictation, the app sends the recording to a speech-to-text model through our own server, which returns the words as text. We transcribe the audio and do not store it: it is not written to disk and it is not logged. Once the text comes back it is handled like anything else you type.

5.Photos, documents and videos you attach

When you attach a photo, a document or a short video to a chat message, it travels with that message to our AI provider, Cloudflare Workers AI, for that one answer and is not stored on our servers: it is not written to disk and not logged. A video is never sent as a video; the app sends a few still pictures from it and the words from its sound, transcribed the same way as voice. Conversations saved on your device keep a small thumbnail and the file name of a photo, PDF or video, never the file itself; the words of a text file and the transcript of a video's sound stay in the saved message, because they are part of what you sent. Location data and the other hidden details a camera writes into a photo are removed on your device before anything is sent.

6.Location

We never collect precise location. The app does not use GPS, does not ask your browser for your location and does not read it in the background. The only location we use is a ZIP code you type, to find licensed contractors near it and to apply your state's rules.

To turn a ZIP code into a point on a map we use the U.S. Census Bureau's public geocoder, called from our own server, so your browser does not contact the Census Bureau. The map pictures themselves are loaded by your browser from a map host; see who handles your information for us.

7.AI and what you send it

The Service uses AI models to read what you send and write the answers: the quote you paste when you decode, your chat messages, the photos and documents you attach, and a voice recording when your browser cannot turn speech into text by itself. All of it is handled by Cloudflare Workers AI, a service that runs AI models on Cloudflare's network. It travels there through our own server and a small relay we run on Cloudflare, for that one answer. No other AI company receives it from us. If that ever changes, this page will say so before it starts.

Cloudflare's published data policy for Workers AI says it does not use what you send, or the answers it writes, to train AI models or to improve its own or anyone else's services without the customer's explicit consent, and we do not give that consent. The one case the same policy names where Cloudflare may store this content is when the customer also uses one of its storage services; our relay uses none. Source: Cloudflare Workers AI, "Data usage", last updated April 21, 2026.

• Nothing kept on the way. Our server and our relay pass what you send to the model and the answer back without keeping a copy: nothing is written to disk or logged along the way. Saving is separate: a project you save, and the chats of a signed-in account, are kept in your account, and you can delete them.
• Only what the answer needs. We do not add the email address or name on your account to anything the model receives. In the chat, if you saved a home profile, the model also gets its city, state, ZIP code and the home details you entered.
• No training. We do not give any provider permission to use what you send to train AI models.
• AI makes mistakes. Every screen that shows model output carries a disclosure, and the terms explain what the Service is and is not.

8.Who handles your information for us

These are the providers we use today. Each handles information only to do the job described, on our instructions.

If we add or change a provider that handles your information, we will update this list before it starts.

Business listings come from Overture Maps (overturemaps.org), Places theme. Data from Meta, Microsoft, PinMeTo, Krick, RenderSEO, DAC and BrightQuery, available under CDLA Permissive 2.0. Data from Foursquare, Copyright 2024 Foursquare Labs, Inc. All rights reserved, available under Apache 2.0; Foursquare data was transformed to the Overture schema. Data from AllThePlaces, available under CC0 1.0. Full notices: https://docs.overturemaps.org/attribution/

9.Contractors, lenders and other sites

We do not give contractors, lenders, advertisers or anyone else your information. When you use Share, Email or Copy on a quote-request draft, the message leaves from your own device and what it says is up to you; we count that the button was used and nothing more.

The Service links to websites run by others, for example a contractor's own page, a state licensing board, a rebate program or a utility loan page. Those links are not an endorsement and we do not control those sites. Read their privacy policies. Any financing page we link to belongs to someone else, and we do not pass your details to it.

10.Cookies and similar tools

We use only the cookies and browser storage needed to sign you in and remember your preferences, plus analytics that sets no cookies. There is no advertising or cross-site tracking. The details, with a table, are in the cookie notice.

11.How long we keep things

• Quote text: not stored on our servers unless you save a project.
• Audio: not stored.
• Account and saved projects: until you delete them or ask us to.
• Screenshots of a contact form we filled in for you: kept on our server as proof for up to 30 days, then deleted. Deleting your account removes them too. They are never published.
• Waitlist email: until you ask us to remove it or we tell you the idea is dropped.
• Technical logs: briefly, for security and debugging, then deleted.
• Usage counts: kept as counts without personal information.

When we no longer need information we delete it or strip it of anything that could identify you.

12.Your choices

• Use it without an account. Decoding a quote does not need one.
• See, correct or delete. Ask us using the contact details below and we will act on it. Where the app offers account settings, you can also do it there.
• Saved in this browser. Delete items from that list, or clear your browser's site data.
• Email and texts. We do not send marketing email, and the app does not send text messages.
• Global Privacy Control. We honor the Global Privacy Control (GPC) signal as a valid opt-out request for the sale or sharing of personal information. We do not sell or share personal information, so there is nothing further to switch off, and a GPC signal never changes the promise at the top of this policy.
• Do Not Track. Our analytics tool is told to skip browsers that send a Do Not Track signal, and we do not track you across other websites.
• Declining to give information. To make an account we need an email address. Everything else is optional.

13.Security

We use technical and organizational safeguards designed to protect what we hold, including encrypted connections and one-way password hashes. No system is perfectly secure and we cannot guarantee it. If something happens that the law says we must tell you about, we will.

14.Where information is processed

The Service is built for people in the United States. Our providers may process information in the United States or in other countries, whose privacy laws may differ from your state's.

15.Children

The Service is not for anyone under 18, and we do not knowingly collect information from children. If you believe a child has given us information, tell us using the contact details below and we will delete it.

16.Changes to this policy

When we change this policy we change the version and date at the top. If a change would let us do something less protective with information we already hold, we will ask you first. If the Service is ever transferred to a new owner, it must keep this policy and its promise, and we will say so here before the transfer so you can delete your information first.

17.Privacy rights in your state

Residents of California, Colorado, Connecticut, Virginia, Texas, Oregon and other states with privacy laws may have some or all of the rights below. Not every state grants every right and some rights have exceptions. This section is also our notice at collection for California residents.

• Know and access. Ask what categories of personal information we hold about you, where it came from, why we use it and who receives it, and get a copy.
• Correct. Ask us to fix inaccurate information.
• Delete. Ask us to delete the personal information we collected from you.
• Opt out of sale, sharing, targeted advertising and certain profiling. We do none of these, so there is nothing to opt out of; see the Global Privacy Control sentence under your choices.
• Appeal. If we deny a request, you can appeal by replying to our answer, and you may also contact your state attorney general.
• No retaliation. We will not treat you differently for using these rights.

To make a request, use the contact details below. We may need to confirm it is you, for example by matching the email on an account, and we may ask for written permission before acting for an agent you name.

We do not disclose personal information to third parties for their own direct marketing (California's Shine the Light law), we do not sell sensitive personal data, and we have no actual knowledge that we sell or share the personal information of anyone under 16. Nevada residents who want us to confirm that we do not sell covered information can ask using the contact method below.

18.How to contact us

For questions about this policy or to use any right above, contact us at [email protected].

You can also remove anything saved in your browser yourself, at any time, by clearing the site's data in your browser settings.