Privacy Policy
Effective October 8, 2026. Updated October 11, 2026.
- Your Kraken API key is encrypted on your device. We store it locked and can't read it.
- We keep your name, email, state, your passkeys' public keys and a history of what you did in Homing.
- Homing staff can see your name, email and how setup is going, to help you. Never your keys, balances, wallet addresses or amounts.
- No ads, no analytics or tracking scripts, and we never sell or rent your information.
- You can delete your account and its data at any time from Settings.
Who we are
Homing is operated by Thornwood Digital, based in Pleasant Grove, Utah ("Homing", "we", "us"). This policy covers the Homing website and app at this address. Contact us at support@gethoming.app.
What we collect
| Information | Why |
|---|---|
| Your name | So we know who we're helping when you contact us or report a problem. |
| Email address | To identify your account, let you recover it, and contact you about the service. |
| State of residence (you tell us) | Homing is only offered in certain US states. |
| Passkey public keys and device type | To sign you in. Public keys can't be used to impersonate you. Your biometrics never leave your device and we never receive them. |
| Encrypted vault data | Your Kraken API key and the keys that unlock it, encrypted on your device before upload. We can't decrypt them. |
| A fingerprint (one-way hash) of each wallet address you confirm, plus its first and last six characters | So Homing only sends to addresses you confirmed, and so your activity list is recognizable. |
| Activity history: withdrawals (coin, amount, Kraken reference, status, transaction ID), sign-ins, and setup changes | To show you what happened and to investigate problems. |
| Session records, including approximate country and state from your network connection, and when you last signed in and last used Homing | To keep you signed in, protect your account, enforce where Homing is available, and help with support. |
| Problem reports you send from the app: your message, which screen you were on, and your browser type | To fix what went wrong. Homing refuses any report that looks like it contains a private key or recovery words. |
| Your plan: beta, free, or paid, with license dates and the payments you made to us (amount, date and how you paid) | To keep track of your license. |
| Price alerts you set: the coin, the price, and when an alert went off | To notify you when a coin reaches the price you picked. |
| For each device where you turn on notifications: the address your browser's push service gives us, the device's public encryption keys, and the device type (like "iPhone") | To deliver your price alerts to that device. Removed when you sign out on that device, sign out everywhere, or turn notifications off. |
| Invite requests: your name, email, Venmo username or phone, and an optional note | To send you a Venmo request for your license and then your invite. |
What we can't see
Your Kraken private key is encrypted in your browser with a key derived from your passkey, a passphrase, or your recovery key. None of those ever reach us. Without them, the encrypted data we store is unreadable to us and to anyone who might break into our systems.
When the app talks to Kraken, your request is signed on your device and passes through our server only because Kraken doesn't accept requests directly from web browsers. Our server forwards it without storing it. It does record the outcome of withdrawals in your activity history, as described above.
What Homing staff can see
To help with support, Homing staff can see your name, email, state, sign-up date, last sign-in, how far you are in setup, your plan status, error codes from steps that failed, and problem reports you send. Staff can never see your Kraken keys, your balances, your wallet addresses or how much you send. Homing keeps a record each time staff open an account's details or change anything.
How we use it
- To run Homing: sign you in, show your balances, and carry out the transfers you approve.
- To keep Homing secure: rate limits, fraud and abuse prevention, and enforcing eligibility.
- To contact you about your account, security notices, and changes to these terms.
- To comply with the law.
We don't use your information for advertising, and we don't build profiles about you. We don't sell, rent or share your personal information for others' marketing.
Who else handles it
- Cloudflare hosts Homing and its database. Their processing is covered by their own privacy commitments.
- Venmo (PayPal) handles license payments. We see what Venmo shows us about the payment: your Venmo name and username, the amount and the date.
- Your browser's push service (Apple, Google or Mozilla, depending on your device) carries price-alert notifications to your device. Each one is encrypted for your device, so the push service can't read it.
- Kraken receives the requests you make to your own Kraken account. Kraken's handling of your account is governed by Kraken's privacy policy. Homing is not affiliated with Kraken.
- Authorities, when the law requires it, or when needed to protect people's safety or our rights.
- A buyer or successor, if Homing is sold or transferred, bound by this policy.
Cookies
Homing uses two strictly necessary cookies: one keeps you signed in, and a short-lived one completes a passkey sign-in. There are no advertising, analytics or third-party cookies.
The app also saves two display preferences in your browser's storage on your device, never sent to us: whether you chose larger text, and whether you've finished the "add to home screen" tip.
How long we keep it
We keep your account data while your account exists. Sessions expire after 30 idle minutes (longer if you choose a longer auto-lock in Settings) or 12 hours. When you delete your account, we delete your account record, encrypted vault, passkeys, confirmed addresses, sessions, activity history, problem reports and any invite request right away, and remove your email from the invite you used. Records of payments you made to us are kept for our bookkeeping, without your name, email or any link to you. Copies in Cloudflare's backups age out on their schedule. We keep invite requests until we send an invite or you ask us to remove them.
Your choices and rights
- See your data: your account details and activity are in the app.
- Delete your data: Settings, then Delete account. Or email us.
- Disconnect Kraken at any time in Settings. Also delete the Homing API key at Kraken.
- Questions or requests about your information: email us. We'll respond within 30 days.
Security
See how Homing's security works. No system is perfectly secure. If we learn of a breach affecting your information, we'll notify you as required by law.
Children
Homing is only for people 18 and older. We don't knowingly collect information from anyone younger.
Changes
If we change this policy in a meaningful way, we'll tell you in the app or by email before the change takes effect.