Local first, explained plainly
Local first means the app’s working records are stored on the device and remain useful without requiring every action to pass through a HouseManual account or central cloud database. It does not mean the device can never communicate with the internet.
When a user chooses an online feature—such as cloud backup, Apple or Google authorization, a public manual search, a product-safety lookup, or an external support link—the minimum relevant information is sent to that provider or public source.
Automatic backup is not the same as a handoff
| Capability | Purpose | Who controls it |
|---|---|---|
| iCloud backup | Private recovery through the Apple account and app container | User and Apple platform settings |
| Google Drive backup | Private recovery through the authorized hidden app-data area | User and Google account permissions |
| Manual archive | User-created copy for safekeeping or recovery | User chooses destination and handling |
| Home handoff | Readable or structured delivery to another person | User selects content and recipient |
Backups are meant for recovery. Handoffs are meant for another person. Keeping them separate makes the purpose and privacy decision clearer.
Google Drive access is intentionally narrow
Where supported, Google Drive backup uses the app-data storage scope designed for an application’s own hidden backup files. It is not intended to browse, read, or organize the user’s general Drive documents. Google sign-in and consent identify the account and authorize that limited backup purpose.
Review every export
A private app can still produce a sensitive file if sensitive information was entered. Before sharing, inspect the generated PDF, structured data, photographs, and every attachment. Think especially carefully about:
- Access codes, account details, or network credentials
- Names, phone numbers, email addresses, and signatures
- Receipts, warranty claims, and service reports
- Photographs that reveal valuables, keys, labels, or personal life
- Instructions that reveal when the home is unoccupied
Security is a shared practice
Use device passcodes, current operating-system updates, platform account protections, and encrypted transfer channels. Remove access when a device or property changes hands. No storage method can eliminate every risk, so record only what has durable value.
For the formal description of current data practices, read the HouseManual Privacy Policy.