HomeDash Privacy Policy

Effective date: 19 August 2026

Last updated: 19 August 2026

HomeDash ("HomeDash", "we", "us") is operated by HomeDash Limited (家速有限公司), a company incorporated in the Hong Kong SAR, Company Registration No. 78480569, registered office Suite 2556, Level 25, Two Harbour Square, 180 Wai Yip Street, Kwun Tong, Kowloon, Hong Kong.

This policy explains what personal data the HomeDash mobile application and the HomeDash web service at https://homedash.ai (together, the "Service") collect, why we collect it, who we share it with, and the choices you have. It applies to the iOS app, the Android app and the website.

HomeDash Limited is the data user under the Hong Kong Personal Data (Privacy) Ordinance (Cap. 486) ("PDPO"). Where the Singapore Personal Data Protection Act 2012 ("PDPA"), the EU/UK GDPR, or other laws apply to you, we act as controller for the data described in Section 3 and as processor for the property media you upload (Section 4).

1. Summary

• HomeDash turns a property listing into a marketing video and social campaign for licensed real-estate professionals. It is a business tool for agents, not a consumer property portal.
• We collect the account details you give us, the property media you upload, and usage data about how you use the app.
• If you create an AI presenter ("數字人"), we process your face and voice — this is sensitive biometric data and we only do it with your separate, explicit consent. See Section 5.
• We do not sell your personal data.
• We do not use your uploaded property media, your voice or your face to train AI models.
• We do not scrape or harvest content from other websites or apps.
• You can delete your account and all associated data from inside the app at any time. See Section 12.

2. Who this policy covers

Users — the licensed agents, agencies and brokerages who hold a HomeDash account.

Third parties appearing in your uploads — where you upload photographs, floor plans or footage of a property, that material may contain personal data belonging to other people (for example, a vendor's possessions, a neighbour, or a person visible in a photo). You are responsible for having the right to upload that material; we process it on your instructions. See Section 4 and the Terms of Service.

This Service is not directed at children and is not intended for anyone under 18.

3. Data we collect about you

3.1 Account and identity data

• Name, email address, mobile number
• Company or agency name, branch, role
• Licence details where you choose to display them (for example, an EAA licence number in Hong Kong or a CEA registration number in Singapore)
• Password (stored only as a salted hash — we never store it in readable form)
• Profile photo, if you upload one

Why: to create and secure your account, to identify you to your agency where you belong to a team account, and to display licence information on the videos you publish.

3.2 Subscription and payment data

• Plan, billing period, credit balance and consumption history
• Transaction records and invoices

Where you subscribe through the app stores, Apple or Google processes your payment and we never receive your card number. We receive only a transaction identifier and your subscription status. Where you subscribe on the web, payment is processed by Airwallex and Stripe, who receive your card details directly; we store only the last four digits, card brand and expiry. Where you pay using Apple Pay or Google Pay, the card number is tokenised by Apple or Google and is never visible to us.

3.3 Content you provide

• Property addresses, listing URLs, prices, descriptions and specifications
• Photographs, floor plans and video footage you upload
• Scripts, captions and edits you write or approve
• Brand assets you upload (logo, colours)

3.4 Biometric data — AI presenter only

• A reference video or photograph of your face
• A voice sample used to build a synthetic voice

Collected only if you choose to create an AI presenter. See Section 5.

3.5 Usage and device data

• Features used, videos generated, credits spent, session timestamps
• Device model, operating system version, app version, language and approximate region derived from your IP address. We do not collect precise or coarse device location, and the app does not request location permission.
• Crash reports and performance diagnostics
• IP address

3.6 Analytics and advertising

We use the following in both the mobile apps and the website:

• Google Analytics for Firebase (GA4) — app usage, feature adoption, crashes and performance. Collects an app instance identifier and device data.
• Meta Pixel / Meta SDK — measures the performance of our advertising and lets us show ads to people who have visited or used HomeDash.

Where we pass contact fields such as email or phone number to these platforms, they are hashed with SHA-256 before transmission; we do not send them in readable form.

This is advertising tracking, and you can refuse it.

• On iOS, we ask for your permission through Apple's App Tracking Transparency prompt before any tracking identifier is used for advertising. If you decline, we do not track you across other companies' apps and websites. You can change your answer at any time in Settings → Privacy & Security → Tracking.
• On Android, you can reset or delete your advertising ID in Settings → Privacy → Ads.
• On the web, you can decline non-essential cookies in our cookie banner.

Declining has no effect on your ability to use HomeDash.

3.7 Communications

Support messages, feedback and correspondence with us.

4. Property media you upload

We treat uploaded property media as your content, processed on your instructions to produce the outputs you ask for. We use it to:

• classify rooms and features so the system can assemble a sensible edit,
• generate the video, voiceover, subtitles and social creatives you request,
• store your drafts and finished videos so you can return to them,
• provide support when you ask us to look at a specific project.

We do not browse your media for any other purpose, and staff access is limited to the circumstances in Section 9.

5. AI presenter — face and voice

If you create an AI presenter, we process biometric identifiers: an image or video of your face, and a recording of your voice. In Hong Kong this is sensitive personal data under the PDPO; in the EU/UK it is a special category under GDPR Article 9; several other jurisdictions regulate it specifically.

Our commitments:

1. Separate consent. We ask for explicit, separate consent before any face or voice is enrolled. Agreeing to this policy alone is not enough.
2. Own likeness only. You may enrol only your own face and voice, or that of a person who has given you documented written consent. This is also a Terms of Service obligation.
3. Purpose limit. Face and voice data are used solely to generate presenter videos in your own account. They are not used to build models available to other customers.
4. No training. Your face and voice are never used to train, fine-tune or improve any AI model, ours or a third party's. They are used only to render the videos you ask for.
5. Deletion. You can delete a presenter profile at any time. On deletion we remove the enrolment data and derived voice model within 30 days, including from backups on their normal rotation. Videos you already generated and published remain yours to manage.
6. Retention. Enrolment data is kept while the presenter profile exists, and deleted within 30 days of profile deletion or account closure.

