Privacy
Last updated 21 July 2026.
Homegrown is a home-education app used by families with children. That means most of what's stored here is information about a child, so this page tries to be specific rather than reassuring — what is actually collected, where it actually goes, and how to get it all back or delete it.
The short version. Your family's data is yours. It is not sold, not shared, not advertised against, and not used to train anybody's AI model. There is no tracking, no analytics and no third-party cookies on the app. You can export everything at any time, and delete everything at any time.
Who is responsible
Homegrown is run by Tom Keddie. For anything on this page, including a request to see or delete your data, contact thomaskeddie@gmail.com.
What is collected
About a child
| What | Why |
|---|---|
| Their name or nickname | To tell profiles apart. A nickname is fine — nothing requires a real name. |
| An avatar | Choose one of the built-in characters, or upload your own picture. |
| Their timetable and sessions | This is the plan you build for them. |
| Work they mark complete, with any notes and links they add | This is the record of what they've done. |
| Answers they type into an on-screen worksheet | The digital edition of a resource pack. Saved as they type, under their profile, so a parent can read it back. |
| Books they log, and how they felt about them | Their reading record. |
| Short "about our approach" answers a parent may write for the record export — how you educate, what the child is working on, what you use, anything a reader should know | Printed at the top of the record of education, in the parent's own words. Optional; saved with the child's profile. |
| Free-time lists a parent writes for them — shows they may watch, things they may do | Shown on the child's own screen so they can pick without asking. |
| A parent's note about a week, or a day — what went well, what was hard | Printed under that week in the record of education. Written by the parent, in their words; the child never sees or writes it. |
| Stars earned and spent | The in-app reward mechanic. It never leaves the app. |
About a parent
Your email address and password, if you turn on syncing across devices. Optionally a display name and picture. Optionally a PIN for the parent area. Passwords are stored hashed by our database provider; we never see them.
If you subscribe, payment is taken by Whop, our payment provider — your card details go to Whop and never to us; Whop's own privacy notice covers them. We keep only whether your family's plan is active, when it renews, and Whop's reference for it, so the app knows the subscription is paid. Cancelling is done on Whop's manage page, linked from Settings.
What is not collected
- No location, ever.
- No analytics, tracking pixels, advertising IDs or third-party cookies in the app.
- No contacts, microphone, camera or device identifiers.
- Nothing about a child is used to build an advertising or behavioural profile. There is no advertising in Homegrown at all.
No third-party requests
Opening Homegrown contacts nobody but Homegrown. Fonts, icons and every other library are served from our own domain rather than from a content delivery network, so no outside company is told your IP address, your browser, or the fact that you opened the app.
We mention this because it's unusual and easy to get wrong: most sites pull fonts and scripts from Google or similar services, which quietly hands those companies a record of every visit. Homegrown hosts everything itself instead.
The only servers your browser talks to are ours: the app itself, our database if you've enabled syncing, and our AI service if you press "Ask Pip".
Where it is kept
By default, everything is stored on your own device, in your browser. If you never turn on syncing, your family's data never leaves that device and we cannot see it.
If you turn on syncing so that several devices share one set of data, it is stored in our database at Supabase, in their London region. It stays in the UK. Each family's records are locked to that family's account at the database level.
Pip and AI
Pip has two halves, and only one of them involves AI.
- The guide — the setup checklist and how-to help. This is ordinary text built into the app. It sends nothing anywhere.
- Topic suggestions — when you ask Pip to suggest project topics, that request goes to Anthropic, an AI provider in the United States.
When you ask for suggestions, what is sent is: the age group you pick from the list (a band such as 10–12, never an exact age or date of birth), the interests you type into the form, and the session titles already on that child's timetable so Pip doesn't repeat them — titles you wrote when planning. No name, no email and no identifier is sent, and none of your child's completed work, notes or reading log is ever sent.
Pip only ever suggests. A suggestion goes into the session form for you to edit, and nothing is saved until you save that session yourself.
Who else sees it
Nobody. Your family's data is not sold, rented, shared or published, and it is not used to train AI models. The only companies that touch it are the ones needed to run the service:
- Supabase — stores your data if you enable syncing (London region).
- Anthropic — receives the topic-suggestion requests described above, and only those.
- Vercel — serves the app's files to your browser.
We will disclose data if the law requires it, and would tell you unless legally prevented from doing so.
How long it is kept
Homegrown is designed to build up a multi-year record of a child's education, so data is kept for as long as your account is active — that's the point of the portfolio. If you close your account or delete your data, it is removed as described below.
Your rights, and how to actually use them
Under UK data protection law you can ask for a copy of your data, correct it, delete it, restrict or object to how it's used, and complain to the regulator. Two of these are buttons rather than requests:
- Get a copy of everything — Settings → Backup → Export backup. Downloads the complete dataset as a file, immediately.
- Delete everything — Settings → Delete everything. Permanently deletes every profile, session, piece of work, book and reward, from this device and from the cloud for all your devices. It cannot be undone.
- Correct anything — everything in Homegrown is editable in the app. Nothing requires contacting us.
"Delete everything" removes your family's records and the account itself, including the sign-in email address. If for any reason the account can't be removed at that moment, your data is still deleted and we'll tell you so you can ask us to finish the job by email.
If you think we've handled your data badly, please tell us first — but you can complain to the Information Commissioner's Office at any time, and you don't need our permission to do it.
The waitlist
If you join the waitlist on our landing page, we store exactly one thing: the email address you type in, with the date you joined. It goes straight into our own database in London — no mailing-list company, no form service, no one else involved.
We'll use it to tell you when Homegrown opens, and perhaps a small number of updates along the way. Nothing else, and it is never shared. To come off the list, reply to any email we send or write to the address below, and we'll delete it.
Children
Homegrown is built for children to use, so a few things are deliberate:
- Children never sign up. A parent creates the account and each child's profile. We never ask a child for an email address or a password.
- Syncing is off until a parent turns it on. Nothing leaves the device by default.
- Children are told what their parent can see, in their own part of the app, in plain language. A parent building the timetable can see the work marked against it — no child should be surprised by that, so we say it rather than leaving it implied.
- Stars and streaks reward doing schoolwork. They are never used to encourage a child to share more information about themselves or to weaken any privacy setting.
- Notes are for schoolwork. The notes and book-response boxes are free text — please don't use them for health, medical or other sensitive personal information.
Security
Data in transit is encrypted. Synced data is scoped to your family's account at the database level so one family cannot read another's. The optional parent PIN is a convenience lock to stop children wandering into the parent area on a shared device — it is checked in the browser and someone determined and technical could get past it, so please don't treat it as a security control.
Changes
If this notice changes in a way that affects what is collected or where it goes, we'll say so in the app rather than quietly updating this page.
Questions: thomaskeddie@gmail.com