HomeLink – Family & Life

HomeLink – Security Notice for Important Document Uploads

Intended effective date: 30 August 2026

Applies to: HomeLink – Family & Life

Before uploading a file

HomeLink is designed for families to share content within a private Household, but it is not a password manager, dedicated encrypted vault, cryptographic-key custody service, bank, certified medical-record repository, notary/legal escrow service, or the only place where an important original should be stored.

Do not upload passwords, OTP/recovery codes, seed phrases/private keys, secret signing keys, CVV, full payment-card data, or authentication secrets that could enable takeover of an account or asset.

For identity documents, medical records, financial/tax/insurance information, contracts, or data about children/other people: upload only when necessary; redact or remove unnecessary information; and share only when you have the appropriate rights, consent, or lawful basis.

Who may be able to view a document

Visibility follows Household permissions. Household Owners/Admins with Documents permission and members explicitly selected for sharing may be able to view the file under the Household configuration. Review membership and permissions regularly.

After another person downloads, screenshots, copies, or transfers a file outside HomeLink, HomeLink cannot guarantee recall or deletion of that copy from their device, account, or external service.

The document access lock is not end-to-end encryption

In the current version, the “HomeLink access lock” is an in-app code check only. It does not separately encrypt file contents and is not end-to-end encryption. Do not use this control as a substitute for a password manager or dedicated encrypted vault.

Backups

Keep the original or an independent secure backup in a location you control. HomeLink's JSON export does not package all photo, video, voice, and document binary files and must not be treated as a complete media backup.

HomeLink security measures

HomeLink applies reasonable safeguards such as TLS in transit, Household/role authorization, server-side verification, private object storage, file-format/signature checks, access limits, and authenticated download paths for important documents. No Internet system can guarantee absolute security.

Blocking risky formats or validating file signatures is not antivirus scanning and cannot guarantee detection of every malicious file. Do not open suspicious files or files from untrusted senders.

If you suspect a security incident

If you suspect unauthorized account or document access: change relevant HomeLink/email credentials, secure or sign out devices you no longer control, review Household membership and sharing permissions, and contact homelink.app.support@gmail.com.

Mandatory consumer and data-protection rights under applicable law are not excluded by this notice.

Copies shared with members

HomeLink enforces server-side access controls, but once an authorized member downloads, screenshots, copies, or re-shares a document outside the app, removing HomeLink access or deleting an account cannot automatically erase that external copy. Share the minimum necessary and review Household membership before uploading sensitive material.

Do not use HomeLink as the only backup

For irreplaceable records or data, keep at least one independent copy in a location you control. HomeLink is not a guaranteed archival custody service, password vault, or E2EE secret vault. Reasonable security controls reduce risk but cannot eliminate all device, network, operating-system, human, or infrastructure failures.