Privacy Policy

Last updated: October 2026

Version 2.1

1. Introduction

House Of Order is the service name. House of Order LTD, company number 17256221, is the company operating the House Of Order app ("the App") and is the data controller. This Privacy Policy explains how we collect, use, store, and protect your information and should be read alongside our Terms of Use.

2. Data We Collect

  • Account Information: Email address, name, and profile picture, including a basic profile photo supplied by your sign-in provider where available.
  • User-Generated Content: Journal entries, reflections, prayers, vision statements, coaching homework, Community Coaching posts and comments, reactions, reports, blocks, and other written content.
  • Coaching Data: Session reports, transcripts, messages, homework, and check-in responses exchanged with your coach.
  • Uploaded Files: Documents (PDFs, DOCs) uploaded by you or your coach for coaching purposes.
  • Health & Fitness Data: Workout logs, dietary preferences, and meal plans (if you use these features).
  • Financial Data: Budgets, spending plans, recurring commitments and, where you choose to connect a supported provider, bank-account and transaction data needed for the finance features.
  • Usage Data: App interactions, feature usage, and navigation patterns (with your consent and anonymised where possible).
  • Preferences: Notification settings, voice preferences, timezone, and display settings.

3. Why We Collect Data (Purpose)

  • To provide and personalise the App's features
  • To generate AI-powered reflections, prompts, and journey content
  • To facilitate coaching relationships and communication
  • To track your progress and achievements
  • To send notifications and reminders you've opted into
  • To improve and develop the App (using anonymised/aggregated data)
  • To fulfil legal and regulatory obligations

4. Lawful Basis for Processing (UK GDPR)

  • Consent: For optional personalised AI, sensitive-data AI where applicable, analytics, and marketing choices.
  • Contract: Where processing is necessary to provide the service or coaching features you have requested.
  • Legitimate Interests: Where appropriate for service security, fraud/misuse prevention, operational administration and service-related communications, balanced against your rights.
  • Legal Obligation: Where processing is needed to comply with applicable law.

The precise lawful basis can differ by processing activity. Optional AI consent is not used as a substitute for a lawful basis where another basis is required.

5. Special Category Data

The App may contain information that falls within special categories under UK GDPR, including religious or philosophical beliefs (for example spiritual reflections, prayers or scripture engagement) and health-related information (for example wellbeing, fitness or dietary information). Personalised AI and sensitive-data AI are separate choices. Sensitive information is not intended to be sent to an AI service unless the relevant sensitive-data AI choice is enabled for that person and the feature requires it. You can change these AI choices in Settings.

6. How AI Processing Works

AI is optional. When personalised AI is enabled and you start a feature that needs it, you expressly allow House Of Order to send the minimum relevant context to Base44-managed AI and, depending on the feature, approved third-party AI processors such as OpenAI or ElevenLabs to create the output you requested. Where spiritual/religious or health/wellbeing information is needed, sensitive-data AI must also be enabled.

Supported AI pathways use a server-side permission check and are designed to remove obvious contact identifiers such as email addresses and phone numbers where practical. This is data minimisation, not a guarantee that free text is anonymous.

Depending on the feature, processing may use Base44-managed AI, OpenAI, ElevenLabs, or another approved processor. House Of Order does not use your personal content to train a House Of Order AI model. External providers process requests under their business/API terms and our processor controls.

Coach-mediated Journey and coaching drafts are intended to support human judgement and remain subject to coach review before client publication. Self-service AI features may return suggestions directly to you.

7. How Messages Are Stored

Messages between you and your coach are stored securely and are accessible only to you, your assigned coach, and authorised administrators. Messages are not used for marketing purposes or shared with third parties beyond what is necessary to provide the service.

8. Analytics & Tracking

We may collect anonymised usage data (e.g., pages viewed, features used) to improve the App. We do not track or include sensitive content (journal text, prayer content, coaching transcripts, health details) in analytics data.

First-party usage analytics require your explicit consent. The in-app analytics choice controls House Of Order usage analytics and is not Apple's App Tracking Transparency permission. You can change your choice at any time through Settings → Analytics & Marketing.

We do not currently use device advertising identifiers (IDFA/GAID) or track you across other companies' apps or websites for advertising. If a future native release introduces activity that Apple defines as tracking, the required Apple permission will be requested before that tracking begins.

