Last updated 24 August 2026
Hibbi stores what your household types into it. There are no ads, no analytics and no tracking of any kind, and nothing is ever sold or shared.
Household members: name, colour, icon, and whether they show on the opening screen. If a member sets a PIN, only a one-way hash of it is stored — never the PIN itself. The recovery answer is hashed the same way; the recovery question is stored as you wrote it.
What you enter: calendar events, list items, tasks, bills and their due dates, shopping items and prices, notes and drawings, recipes and meal plans.
Contacts: names, labels, phone numbers, email addresses, postal addresses, birthdays and notes, for anyone your household adds.
Activity: a record of who changed what and when, so the household can see what is new.
Settings: household name, theme, chosen weather town, notification preferences, tile arrangement and recent searches.
In a Supabase database (Supabase, Inc.), which hosts it on our behalf and can technically reach it as any host can.
It is one shared database per household. Every member sees the same data — there is no privacy between members inside a household, apart from lists you deliberately hide.
Three small things are kept in your browser's local storage and never leave the device: which member you last chose, whether you have seen the tips, and whether you have been asked about notifications.
The weather tile calls Open-Meteo (open-meteo.com). It receives the coordinates of the town you picked, and the text you type when you search for a place. Like any web request, it also sees your IP address.
"Use current location" asks your device for its location once, in the foreground, only when you tap it — not in the background, and not unless you ask. Declining is fine; search for a town instead.
If you use it, your coordinates also go to BigDataCloud (bigdatacloud.com), the only way to turn a raw position into a place name, since Open-Meteo cannot do that. It receives the coordinates and, like any web request, sees your IP address.
There is no background location of any kind, and no location is read unless you tap that button.
If you turn notifications on, your device asks your permission first. They are produced on your own device from your own data — nothing is sent to a notification service to make them happen.
No analytics, and no usage tracking.
No advertising, and no advertising identifiers.
No third-party tracking code. The app's only outside calls are to Supabase, which stores your data, Open-Meteo, for the weather, and — only if you tap "Use current location" — BigDataCloud, to turn your coordinates into a place name.
Nothing is sold, rented or shared with anyone.
Ask and it will be exported to you, or deleted. Deleted means deleted.
This will change as the app gains features — accounts, photos and location-based reminders are all planned. Anything that collects genuinely new data will be described here before it ships, and the date above will say when.
The Contact us row in Support opens an email to us.