Your household's data, stays yours

What we store per household

madhaus organizes your life around the household. When you create an account and set up a household, we store the information you give us so the agents can do their job:

• Account & membership — your email, a display name, and your role within a household (partner, caregiver, etc.). Households are joined by invite code, and only members of the same household can see each other's shared items.
• The Offload inbox — the thoughts and tasks you drop (as text, images, audio, or PDFs) and the AI-generated category, urgency, next step, and assignee for each one.
• The Vault — the family profiles and freeform fields you save so forms can be auto-filled (names, birthdays, allergies, doctor contacts, and anything else you choose to enter). You decide what goes in; madhaus never invents fields.
• Meal plans & grocery lists — the meal plans you generate and the aisle-grouped grocery items madhaus builds from them.
• Repeating templates — the recurring inbox items you set up and how often they should reappear.
• Calendar connections — when you connect Google Calendar or Microsoft Outlook, madhaus reads event times to detect scheduling conflicts. madhaus stores a copy of event times and titles needed for conflict detection; it does not store the full contents of your calendar.
• Form results — when you upload a form, madhaus reads it, drafts answers from your Vault, and can email the completed result back to you.

How AI processes your data

madhaus uses AI to triage inbox items, build meal plans, and fill forms. To do that, the relevant text from your drop (or your Vault fields) is sent to our AI provider and used only to produce the result for your household. We do not use your household's data to train models, and providers we work with are instructed not to retain your inputs beyond what's needed to return a response.

The grocery cart export

When you build a grocery list, madhaus gives you several ways to get it into your real shopping list. Here's exactly what each one does:

• Plain text & Apple Reminders — the list is formatted as text and either copied to your clipboard or handed to Apple's Shortcuts app on your device. The items never leave your device for these options.
• Google Keep — madhaus copies the list and opens Google Keep in your browser so you can paste it into a new note.
• Store search links — for Walmart, Amazon Fresh, Target, or Instacart, madhaus generates search links for each item that open the store's site in your browser. No items are sent to the store; the links just take you there.

The Instacart API key

The direct Instacart cart auto-fill (in beta) uses the Instacart Developer Platform. Here's how the key and your data are handled:

• The Instacart API key is a server-side secret stored by madhaus. It is never exposed to your browser, never included in client code, and never logged.
• When you choose to send a list to Instacart, madhaus's server sends your item names and quantities to Instacart to build a pre-filled shopping list, and returns a link that opens that list in Instacart.
• Only the items in the list you choose to export are sent — not your Vault, your meal plan history, or any other household data.
• Once Instacart returns the link, the rest happens on Instacart's site and under Instacart's own terms and privacy policy. madhaus has no access to your Instacart account, payment, or checkout.

Connected accounts (Google & Microsoft)

madhaus connects to Google Workspace and Microsoft 365 through their official sign-in so it can read calendars and email. We request only the scopes we need (calendar and, where you enable it, email), and you can disconnect at any time from settings — madhaus then stops syncing and removes the stored event copies. madhaus never posts or sends on your behalf without an action you started.

Keeping and deleting your data

We keep your household's data for as long as your account is active so your inbox, Vault, and plans persist. You can delete individual items at any time, and you can delete your account — which removes your household's data — by contacting us or from account settings. Calendar event copies are removed when you disconnect a source.

Who can see your data

Only members of your household can see shared household items; access is enforced per household in the database. We do not sell your data, and we do not share it with advertisers. We share data only with the providers needed to run the feature you're using (for example, Instacart for cart auto-fill) and only the minimum required for that action.

Children's information

madhaus is meant to be used by parents and other adult household members. We store the details about your children that you choose to add to the Vault (so forms can be filled), but children do not have their own accounts and we do not knowingly collect information directly from children. You can remove a child's profile and its fields at any time.

Questions or requests

For access, correction, or deletion requests, or any privacy question, reach out from the support contact in your account. We'll respond and act on verified requests from a household member.