Hundredfold Home — Per-App Addendum to the HullStack House Terms & Privacy Policy

Document set: core · Type: addendum App ID: kingdom-hearth

This Addendum supplements, and is incorporated by reference into, the HullStack House Terms of Service and HullStack House Privacy Policy (together, the "House Documents"). It applies only to Hundredfold Home.

Per House Terms §0/§1, this Addendum is presented for acceptance in the same consent flow as the House Terms and Privacy Policy — it is not merely linked or informational. Any term here that materially affects your rights or obligations is covered by the same recorded acceptance as the House Documents.

Order of precedence. Where this Addendum conflicts with a House Document, the order-of-precedence rule stated in House Terms §0 applies: this Addendum controls for app-specific operational matters (features, data collected, permissions, processors, billing); the House Documents control for core legal mechanisms (Electronic Records §2, Children §4, Arbitration §18, Governing Law §19, Disclaimers §15, Limitation of Liability §16, Indemnification §17), unless this Addendum expressly and specifically names and overrides a numbered House section under §G below.

A. The Service

Hundredfold Home is a private app for one household. It gives a family a single shared place to talk and coordinate: end-to-end-encrypted messaging (direct and group), a shared household calendar, chores with an allowance ledger, shared lists for shopping and the pantry, photo and media sharing, optional location sharing between household members, and an in-app assistant that can answer questions and help with household planning.

Children participate through Child Accounts created by a Household Adult. A Child Account has no email address and no password — its only credential is a per-child login code that a Household Adult issues, reissues, or revokes (House Terms §7 and §10.3).

Hundredfold Home is distributed as a native mobile app through our own F-Droid repository, Google Play, and the Apple App Store.

B. App-Specific Data Collection

In addition to the categories in House Privacy Policy §2, Hundredfold Home collects and stores:

• Messages and media — the messages, photos, and files household members send each other, including in group conversations. This category is end-to-end encrypted and we cannot read it (§D-E2EE below, House Terms §10, House Privacy §12). We do process the surrounding metadata described in House Privacy §2 and §12.
• Calendar events and comments — dates, times, visibility, and who created or was invited to each event. Event titles, descriptions, locations, and comment bodies are end-to-end encrypted and we cannot read them (§D-E2EE). Birthday overlay names and dates are stored so we can project yearly reminders onto the calendar and send a morning-of notification; those names are not end-to-end encrypted.
• Chores and allowance — chore definitions and schedules, assignments to household members, completion and approval history, and the allowance ledger (amounts earned, adjusted, and paid out) that follows from it.
• Lists — the contents of shopping lists, pantry and grocery lists, and any list a household chooses to share, including items, quantities, and notes.
• Location — where a household member turns location sharing on, we store that member's live position and any Places they save as ciphertext encrypted to the household location-room key. Coordinates and Place names, latitudes, longitudes, and radii are end-to-end encrypted and we cannot read them (§D-E2EE). Location sharing is off unless enabled, is visible only to members of that household, and can be turned off at any time in the app or by revoking the permission in device settings. A Household Adult controls whether a Child Account participates in location sharing. The surrounding metadata we do process includes that sharing is on, device and platform, and key version — not the coordinates themselves.
• Assistant conversations — the questions you ask the in-app assistant, the household context the app supplies to answer them, and the responses returned. See §C for how these are processed.
• Child Account profile data — a display name and optional avatar, household membership and role, and the one-way hash and short public prefix of the child's login code. We do not collect a Child Account's email address, date of birth, or phone number.

Hundredfold Home does not collect health data, financial account numbers, or payment card data. Subscription payments are handled entirely by the platform store (§E); we never receive your payment credentials.

C. Third-Party Services and Processors

• Push notification delivery — delivered over UnifiedPush through a notification relay we operate ourselves. Push messages carry only a wake signal, not message content; the app fetches the content directly from us over its own authenticated connection. A Child Account session can receive push wake signals through this relay.
• Crash and diagnostic reporting — crash reports, error traces, and performance telemetry are sent to observability infrastructure we operate ourselves; they are not sent to a third-party crash-reporting vendor. These reports can include device model, OS version, app build, and a stack trace, and can originate from a Child Account session. They do not include message content.
• In-app assistant — assistant requests are routed through a gateway we operate to an upstream AI model provider, which processes the request to generate a response. We do not send end-to-end-encrypted message, location, or calendar content to that provider. Assistant requests are not used to train third-party models.
• Subscriptions — in builds distributed through Google Play and the Apple App Store, subscription purchase and entitlement state are handled by that platform's billing system together with RevenueCat, our subscription management provider. They receive a pseudonymous account identifier and purchase state — not your household's content. The build distributed through our F-Droid repository contains no billing components and sends nothing to these processors. Subscription purchase is available only to a Household Adult; a Child Account session does not reach these processors.
• App distribution — Google Play and the Apple App Store receive download and, where applicable, purchase information under their own privacy policies. Our F-Droid repository is operated by us.

