CrownThrive, LLC operates Oops, Home.. This policy explains the information used by the app, the choices you make, and how to ask for help. Contact contact@crownthrive.com for privacy questions.
Plans and contact details on your device
You can enter a destination, pickup note, return plan, provider preference, and trusted contact details. These details are used to display your plan and prepare actions you choose. The reviewed personal-plan features keep this information in the current session unless you choose to remember it in this browser. Browser-saved information can be accessible to someone who can use the same device; it is not a secure cloud backup.
Location and device permissions
One-time location tools use browser permission to obtain a reading for your chosen action. Timed sharing is a separate opt-in feature that uploads your latest location while the page is visible. Pausing updates leaves the last shared point available until the link is revoked or expires. Device features such as microphone, Bluetooth, notifications, and sharing depend on browser permission and support. Browser speech services may process audio according to their own provider's practices. Denying an optional permission can disable that feature without authorizing a substitute source of data.
Your app connections
Provider handoffs can include information you choose, such as a destination in a Maps link or text in a message. Review the details before opening or sharing. Provider account grants apply only after the authorization process. For the Home Assistant one-time check, Oops, Home. temporarily uses the authorization response to read configuration and up to three explicitly selected light or sensor states from your instance, keeps returned tokens in memory for the check, and requests revocation afterward. It does not retain those tokens as a continuing connection.
Files and messages you create
Downloaded rescue cards and calendar files are separate copies controlled by you and the apps where you open them. Shared messages are handled by the app and recipients you select. Removing information from Oops, Home. does not delete copies already downloaded, sent, or retained by another service.
Technical operation
Hosting and security services process network and device information needed to deliver pages, protect the service, and diagnose failures. The offline worker stores selected public fallback assets; it does not intentionally cache account pages, authorization responses, billing pages, or private API responses. Browser and hosting providers can have their own logs and retention practices.
Choices and removal
Use the app's clear-data control to remove supported Oops, Home. plan data from the current browser. If storage cannot be removed, clear this site's data in browser settings. Revoke connected-account permissions in the provider's settings. For account, support, or privacy requests handled by CrownThrive, contact us through the Support Center or contact@crownthrive.com. We may need to verify a requester's authority before releasing or deleting account information.
Keeping information only as needed
Device-saved plans remain until you or your browser removes them. We retain service records only for the purpose for which they were collected, including resolving support requests, account administration, security, billing records, and obligations required by law. Removal from Oops, Home. does not override a provider's retention duties or copies controlled by other recipients.
Changes
We will update this policy when our data practices change. New account access or a materially different use of personal information will be explained before it is used, with consent where required.
Your Oops companion and saved preferences
The floating Oops companion provides scripted quick help before sign-in and AI answers to signed-in members after separate AI consent. Questions are processed by CrownThrive AI and its model provider. You may save a nickname, city, spending style and selected interests in your private account. These user-authored preferences are included with future AI questions until you edit or delete them in Memory & context. Oops does not secretly infer a profile from your wallet, health apps, contacts or private plans. Saved preferences remain until deletion or an approved account-deletion request and are included in your account export.
Optional conversation context
Context sharing is off by default for each visit. If enabled, each AI question includes an allowlisted app section and Explore category, without raw URLs or GPS coordinates. Pro may also include the last six messages from the current chat. The conversation stays in page memory across app navigation for this visit; clearing chat clears that visible session. Account-bound AI answer receipts may remain for up to 30 days for retries and service operations. This feature personalizes responses; it does not train a dedicated model or enable continuous surveillance. You can use AI without turning on context.
Feedback and staff access
Feedback about Oops, food stops and experiences is private to your account and authorized Oops staff. It is not posted to public review sites, sent to a venue or used as a testimonial. You can export submitted feedback with your account and request correction or deletion through Support. Records remain until deletion or an approved account-deletion request. Moderators handle general support, accessibility, satisfaction feedback and sponsored creative holds. Admins handle operational and commercial support. Superadmins alone assign staff; protected owner grants cannot be edited in the portal. Staff changes and moderation actions have audit records. These roles do not grant access to your encrypted device wallet.
Food, ticket and experience providers
Google food discovery may return a restaurant website and price level with ratings and opening status. These are provider-reported details, not guaranteed availability or a final bill. Ticketmaster event search is available only after its server credential is connected; searches send the entered city, country and date range and share the discovery allowance. No provider ticket checkout or booking commission relationship is verified in this release. Viator affiliate discovery now uses a production credential held in CrownThrive Vault for bounded provider discovery. Viator links open the provider, where you decide whether to purchase under Viator’s terms. Oops does not complete provider checkout, store payment details, promise availability, or treat affiliate attribution as earned commission until the account, terms, attribution and settlement readback are certified. Provider content is not used as permanent AI customer memory.
Installation and permission setup
The setup screen observes available permission states. Its location test discards the reading, and its microphone test stops immediately without recording or uploading audio. Notification tests remain on the device. Permission states are not uploaded as a user profile. Persistent-storage requests are handled by your browser. The Cookies & device storage and App installation & permissions pages explain individual controls and local retention.
AI-managed partner operations
The AI operator processes submitted business content, public websites, supporting business details, quotes and service status to review requests and carry out eligible agreed work. It may use connected AI and provider tools. Separate private records identify the AI action, source evidence, frozen quote and verified delivery. This workflow does not receive your private wallet, health readings or personal location. Ask Support to explain or reconsider a partner review; do not send credentials or sensitive personal records in a reply.
