Corizo Apps
Privacy policy
Pre-release policy draft for review. Operational deletion, retention and moderation verification is still pending. This is not a declaration of Play compliance.
Version 2026-10-19.1
Who provides Corizo
Corizo Apps. Privacy and deletion enquiries: corizoapp@gmail.com. Policy version 2026-10-19.1.
Data used to run your home
Corizo stores account identifiers and sign-in email, your chosen display name and avatar or profile photo, household membership, room participation, available weekdays, tasks and completion history. It also stores grocery lists and optional photos, bill amounts and payment records, household plans, bookings, visits and information you choose to enter. Bills record payments made elsewhere; Corizo does not move money or collect card numbers. Do not enter sensitive information about someone else without permission.
Who can see it
Shared household content is shown to authorized household members according to its permissions. Private rooms and personal progress have separate access controls. Profile photos and names identify you to your housemates. Reports and block settings are private to the reporter and authorized service operators. Blocking hides optional content; it does not cancel shared financial or task responsibilities. A household is not a public social feed.
Optional ChatGPT connection
If you explicitly connect ChatGPT, OpenAI receives the task details requested through that connection, including your visible private tasks and, when requested, task notes. Each response includes your household identifier and timezone and current member names and membership identifiers for task assignment, even when no tasks match. Task details can also include room and category names. Account and connection identifiers are used to authorize access. Read-only access lets ChatGPT view permitted tasks; optional write access lets it create, edit and complete tasks using your existing household permissions. This connection exposes tasks and this task-related context; it does not grant access to the rest of your household records. Review the account, household and permissions before approving. You can stop future task access in Corizo > You > Connected apps. Disconnecting does not delete information the other service has already received, such as information in your ChatGPT conversations. That service's own terms and privacy settings also apply.
Service providers and security
Supabase provides account authentication, database and private photo storage. Resend is configured to deliver authentication emails and processes the recipient email address and sign-in message. Google or Apple handles sign-in when you choose that provider. Optional phone notifications use the operating system; remote push, when enabled, also uses Expo and the relevant delivery provider. Hosting and authentication services may process IP addresses and technical/security logs to operate the service. Data is transmitted using HTTPS; access controls restrict server data. No system can promise absolute security. Corizo does not sell personal data or intentionally use advertising identifiers. PostHog analytics is a planned integration, not enabled app analytics in this build; disclosures must be updated before enabling it.
Photos, camera and notifications
Photos are optional. Corizo uses the system picker for a photo you select; taking a photo requires camera permission. Selected profile photos are shared with your household, and grocery photos with authorized list members. You can decline permissions and continue using other features. Notification permission is optional and can be changed in phone settings. Corizo does not request contacts, location or microphone access. Modern Android uses the system photo picker instead of broad photo-library access. On older Android versions, taking a grocery photo may also require legacy storage write permission to save the camera image.
Retention and account deletion
Delete my account is available in account settings and at the external Delete account page. Leaving a household is different from deleting an account. A deletion request removes profile and household access immediately; backend processing must also remove the Auth account and owned media and erase attributable personal content. Shared obligations and audit/financial records may remain where necessary for other members, security or legal obligations; remaining identifiers must be minimized. These retained records are not assumed to be anonymous. The exact lawful retention basis and final processing timeline still require operator confirmation. Configured cleanup targets are one day for never-attached orphan photos, 30 days for terminal notification records and seven days for backup copies; live cleanup and backup expiry are not yet verified. Reports and the independent deletion journal have no automatic purge period configured. The app must not be released on the basis of these draft targets alone.
Your choices and requests
You can edit your name/avatar, replace a photo, choose shared rooms and availability, change notification preferences, leave a household or request account deletion. Use Support for data access, correction, deletion and privacy questions: corizoapp@gmail.com. We may need to verify account ownership; never send a password, sign-in code or invitation code. Material changes to these practices will require updated disclosures.