We maintain a data processing agreement with each processor above that receives personal information, and — for any processor reachable from a Child Account session — one that accounts for children's data, consistent with House Privacy §3.

D. Permissions

Hundredfold Home requests these device permissions. Each is optional; the app functions without them, minus the corresponding feature.

• Notifications — to alert you to new messages, calendar events, and chore activity.
• Camera — to take a photo to send in a conversation, set a profile picture, or scan a household invite or login QR code.
• Photo and media library — to attach an existing photo or video to a message or profile.
• Location (precise, coarse, and background) — only for the optional location-sharing feature described in §B. Background location is requested only if you choose to share your location continuously with your household.
• Foreground service — to hold the real-time message connection open and, if you enable continuous location sharing, to keep that sharing running reliably while the app is in the background. Android shows a persistent notification whenever a foreground service is running.

D-E2EE. Encryption and household key recovery

Hundredfold Home does offer end-to-end encryption for messages and the media attached to them (direct and group conversations), live location coordinates and Places, and calendar event titles, descriptions, locations, and event comments. That content is encrypted on the sending device and decrypted only on household members' devices; we store it as ciphertext and cannot read it.

Hundredfold Home relies on the House Terms §10 and House Privacy §12 disclosures without variation. In particular, and importantly for a family app:

• A household administrator can decrypt a Child Account's encrypted content. Each Child Account's private key is escrowed, in encrypted form, to every household administrator, so a parent is never permanently locked out of a child's account. See House Terms §10.3.
• Adult accounts are not escrowed. There is no recovery path — by us or by another household member — for a Household Adult's own encrypted content.
• Chores and allowance records, lists (including shopping and pantry), recipes and meal plans, birthday overlay names, and assistant conversations are not end-to-end encrypted. They are encrypted in transit and at rest, but we are technically able to access them. The in-app assistant may use that household data to answer questions; we do not send end-to-end-encrypted message, location, or calendar content to the model provider. We do not promise backups, snapshots, or any availability SLA for that non-E2EE data; it can be lost through hosting failure, operator error, or deletion on termination (House Terms §10.5, §14, §15).

E. Subscriptions and Billing

Hundredfold Home offers a single optional Premium subscription, which covers every member of one household. The app is fully usable without it.

• Price(s) and billing cycle(s): Premium is offered on a monthly and an annual term. The current price for each term, in your local currency, is shown in the app on the subscription screen before you purchase — prices come from the platform store and can vary by country.
• Free trial terms: where a free trial is offered for a term, its length and conditions are shown on that same screen before you purchase. If a trial is not shown, none is offered.
• Auto-renewal and cancellation: a subscription renews automatically at the then-current price for the same term until you cancel. Cancel any time through the store account you purchased with (Google Play or the App Store); cancellation takes effect at the end of the current billing period, and you keep Premium until then.
• Refund policy: purchases are processed by Google Play or the Apple App Store as merchant of record, and refunds are handled under that store's refund policy. Request a refund through that store; we cannot issue one directly.
• Only a Household Adult can purchase or manage a subscription. The build distributed through our F-Droid repository does not include billing and cannot make purchases.

F. App-Specific Acceptable Use

No additional acceptable-use terms beyond House Terms §8. Because Hundredfold Home is a private household app rather than a public social network, House Terms §8 governs conduct within a household, and House Terms §8's note on encrypted content applies to messages: we cannot proactively detect a violation inside end-to-end-encrypted conversations, so enforcement there depends on a report from a participant or from a household administrator.

G. Governing Terms for Core Legal Mechanisms

No changes to House Terms §15 (Disclaimers), §16 (Limitation of Liability), §18 (Dispute Resolution and class-action waiver), or §19 (Governing Law and Forum). Those sections apply to Hundredfold Home exactly as written in the House Terms.

H. App-Specific Contact / Data-Subject Requests

See House Terms §23 and House Privacy §13. Hundredfold Home uses the same support, privacy, and security contact as the House Documents.

I. Effective Date and Versioning

This Addendum applies to App ID kingdom-hearth. Its version and effective date are the version and registration date shown alongside this document in the consent record you are asked to accept — that record, not this text, is authoritative. Changes to this Addendum follow the same material/non-material change process described in House Terms §20 and §21.