Family location and discreet check-ins
Family Safety Circle is consent-based. Each person must agree before being added, chooses whether they may be located, and starts their own timed foreground share. Links can be paused, revoked or allowed to expire. Google Maps receives only a location or search you deliberately open. A discreet check-in opens your phone’s messaging composer with neutral wording; you must confirm sending, and the recipient can see it. Oops does not silently track, hide messages, monitor in the background or dispatch emergency services.
Privacy rights and international services
Depending on your location, you may have rights to access, correct, delete or receive a copy of your information, object to or restrict certain processing, withdraw consent, and complain to your local privacy regulator. Contact CrownThrive through Support or contact@crownthrive.com. We use account data to provide requested services, payment records for billing and applicable obligations, operational records to protect the service, and consent for optional access where required. Connected providers may process information in the United States or other countries; their terms and safeguards apply. Ask us for details relevant to your request.
Membership accounts
When you create an account, we use your sign-in identity and email to maintain your membership, show your subscription status, and protect account access. We do not receive your identity provider's password. Personal ride-plan data is not copied to your membership account unless a separately described feature asks you to do so.
Billing
Stripe processes payment details. Oops, Home. uses subscription identifiers, membership state, and transaction records to provide paid access and resolve billing issues. Do not send full payment card details to support. Canceling a subscription and deleting account data are separate actions; legal accounting records may still need to be retained.
Support requests
We use the reply email, issue description, optional receipt identifier, and service-generated request details you submit to answer and manage your support case. Limit your submission to what is needed for the issue. Do not include health records, live location, provider passwords, access tokens, or full card details.
Automated assistance
Messages you submit to the assistant are processed to provide a response. Use it for product questions and general planning; avoid private addresses, contact numbers, health details, passwords, and payment information. The assistant does not need your private safety plan to explain how the app works. Automated answers may be reviewed when needed to resolve a support or safety issue, consistent with the service settings disclosed when you use it.
Advertising on Free
Free may display clearly labeled ads or CrownThrive promotions. Advertising uses page context. If you separately opt in to local partner offers, matching also uses the city and country you enter specifically for offers. We count server deliveries, not verified views. Oops, Home. does not provide your ride plan, trusted contact details, precise location, health signals, rescue-card information, or connected-account data for ad targeting. Ad links take you to another site's privacy practices. Optional advertising storage, where used, is subject to the choices shown in the app.
Private cloud plans and service providers
Saving a cloud plan is optional and requires a separate confirmation. CrownThrive stores its selected destination, contact and planning fields in the account database hosted by Supabase. OpenAI processes assistant questions and returns answers through CrownThrive’s AI service. Stripe handles billing; Google Places receives the search text and language you submit and, when you choose a nearby search, the coordinates you explicitly provide. Venue hours, ratings and last-reported fuel prices may be returned; missing prices are not estimated. If you choose signed-in area lookup, Google Geocoding receives your coordinates rounded to four decimal places and language. Only city, state and country are returned to the app; we do not store that location or send it to ads or AI. ChatGPT sign-in and Sites hosting provide authentication and page delivery.
Location, home snapshots and the covered call button
One-time location and parked-car pins stay in the current page session. If you separately start a timed sharing session, your latest coordinates, accuracy and capture time are uploaded to CrownThrive’s Supabase backend. Anyone with the private link can view that point until you revoke the link or it expires, for at most 60 minutes. Only a hash of the link token is stored. Older points are overwritten. Revocation immediately removes coordinates; expired or revoked records are deleted by a job every ten minutes. This is foreground sharing, not guaranteed background tracking. Home Assistant reads are temporary, user-selected snapshots. The covered call button opens your primary contact in the device dialer after you lift the cover and press Call. Device confirmation and phone service may be required. Neither opening the dialer nor returning to the app proves the call connected.
Catalog access
The reading room fetches public released-product information from Go Flipbooks. Opening a product continues to that service. Its account, checkout, license and privacy terms apply. Oops, Home. Pro does not grant ownership of separately sold publications or a CIE software license.
Encrypted device wallet
The wallet stores only encrypted content in this browser’s IndexedDB. AES-256-GCM encryption protects item details and document metadata; a passphrase-derived key stays in memory while unlocked. Oops cannot recover the passphrase. Exported encrypted backups remain under your control. Downloading an individual document creates a decrypted copy outside the wallet. Wallet contents are not uploaded to the account, AI, ads or health providers. Delete the wallet from its own controls or remove this site’s browser data. General plan clearing locks the wallet but does not delete it.
Partner requests and payments
Submitted business content, websites, location areas, review notes and quotes are stored with the submitting account. Approved paid placements appear as Sponsored. Stripe handles partner payments. Partners receive their own submission and delivery-count records; they do not receive personal GPS, contacts, health data or wallet contents.
Retention and control
Cloud plans remain until you delete them or request account removal. Assistant response caches are retained for up to 30 days; core AI service and provider records follow their own operational retention. Support and billing records may be retained to resolve cases and meet legal obligations. My account exports your account summary, cloud plans and support conversations. Export encrypted wallet backups from the wallet; submit requests for other service records through Support. Submit a privacy or deletion request in Support; deletion does not itself cancel a Stripe subscription.
OpenAI privacy · Stripe privacy · Google privacy · Google Maps terms · Google terms · Supabase privacy