Privacy Notice
Version 2026-09-15
What we collect
Your account details (email address and name), the property information you add (addresses, appliances, materials, contractors, paints, maintenance records, notes), the photos and documents you upload, and basic technical data needed to run the service such as sign-in times and error reports.
Public county and assessor records looked up for your address are stored alongside your property so your timeline works offline of those sources.
How we use it
Only to provide Hili: storing your records, generating previews and thumbnails, reading documents you ask Hili to read, building your timeline and schedules, and supporting you when you ask. We do not sell your data and we do not use your photos or documents to train public AI models.
When Hili reads a document or photo for you, its contents are sent to an AI provider solely to produce that result and are not retained by us for any other purpose.
A few features look things up on your behalf using only the minimum needed: your property's approximate location for weather alerts and aerial maps, and a paint's brand and color code when you ask Hili to find the manufacturer's official swatch. No photos, names or documents are sent for these lookups.
Who can see your data
You, and anyone you explicitly invite to your property. Every record in Hili is locked to its owner at the database level by per-user access rules, so one account cannot read another's data — including through the app, the API, or a shared link you have not created.
Hili staff, including the owner of Hili, cannot browse your photos, documents, or records. Administrative access exists only for support cases you specifically ask us to look into, and every such access is written to a tamper-proof log recording who looked, at which property, why, and when. You can see entries about your own property in your account.
Please keep especially sensitive information out
We protect your data with encrypted storage, encrypted transport, per-user access controls, and optional two-factor and biometric sign-in. Even so, no online service is risk-free. We recommend you do not upload government identification, social security numbers, financial account or card numbers, medical records, or passwords. Redact them before uploading.
Where it is stored and for how long
Your data is stored with our cloud infrastructure providers on encrypted disks. We keep it for as long as your account is open. When you delete an item it is removed from active systems; when you close your account your content is removed and encrypted backups age out on their normal rotation.
Payments
Card details are never seen or stored by Hili. Payment is handled entirely by our payment provider, which processes the card and tells us only your plan and status. Apple Pay and Google Pay pass a device token, not your card number.
Your choices
You can view, edit, export, or delete your data at any time from the app, turn on two-factor authentication and biometric unlock, see the access log for your property, and close your account. To ask about data we hold, contact us through the app.
Contacting support
Support runs through the Hili assistant in the app. Hili answers what it can on its own. When it cannot, it will ask your permission before sending anything on. Only if you say yes do we receive your message along with that conversation, your email address, your plan status, and basic details about the screen and device you were using — never your photos or documents. Support conversations are saved to your account so you can pick them back up later. Please leave account numbers, ID numbers, and other sensitive details out of those messages.
Children
Hili is not intended for anyone under 16, and we do not knowingly collect their data.
Changes
If we make a material change to this notice we will show it in the app and ask you to accept the new version. See also our Terms of Use.
Questions, problems, or feedback? Ask the Hili assistant in the app. Hili helps where it can, and if it cannot, it will ask your permission before sending your message, that conversation, your email address, and basic device details to our team, who reply by email.