Privacy Policy
Effective date: 2026-10-09
Version: privacy-2026-10-09-v1
Reviewed: 2026-10-09
Who operates Homeward
Homeward, also identified as Loan Health Report, is operated by WireHair Productions, LLC, 1845 Reserve St, Spearfish, SD 57783, United States. Privacy and support contact: Stephen Reichert, wirehair80@gmail.com. The service is intended for users in the United States only, age 18 or older.
Information you provide
We collect account email and an authentication identifier, profile and contact details, and the borrower and co-borrower information you enter. This may include reported credit scores or no-score answers, employment and income, income histories, assets, liabilities and balances, property addresses and goals, military or homebuyer information, financial assumptions, saved scenarios, and Home Coach responses and conversation records. Provide co-borrower information only with permission. The audited app does not pull credit reports, connect to bank accounts, or independently verify reported financial information.
Purposes and storage
Account information supports authentication, profile storage, account recovery, and service security. Financial information supports mortgage planning, deterministic assessments, scenario comparisons and saved paths. Home Coach guides collection and explains planning results; it uses local deterministic logic and does not send conversations to an external AI provider in the audited implementation. Profile facts, conversation messages, context snapshots, selected paths and sharing records are stored in Google Firebase/Firestore. Firebase Authentication manages credentials and sessions. Local device/browser storage holds authentication sessions and limited borrower-scoped loading and resume metadata, not full profile or dashboard caches. Data displayed in a running session remains in memory. Files you download remain under your control.
Providers and technical information
Google Firebase provides authentication, database, hosted pages and backend functions. When configured, Firebase App Check and reCAPTCHA Enterprise help protect web requests. The services may process network, browser/device, security and diagnostic information according to their own practices. Address autocomplete sends typed address text through our backend to Geoapify, using OpenStreetMap-derived information. Optional enabled property lookup sends an address through our backend to RentCast to obtain property/listing information. Results are estimates and may be retained as property/profile source context. Server quota records contain hashed account identifiers and counters; their expiry field is not proof that automatic deletion is configured. Provider retention and our verified infrastructure settings are described below. Google sign-in is optional and available only where configured. No active advertising SDK, analytics SDK initialization, crash-reporting SDK, subscription billing, marketing-email or SMS campaign integration was found in the audited code; this description does not limit the providers’ own processing under their policies.
Provider retention details
Geoapify’s published policy says API requests can include request bodies, headers, IP addresses and timestamps, retained as needed for usage statistics, and that successful-request data is generally held no longer than 24 hours. That statement is not a universal deadline for error logs or all provider records. RentCast’s published policy does not specify a fixed retention period for our property-lookup requests, so we do not promise one. These providers receive address requests through our backend, rather than your full financial profile. Their practices can change. Provider notices: https://www.geoapify.com/privacy-policy/ and https://www.rentcast.io/privacy . Google retention documentation: https://docs.cloud.google.com/logging/docs/store-log-entries and https://firebase.google.com/docs/firestore/disaster-recovery .
Borrower-authorized lender sharing
Saving a loan officer in your address book does not share your profile. Selecting recipients and tapping Send authorizes the reviewed financial profile and selected scenario package for those recipients. Packages may include identity/contact and borrower/co-borrower financial facts, income/employment, assets, debts, reported credit, property/loan goals, scenario assumptions and planning assessments with provenance and limitations. The full raw Home Coach transcript is not a package section. The package is a frozen snapshot; later profile edits do not silently change it. Recipient eligibility and access controls remain separate from this policy acknowledgment. Availability of portal delivery and downloads depends on configured, approved backend access. Package access and delivery events are recorded. General terms acceptance does not authorize lender sharing. WireHair Productions, LLC may consider compensation related to lender introductions in the future; any proposed arrangement requires review and applicable disclosure before introduction. This notice does not authorize additional sharing of your information.
Revoking access
Use Send to lender → Manage package access → Revoke access for a previously authorized recipient. Revocation prevents future portal retrieval of that package through our service after the server confirms it. It cannot erase a copy already viewed, downloaded, exported or independently retained by a lender. Independent lenders are responsible for their own records and privacy practices. Removing an address-book entry alone does not revoke a package.
Choices, retention and deletion
You may edit your profile, manage saved paths, choose recipients, revoke future portal access, and change contact preferences. Settings includes a separate sharing opt-out; it blocks new package preparation/authorization and contact requests, but does not itself revoke historical packages or erase previously downloaded copies. Optional mail requests open a composer for you to review and send; legal acknowledgment does not authorize marketing or contact. Use Settings → Account Session → Delete Account to confirm and reauthenticate, then request server deletion. The deletion job blocks new account writes and portal access, removes borrower profile subcollections, saved scenarios, conversations, service-held snapshots, grants and related artifacts, and deletes the authentication account after cleanup. Interrupted processing retries; a request confirmation is not a claim that deletion has finished. Local borrower caches are purged when the request is acknowledged and on sign-out. Service-held acceptance records are removed with the account. A minimal deletion deny marker is kept for at least 65 minutes after authentication deletion to cover the remaining lifetime of issued authentication tokens, then removed by a scheduled cleanup running every five minutes when operating normally; interrupted cleanup may take longer; it contains no financial data. Copies held by independent lenders, exported files on your devices, and provider-controlled operational logs or backups are outside this automatic cleanup. We retain your profile information while your account remains open, until you delete your account. Stopping use of the app does not itself delete your account. Account deletion follows the workflow and limitations described above. Google Cloud’s configured default log bucket retains entries for 30 days; its required audit-log bucket retains entries for 400 days. Account deletion does not selectively erase those provider logs. On October 9, 2026, this project had no Firestore scheduled backups, no listed Firestore backups, and point-in-time recovery disabled. Firestore reported a one-hour database version-retention window; that is not a promise that all Google infrastructure copies disappear within one hour. We do not promise a fixed expiration for provider-managed disaster-recovery copies where no such period has been verified. Support and privacy correspondence may remain in our email account as needed to handle your request, document its resolution, or meet applicable legal obligations; account deletion does not automatically delete that correspondence. We verify requests as appropriate and respond within applicable legal deadlines; we do not promise a universal response period. If retention is required by law, it is limited to the records and period required for that purpose.
Security and requests
We use authentication, account-scoped access rules, server authorization and package integrity checks to restrict access. No electronic service guarantees complete security. Contact wirehair80@gmail.com to ask about access, correction, deletion or other privacy choices; we may need to verify your identity before acting, and applicable rights depend on your location and the law. Do not email passwords, access tokens or full financial documents. The service is intended for adults age 18 or older in the United States. It is not intended for children.
Updates
Each published policy has an effective date and version. Material changes can require a new acknowledgment at sign-in; routine launches do not repeatedly ask once the required version is recorded. Updated notices do not authorize new optional uses such as marketing, tracking, external AI processing or lender sharing.