9. Third-Party Processors

  • Base44 for the application platform, hosting, database, authentication and managed integrations
  • AI providers such as OpenAI for selected reasoning or transcription features where configured
  • ElevenLabs for approved speech/audio generation features
  • Google Workspace APIs where you or House Of Order connect Calendar, Drive, Gmail or Meet-related workflows
  • Stripe for web/PWA paid membership billing and subscription management
  • Apple App Store / StoreKit for iOS digital subscription purchases, renewal status, restoration and entitlement verification
  • Open-banking providers such as TrueLayer only when those integrations are enabled and authorised

We maintain an internal processor register and review processor terms, data categories, regions and transfer safeguards. We do not sell your personal data.

10. Data Retention

We retain your data for as long as your account is active and as needed to provide the service. When you request account deletion, personal data is removed or anonymised within 30 days, subject to any legal retention requirements. Anonymised/aggregated data may be retained for analytical purposes.

Different categories have different retention rules. Some records are removed through scheduled cleanup, while account-linked records — including Community Coaching posts, comments, reactions, member blocks and moderation reports linked to the account — are removed through the account-deletion process or when their parent record is deleted. The public retention schedule reflects the cleanup rules configured in the service.

For full details, see our Data Retention Policy.

10a. Automated Decision-Making & Profiling

The App uses AI to generate or suggest personalised content such as reflection prompts, Journey drafts, workout ideas and coaching summaries. House Of Order does not intend these systems to make solely automated decisions that produce legal or similarly significant effects. Where automated processing is relevant to your rights, you may:

  • Know when automated decision-making is used
  • Understand the logic involved
  • Request human review of any automated output
  • Object to automated processing

Coach-mediated AI outputs are reviewed by your coach before client publication. Self-service AI suggestions remain editable or optional. AI does not control account access, subscription status, payment status, actual finance totals, workout-completion state or other application facts with legal or similarly significant effects.

For a detailed explanation, see How AI Works.

11. Your Rights

Under UK GDPR and applicable data protection laws, you have the right to:

  • Access: Request a copy of your personal data
  • Rectification: Correct inaccurate data
  • Erasure: Request deletion of your data
  • Restriction: Request restriction of processing
  • Portability: Export your data in a portable format
  • Objection: Object to certain processing
  • Withdraw Consent: Withdraw consent at any time

You can exercise these rights through the Data Rights section in Settings or by contacting us.

12. California Privacy Rights (CCPA)

If you are a California resident, you may have additional rights including: the right to know what personal information we collect; the right to request deletion; and the right to non-discrimination for exercising your privacy rights. We do not sell personal data. We do not share personal data for cross-context behavioural advertising. Contact us to exercise your California privacy rights.

13. International Transfers

Your data may be processed by providers whose infrastructure or support operations are outside the UK. We review the relevant provider, processing region and applicable transfer mechanism before production approval and maintain these details in our processor register. Appropriate contractual or legal safeguards are used where required.

14. Security

We implement appropriate technical and organisational measures to protect your personal data against unauthorised access, alteration, loss, or destruction. These include encryption, access controls, and regular security reviews.

15. Children's Privacy

The App is not intended for individuals under the age of 18. We do not knowingly provide accounts for children. App-store age ratings are configured through each store's required age-rating process and may vary by platform or region.

15a. Mobile App Specific Disclosures

When using the House Of Order mobile app (iOS or Android):

  • We do not access your device contacts, camera roll, or microphone beyond features you explicitly initiate (e.g., profile picture upload, voice notes).
  • We do not use background location tracking.
  • Push notifications are opt-in and can be disabled at any time through your device settings or the app's Settings page.
  • We do not use device advertising identifiers (IDFA/GAID) for cross-app tracking or advertising.
  • Data is transmitted to our servers using HTTPS encryption.
  • You can initiate permanent account deletion directly within the app via Settings → Delete Account. The app blocks access while deletion runs and confirms completion before signing you out in the normal deletion flow.

16. Changes to This Policy

We may update this Privacy Policy to reflect changes in our practices or legal requirements. Material changes will be communicated to you and may require your re-acceptance.

17. Contact Us

For privacy questions or to exercise your rights, email aiden@houseoforder.co.uk or write to House of Order LTD, 163 Empire Court, North End Road, Wembley, United Kingdom, HA9 0AJ.

You may also complain to the Information Commissioner's Office at ico.org.uk/make-a-complaint. We would appreciate the opportunity to address your concern first.