Privacy and trust
eMyHome Privacy Policy
Effective 25 August 2026. This policy explains how vHiTech processes information for the private eMyHome Family OS.
Information we process
- Account and authentication information, including name, username, email or phone, provider identity, sessions and security tokens.
- Family memberships, roles, invitations, guardian relationships and entitlement information.
- Content you choose to provide, such as messages, files, family moments, calendar, tasks, education records and other household records.
- For Family Assistant, every family-data scope is off by default. When you explicitly enable a scope, eMyHome retrieves only records you are currently authorized to view and sends the bounded context through vHiTech AI to the configured AI provider to answer that request. eMyHome does not use this flow to train a family-specific model, never includes precise location, and stores only a scope/count manifest with the run rather than the retrieved values.
- Personal contact-card fields you enter and explicitly select for QR, revocable link or NFC-tag sharing. eMyHome does not read your device address book for this feature.
- Call and notification metadata, device platform and Firebase installation token. Camera and microphone streams are processed for calls and are not recorded by default.
- When you explicitly dictate to Family Assistant, the operating-system speech service converts the short utterance to text. eMyHome sends the resulting text, not that voice recording, to the configured AI provider.
- Limited security, audit and operational logs needed to protect accounts and investigate abuse.
Purposes and legal basis
We process data to provide requested features, authenticate users, enforce family isolation and permissions, deliver notifications, prevent abuse, support users, comply with law and improve reliability. Where consent is required, it can be withdrawn without affecting earlier lawful processing.
Sharing
Information is visible only to family members or recipients selected by the user, subject to permissions. Home events, tasks, reminders and shopping lists are labelled as whole-family, selected-members or only-me; whole-family means active members of that family and never public Internet visibility. Shopping items inherit their list's visibility. A contact card discloses only selected fields to anyone holding its QR/link; revocable links expire and can be withdrawn, while a direct vCard QR copy cannot be recalled after capture. Infrastructure providers such as Firebase/APNs, storage and LiveKit/TURN process data only to provide the service. We may disclose limited information when legally required or to protect users. We do not sell personal data.
Children and families
Child accounts use guardian-aware permissions and private defaults. Guardians should create and supervise child access. Child accounts cannot create public contact-card QR/links or NFC tags. eMyHome is not a public discovery service and does not target children with advertising.
Retention and deletion
We retain account data while the account is active and keep content according to the family’s settings and legal obligations. A deletion request has a 7-day cancellation period. We remove direct identifiers, credentials, device tokens and memberships; limited pseudonymous records may be retained for family-content integrity, fraud prevention, legal claims, payment ledgers or mandatory audit retention.
Your choices
You can manage visibility and permissions, revoke device access, export available records, or request account deletion from the Family tab in the app. The same request pathway is documented on the account deletion page.
Security
eMyHome uses encrypted transport, short-lived tokens, least-privilege access, tenant checks and audit controls. No Internet service can guarantee absolute security; report suspected misuse promptly.
Contact
Privacy questions and verified requests: quocvinh@vhitech.io.vn.