MYHOMMI — AI Study Buddy: Privacy Policy

Deze privacyverklaring in het Nederlands

Last updated: 23 September 2026. MYHOMMI is a homework coach for children. This policy is written for parents, in plain language, and every claim below is enforced by automated checks in MYHOMMI's own build system.

The short version

• No accounts. No ads. No tracking. No advertising or third-party analytics. MYHOMMI runs on Cloudflare, which records standard operational request logs for the service, and the owner may switch on Cloudflare's own observability while running it. Those are infrastructure logs, not a product analytics system, and they are never used to build a picture of a child.
• Everything MYHOMMI remembers lives on your device (Chrome's local extension storage): the child's nickname and settings, per-child learning memory (topic names and counts only), the parent lock, and — if it was ever shown — a wellbeing note (kind and date only, never words).
• Homework your child adds stays on their device only: kept for at most 18 hours so an update or crash cannot eat an evening, then automatically shredded — a parent can erase it sooner at any time. That stored copy is never uploaded anywhere. Homework the child actually asks about is a different thing: it is sent to the AI to produce the answer, exactly as the next section describes.

What leaves the device, and why

• To generate coaching: page text, uploaded homework content (including photos and PDFs), screenshots captured at the child's request, and the child's messages may be sent through MYHOMMI's relay to the AI provider, solely to produce the coaching response.
• Retention: MYHOMMI keeps no conversation history and no content logs of its own. The AI provider (Anthropic) states that API content is deleted within 30 days under its standard commercial terms and is not used to train models — subject to the exceptions its own policies set out, which include keeping material longer where needed to investigate a policy violation or to meet a legal obligation. Those are the provider's terms, not a promise MYHOMMI can make on their behalf.
• Scan-from-Phone: photos are held on the relay for minutes. Each page is deleted as soon as the laptop confirms it has that page, so a dropped connection costs a retry rather than the homework. The last page has no confirmation to wait for, so it is removed by the same cleanup as a session nobody finishes: a job that runs every 15 minutes and deletes anything older than 20, so the realistic worst case is roughly 20–35 minutes plus platform delay, with a one-day storage rule as a last-resort backstop. The link that opens on the phone carries a short-lived token in its address.
• Speaking to MYHOMMI (the microphone): when your child uses the microphone, Chrome's own speech recognition turns the speech into text. On Chrome this is a network service: the audio is sent to Google to be transcribed, under Google's privacy terms and not under this policy. MYHOMMI never receives the audio, never stores it and never forwards it — only the text that comes back, which is then treated exactly like anything else your child types. The microphone is used only while your child is holding or has switched on the speak button.
• Reading the clipboard: while the "add a picture of your homework" step is open, MYHOMMI checks the clipboard each time you come back to the page — so that a screenshot you have just copied is offered to you without another step. What it finds is always shown to you first and is used only if you accept it; choosing "Not this one" discards it. Nothing is read while that step is closed.
• The box your child is typing in: when your child asks for help with the field they are working in, MYHOMMI reads the contents of that field — including a rich-text box — so the coaching can be about what they have actually written. It is read at the moment help is asked for, never continuously.
• About your child, to make the coaching fit: the child's age, sex, school year, the school system they follow (which names a country — for example "the Netherlands", and the local names for methods taught there) and the topics recorded as strong or weak travel with the request to the AI provider, so the answer is pitched for that child and uses the words their school uses. No name is sent.
• Reading aloud: MYHOMMI asks the browser to speak, using the voices your browser offers. Some of those voices are produced by the browser maker's own online service, and on a default Chrome install one of them is usually preferred — so the text MYHOMMI speaks may be sent to that service to make the audio, under that company's terms and not under this policy. Homework text, images and your child's answers are never sent there; only the sentence being spoken. MYHOMMI also has a premium cloud voice of its own, and it is switched off in this release.
• Curated videos: MYHOMMI links out to Khan Academy's own website; nothing is embedded and no data is shared with them beyond your visiting their page.

