About
Honeydo keeps your to-dos and shopping lists, and shares the ones you choose with the people you live with. Nudge something up someone's list, poke them about it, and set reminders that come back when you need them.
What we store
Your name, a scrambled copy of your PIN (never the PIN itself) and your time zone. No email, no phone number, no location tracking.
If you're in a household: its word, who's in it, and who asked to join (and the word they typed) for 7 days. Your household sees only the lists you make Visible or Shared, never your Private ones. Nobody can find a household without its word, and nobody gets in until someone there says yes.
Your lists are private and encrypted. Before anything you type is saved (list names, items, notes, units like “lb”, household words), the app scrambles it with a secret key that's kept apart from the database, so the database holds only scrambled text: anyone looking inside it sees gibberish, not your lists. The admin page shows only account names, when each account was made and last used, and a button to reset a forgotten PIN; it never shows anyone's lists. People's names, numbers like “2”, dates, priorities and repeat settings aren't scrambled, because the app needs them to sort, count and remind.
Pokes and reminders: who poked whom and when, the short message (scrambled like your lists), and the answer. Your inbox keeps them for 30 days. Reminders keep their words (scrambled) and their times, which stay plain so they can go off on time. If you turn notifications on, we keep this phone's notification address (scrambled). The words travel encrypted to your phone, so Apple's or Google's notification service can't read them, but they show on your lock screen unless you choose “Only who it's from” on Me.
Recipes: only the title, the link and the list of ingredients (all scrambled), never the steps or photos, and only in your own recipe box. When you paste a link, the app reads that one page and nothing else. When the page has no ingredient list, or you paste a whole recipe or a photo of a cookbook page, that text or photo goes to Google's Gemini to pick out the ingredients, and you check them before anything is added. Google is asked not to keep the conversation (it keeps short-term logs to catch misuse). Photos aren't kept, here or there.
To be honest about the limits: the app has to unscramble your lists to show them to you and your household, so the person who runs the site holds the key and could in principle unscramble them. There's no screen for that. Deleting your account (on the Me page) deletes everything.