Legal

Privacy Policy

Last updated: October 16, 2026

1. Introduction

HomeIQ Academy ("we," "our," or "us") is committed to protecting the privacy of our users. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our mobile application and web platform (collectively, the "Service").

2. Information We Collect

Account Information: When you create an account, we collect your name, email address, phone number, and password.

Financial Profile Data: To show where you stand, we collect self-reported financial information including credit score range, monthly income, monthly debts, down payment savings, and target home price. We do not pull your credit report or access your bank accounts.

Readiness Check Answers: When you take the readiness check at /ready, we save your answers, including the ranges you pick for the home price, income, monthly debt payments, and savings, with a random session ID and any campaign tags in the link you followed. We save them even if you do not create an account, so your result can be shown to you. If you save your plan, they are carried into your account as your starting numbers.

Learning Progress: We track which lessons you complete, quiz scores, points earned, and module progress.

Simulator Usage: We collect data from your interactions with our financial simulators, including mortgage calculations, affordability estimates, and scenario inputs you provide.

Messages: We store messages exchanged between you and your real estate agent within the app.

Closing Information From Your Agent: When your agent marks that you closed on a home, we record that you closed and the month, and we save the month you started, how many lesson steps you finished, how many tools you used, and how many messages you sent your agent. With your agreement, your agent may also add a photo of you and your first initial and last name. This comes from your agent, not from you; see Closing Highlights in section 5.

Device Information and Push Notifications: We collect device tokens to send you push notifications about lesson reminders, score updates, and messages from your agent. You can disable push notifications in your device settings at any time.

Usage Data: We collect standard analytics including device type, operating system, pages visited, and app interactions to improve the Service. Analytics tools that run in your browser, and Sentry session recording (if enabled), run only if you accept them (see sections 8 and 9). A few account events are also recorded by our servers, as described in section 4.

3. How We Use Your Information

  • Provide, operate, and maintain the Service
  • Show and update where you stand in credit, debt, cash to close, and confidence
  • Track your learning progress across modules
  • Power financial simulators with your inputs
  • Enable communication between you and your real estate agent
  • Send push notifications for lesson reminders, score changes, and agent messages
  • Send transactional emails (onboarding confirmation, score alerts, module completion)
  • Send SMS text messages, where you have opted in to them
  • Analyze usage patterns to improve and optimize the Service
  • Show closing highlights on our homepage and share pages, and let your agent make images of them for social media (section 5)

4. Third-Party Services

We use the following third-party services to operate the platform:

  • Supabase: Authentication and database hosting.
  • PostHog: Product analytics. On the website, PostHog loads in your browser only after you click Accept on our cookie banner; its session recording and heatmaps are turned off. Separately, for signed-in accounts, our servers send PostHog a few account events, such as a lesson completed or an update to where you stand, tied to an internal account ID rather than your name or email. We skip these server events when your browser sends Global Privacy Control.
  • Stripe: Payment processing for agent subscriptions.
  • Resend: Transactional email delivery.
  • Google Analytics: Website traffic analytics, if we have it turned on. It loads only after you click Accept.
  • Twilio: SMS delivery, where you have opted in to text updates.
  • Sentry: Error monitoring and diagnostics, when enabled. Error reports do not depend on your cookie choice. If we enable Sentry Session Replay, which records a replay of your visit (clicks, scrolling, and page changes, with on-screen text and form entries masked) when an error happens, it runs only if you clicked Accept.
  • Anthropic: Until October 16, 2026, drafting check-in messages from buyer profile information. No longer used (see section 13).
  • Vercel: Application hosting, and Vercel Web Analytics, which counts page views without cookies. We turn it off when you decline or when your browser sends Global Privacy Control or Do Not Track.

These providers process data on our behalf under their respective data processing agreements.

