Private by design
Security & privacy
Each paying household gets its own hub. Only people you invite can sign in. This page states what we can stand behind today.
Your own hub, not a shared app
A customer hub is a separate stack for that household. Other customers cannot open it, query it, or see its house guide. The public demo is a different site with fictional data.
- Worker (API)One per hub
- DatabaseOne per hub
- File storage (guides and photos)One per hub
- Website and DNSOne hostname per hub
- Sign-in applicationsTwo per hub (site + API)
Billing records live in a platform database keyed by hub. When a subscription ends we take a hub archive for possible restore, stored separately and prefixed by site.
How sign-in works
Owners and guests sign in with Cloudflare Zero Trust. A one-time code is emailed to an address you have allowed. There is no public registration on a live hub.
Every API call is checked server-side against that session. Sharing the hub URL is not enough — the email must be on the allow-list.
Owner tools also need an owner PIN you set. The PIN is rate-limited so guessing it is slow.
What guests can see
Guest mode (Settings → Guest mode & stays) is a simpler home screen. Guide editor, backups, and home-control buttons stay with the owner.
For a scheduled stay, they can sign in from two weeks before and read the house guide — Wi‑Fi, address, and lockbox stay hidden until the stay dates, then appear automatically. Their login is removed the day after checkout.
On a wall tablet, or for a walk-in visitor without a booked stay, use the “Guest is here” toggle (or Sitter / Tenant / Family — matching your hub setup) so those home-access details appear.
A remote guest uses their own device and the same email one-time code. They never get owner mode on that login.
What we store, and where
- On your hub — house guide, photos, bin dates, contacts, Wi‑Fi and lockbox details you enter, and display preferences.
- For billing — your email, hub name, and Stripe subscription status. Stripe holds the card. We do not store card numbers.
- This marketing site — static pages. No analytics product, no advertising cookies.
Cloudflare encrypts the database and file storage at rest (AES-256) and all traffic uses HTTPS. Household secrets in the hub database are readable by that hub's server so the guide and Wi‑Fi QR can work. We do not claim operator-proof secrecy of those values.
We do not promise a UK-only or EU-only data region on existing hubs. We do not keep an audit log of who opened which guide topic.
Backups and deletion
You can download a full hub backup at any time. The file is encrypted in your browser with a password you choose — we never see that password. Full backups include photos and appliance PDFs; restore puts them back automatically. Guide-only backups are smaller and omit media and secrets.
Cancel anytime from Account → Billing. After a paid period ends, the live hub is taken down; we keep your archived guide for about 12 months so you can reinstate the same name from Billing or My Homes. Email support@lovely-home.co.uk if you need a copy or want the archive removed.
Questions about security — email support. Ready to try it?