What we never do

• What the relay stores: to enforce daily limits it keeps counters against your access code — request and token counts, the time of the most recent request (to the second; the per-minute limit needs it), and whether a code is disabled or expired. Those daily counters are kept for 32 days and then deleted. To slow down anyone guessing access codes or the owner's key, it also counts refused attempts for a quarter of an hour under a salted one-way digest of the network address (never the address itself), deleted within about half an hour. Those two limits apply in full to records made from this version of the relay onwards. Records an earlier version made from 3 September 2026 were given no deletion date: the daily counters of every current access code are now deleted on the same 32-day rule, but a refused-attempt digest from that period cannot be found again to delete it, because it is filed under the digest itself, and it is still stored. Each holds only a count and a time. For the free trial it also keeps a per-install identifier, kept up to 90 days from its last use, and a salted one-way digest of the network address, kept about two days. That is usage metadata, not anonymous numbers alone, and it is stated here rather than glossed over. No homework, no messages and no answers are ever written there.
• No sale of data, no advertising use, no profiling beyond the on-device learning memory a parent can view, copy, back up, or erase per child.
• No collection of contact details. Location and web history are not a plain no — what is and is not collected is set out in full in the next section. Separately, and because the coaching would otherwise use the wrong words: the school system your child follows is chosen in the settings and travels with the request, and naming a school system names a country. Cloudflare, which carries the traffic, reports to the service owner how many requests arrived from each country — a counted total derived from the network address, never joined to an access code, a child or a family, and never stored by MyHommi.

Location, the page, and web history

Location and web history need more than a plain yes or no, so they are set out here in full. This is the precise version of what MYHOMMI does, in place of a flat denial that was too absolute for the product.

• Device location. The extension does not ask Chrome for the device's geolocation. Its install permissions do not include the browser's location permission. That is not the same as no location anywhere, which is why the rest of this list exists.
• Crisis-help country. A parent can store a two-letter country code on the device, in Chrome's local extension storage (chrome.storage.local), under the name safetyCountry — the settings control is #safetyCountry and background.js reads it, and a per-child value, profile.safetyCountry, is used before the family value when one is set. It chooses which country's reviewed crisis-help numbers the safeguarding directory may show. It is not a GPS reading, and it is not guessed from language, the school system or the network. Left unset, no country-specific numbers are shown.
• The page and the homework. When your child asks for help, the extension can read the page already open, and homework your child adds. That page or that homework can name a place. The place is part of the work, not a GPS reading from the device.
• Photographs. A Scan-from-Phone picture can carry a place inside the photo file itself. The relay removes that camera data, including location, before it holds the picture. A picture it cannot read well enough to remove that data is refused and not stored. A well-formed picture with nothing to remove is still stored as the picture.
• The network. Cloudflare, which carries the traffic, can tell the service owner how many requests arrived from each country — a counted total taken from the network address. It is not joined to an access code, a child or a family, and MyHommi does not store that address as a location record of a child. Separately, the school system chosen in settings names a country, and that choice travels with the coaching request so the words match the school.
• Web history. This category stays marked as collected in the Chrome Web Store listing. What is retained is a list of hostnames the family has pinned, stored on the device in Chrome's local extension storage under the name autoSites (the Autosite pin). Pinning a site makes MYHOMMI open there by itself next time. The list is those hostnames only. It is not a full browsing history, and it is not a record of every page your child has opened. The extension may still run on every website, so it can coach the page your child already has open, when your child brings MYHOMMI in.
• Website content. The text of the study page, read when your child asks for help, is website content used for coaching, together with homework your child supplies. That is the page in front of them, used to coach that work. It is separate from the pinned-hostname list.

Parent controls

Settings include a parent lock (PIN), a full view of the learning memory, a per-child erase, a downloadable family backup (which by design can never contain keys, codes or PINs), and a full reset. Backups are files you keep; we never receive them.

Contact

Questions or requests: hello@myhommi.com.

Chrome Web Store User Data Policy

MYHOMMI's use and transfer of information adheres to the Chrome Web Store User Data Policy, including the Limited Use requirements: user data is used only for the single, user-facing purpose described above — coaching the student on their homework — and is never sold, used for advertising, or transferred for other purposes.