Sub-processors involved in this processing are the cloud hosting, GPU compute, speech-synthesis and language-model providers listed by category in Section 9. We will publish a named list at https://homedash.ai/subprocessors and will notify account holders before adding a new category of processor for this data.

6. AI processing and model training

Video generation, voice synthesis, room classification and script drafting are performed by a mix of models we host ourselves on rented GPU infrastructure and third-party APIs.

• Content you upload is sent to these systems to produce the output you requested.
• No content you provide through this Service is used to train, fine-tune or improve any AI model. Where we train our own models — for example the model that labels a photograph as a kitchen or a bedroom — we do so using our own and separately licensed datasets, not customer uploads.
• Where we use third-party AI APIs, content is sent to them solely to generate the output you requested, and we select providers whose terms restrict use of submitted data to delivering that service.

AI output is a draft. Generated scripts, voiceovers and imagery may contain errors. You are responsible for reviewing and approving every output before publishing it, and for meeting any obligation to disclose that marketing material is AI-generated or digitally enhanced. See the Terms of Service.

7. What we do not do

We state these explicitly, because several are common in this industry and we do not follow them:

• We do not scrape or harvest content from third-party websites, portals or apps.
• We do not buy personal data from data brokers or list vendors.
• We do not sell your personal data for money. (On advertising, see Section 3.6 — we use Meta and Google advertising tools, and you can opt out.)
• We do not use your uploads, your voice or your face to train AI models. See Section 6.
• We do not track your location. The app does not request location access.
• We do not read your contacts, calendar or messages.

Where the Service displays property market or transaction information, that information comes from public registers and official sources, or from agencies and developers who have licensed it to us or expressly authorised us to receive it.

8. Why we can use your data (legal bases)

Where GDPR or a similar regime applies:

Under the PDPO we collect only data necessary for the purposes above and use it only for those purposes or a directly related one.

Direct marketing. We will not use your personal data in direct marketing without your consent, and every marketing message carries an opt-out. You may withdraw consent at any time at no cost.

9. Who we share data with

• Service providers, acting on our instructions, in these categories: cloud hosting; GPU compute for video generation; object storage and CDN; speech synthesis and language-model APIs; email delivery; payment processing (Airwallex, Stripe); analytics and advertising (Google, Meta); customer support tooling; crash and performance reporting. We require each to protect your data to a standard consistent with this policy and to use it only for the service they provide to us.
• Your agency. If you are on a team or agency plan, your administrator can see your usage, credit consumption and the videos produced under that account.
• Apple and Google, for subscriptions purchased in-app.
• Professional advisers, regulators and law enforcement, where we are legally required to disclose, or to establish or defend legal claims.
• A successor, in a merger, acquisition or asset sale — subject to this policy.

We do not sell personal data for money. However, the advertising and analytics tools described in Section 3.6 may amount to "sharing" for cross-context behavioural advertising — and in some readings a "sale" — as those terms are broadly defined under certain US state privacy laws. If you are covered by one of those laws, you may opt out using the controls in Section 3.6 or by contacting us.

10. International transfers

We are based in Hong Kong and use service providers that may store or process data outside Hong Kong. Where we transfer personal data out of a jurisdiction that restricts transfers, we rely on Standard Contractual Clauses or an equivalent safeguard, and we take reasonable steps to ensure comparable protection as required by PDPO section 33 and the PDPA transfer limitation obligation.

11. How long we keep data

Backups are overwritten on their normal cycle, within 35 days.

12. Deleting your account

You can delete your account and its data from Settings → Account → Delete account inside the app, and at https://homedash.ai/delete-account on the web. Deletion removes your profile, uploaded media, generated videos and any AI presenter, subject to the legal retention periods above.

App store requirement. Apple (Guideline 5.1.1(v)) requires apps that support account creation to offer account deletion inside the app, and Google Play requires a deletion route reachable from a public web URL. Both are implemented.

13. Your rights

Depending on where you live, you may ask us to: access a copy of your data; correct it; delete it; restrict or object to processing; port it to another provider; or withdraw consent.

• Hong Kong (PDPO): you have the right to request access to and correction of your personal data. We will respond within 40 days. We may charge a reasonable fee for a copy.
• Singapore (PDPA): you may request access and correction, and withdraw consent.
• EU/UK (GDPR): the rights above, plus the right to lodge a complaint with your supervisory authority.
• California and other US states: rights of access, deletion, correction and opt-out of sale or sharing — we do not sell or share as defined.

Contact info@homedash.hk. We may need to verify your identity. We will not discriminate against you for exercising a right.

14. Security

We use TLS in transit and encryption at rest, role-based access control, hashed credentials, and least-privilege access for staff. Access to customer media is restricted to named personnel and logged. No system is perfectly secure; where a data breach is likely to result in real risk of harm, we will notify affected users and the relevant regulator without undue delay, consistent with the PDPO guidance and the PDPA mandatory breach notification obligation.

15. Changes

We will post any change here and update the date at the top. Where a change materially affects your rights, we will notify you in the app or by email before it takes effect.

16. Contact

HomeDash Limited (家速有限公司) Suite 2556, Level 25, Two Harbour Square, 180 Wai Yip Street, Kwun Tong, Kowloon, Hong Kong Company Registration No. 78480569

Privacy enquiries: info@homedash.hk Data Protection Officer: the Data Protection Officer, HomeDash Limited, at the address above or info@homedash.hk