5. Information Sharing

We share your information only in the following circumstances:

  • With Your Agent: Your real estate agent can view where you stand in each area, your progress, a summary of your financial profile, and messages you send them.
  • Closing Highlights: When your agent marks that you closed on a home, a card about your journey appears on our homepage right away, and your agent can hide it at any time. While it is shown, your agent can also share it on a share page and as images for social media. The card shows the month you closed, the month you started, how many lesson steps you finished, how many tools you used, and, if you messaged your agent, that you kept in touch (not how many messages). It says “A HomeIQ buyer” unless your agent confirms you agreed to more: with your agreement, it can show your first initial and last name (for example, “D. Jones”) and a photo. We remove location and camera data from every photo. The card’s words never include money, credit, income, loan, or address details, but a photo can show more, and a name with the month you closed can be enough for someone to find a home in public property records. To have a card taken down, or your name or photo removed, ask your agent or email support@homeiqacademy.com; we will remove it from our site within 7 days. Copies your agent already posted on social media are controlled by your agent. Deleting your account deletes your card and photo.
  • Service Providers: As described in section 4 above.
  • Legal Requirements: We may disclose information if required by law or to protect our rights.

We do not sell or share your personal information, as California law defines those terms, and we do not use it for cross-context behavioral advertising. There are no advertising pixels on our site, and we do not allow other companies to track you across websites through it.

6. Data Security

We implement industry-standard security measures including encrypted data transmission (TLS), secure authentication tokens, row-level security policies on our database, and secure credential storage on mobile devices.

7. Data Retention and Deletion

We retain your data for as long as your account is active. You may request deletion at any time by emailing support@homeiqacademy.com. We will process deletion requests within 30 days.

8. Cookies and Session Recording

We use essential cookies for sign-in and security. These are always on because the Service does not work without them.

The tools that run in your browser are optional and off by default: PostHog analytics, Google Analytics (if turned on), and Sentry Session Replay (if enabled). They start only after you click Accept on our cookie banner. If you click Decline, or change your mind later, we stop them right away and remove their analytics cookies from your browser. Your choice here covers these browser tools; the server-side account events described in section 4 follow the Global Privacy Control rule in section 9.

You can change your choice at any time with the "Cookie choices" link at the bottom of our web pages:

The HomeIQ mobile app does not show a cookie banner, and it does not run PostHog, Google Analytics, or Session Replay inside the app. Server-side account events (section 4) are still recorded for signed-in app users.

9. Do Not Track and Global Privacy Control

If your browser sends a Global Privacy Control (GPC) signal or a Do Not Track (DNT) signal, we treat it as a decline in your browser: we do not show the cookie banner, and PostHog, Google Analytics, Session Replay, and Vercel Web Analytics do not run there. GPC also turns off the server-side account events described in section 4 for requests your browser sends with the signal. For California residents, we treat GPC as a valid request to opt out of the sale or sharing of personal information. When we detect GPC, the footer says so.

10. Your Rights

Depending on your jurisdiction, you may have the right to access, correct, delete, or port your data.

California Residents (CCPA/CPRA): If you are a California resident, you have the right to: (1) know what personal information we collect and how it is used, and get a copy of it, (2) request deletion of your personal information, (3) correct personal information that is inaccurate, (4) opt out of the sale or sharing of personal information (we do not sell or share your data, and we honor Global Privacy Control as an opt-out), (5) limit the use and disclosure of sensitive personal information (we use sensitive information, such as the financial details you enter, only to provide the Service, as California law allows), and (6) not be discriminated against for exercising your privacy rights. To exercise these rights, email support@homeiqacademy.com. We will respond within 45 days.

11. Children's Privacy

HomeIQ Academy is intended for users 18 years of age and older. We do not knowingly collect personal information from children under 18. If we learn that we have collected information from a child under 18, we will delete it promptly. If you believe a minor has provided us with personal information, please contact us at support@homeiqacademy.com.

12. Data Breach Notification

In the event of a data breach that compromises your personal information, we will notify affected users within 72 hours of discovery via email and, where appropriate, by posting a notice on our website.

13. No AI Services

We do not send your information to artificial intelligence services. Lessons, explanations of where you stand, and lesson suggestions are written in advance by our team and chosen by fixed rules, such as which lesson you are on. Check-in notes, including ones sent automatically from your agent’s account, come from a library of notes written in advance by our team or by your agent and reviewed before use; the app fills in only your first name and the name of your next lesson. Your agent may edit a note before sending it, and other messages from your agent are written by your agent. This content is for education, may contain inaccuracies, and is not financial advice.

Until October 16, 2026, some features sent buyer profile information, such as the financial details you entered and your learning progress, to an AI provider (Anthropic) to draft check-in messages. We turned this off on that date.

14. Contact Us

Questions? Email support@homeiqacademy.com