Dwarf Knight Technologies ("Dwarf Knight Technologies", "we", "our", or "us") operates Home Base, a personal home inventory and organization application and related services (collectively, the "Service").

This Privacy Policy explains how we collect, use, store, disclose, and protect personal information when you use Home Base.

We are committed to collecting only the information reasonably necessary to provide and improve the Service and to handling personal information in accordance with applicable privacy and data protection laws, including, where applicable, the EU General Data Protection Regulation ("EU GDPR"), the UK General Data Protection Regulation ("UK GDPR"), the Data Protection Act 2018, and applicable California privacy laws including the California Consumer Privacy Act as amended ("CCPA/CPRA").

By using Home Base, you acknowledge that you have read this Privacy Policy.

The entity responsible for your personal information is:

Dwarf Knight Technologies

Email: homebase@dwarfknight.com

Website: https://homebase.dwarfknight.com

For privacy-related questions, requests, or concerns, contact us at:

homebase@dwarfknight.com

The information we collect depends on how you use Home Base.

We may collect the following categories of information.

2.1 Account Information

If you create a Home Base account, we may collect:

• Email address
• Account identifier
• Authentication information
• Name or profile information, if provided through an authentication provider
• Account creation and authentication-related information

If you use Google or Apple authentication, we may receive information that the authentication provider makes available to us, such as your email address, name, and provider-specific account identifier, depending on the permissions and configuration associated with your account.

We do not receive your Google or Apple password.

2.2 Home Inventory Information

Home Base allows you to record information about items you own or manage.

Depending on the features you use, this may include:

• Item names
• Item descriptions
• Categories
• Brands
• Models
• Serial numbers
• Purchase dates
• Purchase prices or estimated values
• Warranty information
• Warranty expiration dates
• Maintenance information
• Item locations
• Room names
• Notes
• Reminder information
• Other information you voluntarily enter into the Service

Some of this information may indirectly reveal information about your household or possessions. We treat information stored in your Home Base account as your user content.

You should avoid entering highly sensitive personal information into fields that are not intended for that purpose.

2.3 Photos and Documents

Home Base may allow you to upload or capture:

• Photographs of household items
• Photographs of rooms
• Receipts
• Invoices
• Warranty documents
• Manuals
• Other documents associated with your inventory

These files may contain personal information that you choose to include, such as names, addresses, order numbers, billing information, or other information appearing on receipts or documents.

We process these files to provide the functionality you request, including storing, displaying, organizing, and retrieving your inventory information.

You are responsible for ensuring that you have the necessary rights to upload information or documents belonging to other individuals.

2.4 Reminders and Notifications

If you use reminders or notification features, Home Base may process information such as:

• Reminder titles
• Reminder descriptions
• Dates
• Maintenance schedules
• Warranty dates
• Notification preferences

Notifications may be delivered through your device's operating system or supported notification services.

You can generally control notification permissions through your device settings.

2.5 Device and Technical Information

When you use Home Base, we may automatically receive limited technical information necessary to operate, secure, and troubleshoot the Service.

Depending on the platform and configuration, this may include:

• Device type and model
• Operating system and version
• App version
• Language and regional settings
• Device or installation identifiers
• IP address
• Network information
• Error information
• Crash information
• Performance information
• Diagnostic information

We use this information primarily for security, troubleshooting, stability, and service improvement.

2.6 Information You Provide When Contacting Us

If you contact us for support or other purposes, we may collect:

• Your email address
• Your name, if provided
• Information about your account
• Information about the problem or request
• Any other information you voluntarily provide

We use this information to respond to you and provide customer support.

We use personal information for the following purposes:

Providing Home Base

To:

• Create and manage your account
• Authenticate you
• Store and retrieve your inventory
• Store photos and documents
• Organize your items and rooms
• Provide search and organization functionality
• Provide reminders and notifications
• Synchronize your information across supported devices
• Provide other features you request

Maintaining and Improving the Service

To:

• Diagnose technical problems
• Monitor application performance
• Fix bugs
• Improve reliability
• Develop new features
• Understand how the Service is used
• Prevent misuse and abuse

Security and Fraud Prevention

To:

• Protect accounts
• Detect unauthorized access
• Prevent abuse
• Investigate security incidents
• Protect our systems, users, and services

Communications

To:

• Respond to support requests
• Send important service-related communications
• Send security or account notifications
• Communicate changes to the Service when necessary

We do not use your private inventory information to send you unrelated marketing communications without an appropriate legal basis or consent where required.

Legal Compliance

We may process information where necessary to:

• Comply with applicable laws
• Respond to lawful requests
• Establish, exercise, or defend legal claims
• Protect our legal rights
• Protect users or the public from harm

Where the EU GDPR or UK GDPR applies, we process personal information using one or more lawful bases.

Performance of a Contract

We process information when necessary to provide Home Base to you under our agreement with you.

For example:

• Creating your account
• Authenticating your account
• Storing your inventory
• Storing your uploaded files
• Synchronizing your information
• Providing requested features

Legitimate Interests

We may process information where necessary for our legitimate interests, provided those interests are not overridden by your rights and freedoms.

Examples include:

• Securing Home Base
• Preventing abuse
• Diagnosing technical problems
• Improving application performance
• Maintaining our infrastructure
• Protecting our legal rights

Consent

Where required, we may rely on your consent.

For example, consent may be required for certain optional communications, analytics, advertising, or other processing activities.

Where processing is based on consent, you may withdraw your consent at any time. Withdrawal does not affect processing that occurred before withdrawal.

Legal Obligations

We may process information where necessary to comply with a legal obligation.

Home Base is designed to allow you to store information about your possessions and household.

You retain your rights in the content you submit to Home Base, subject to the rights necessary for us and our service providers to operate the Service.

By uploading content, you grant Dwarf Knight Technologies the limited rights necessary to host, store, reproduce, transmit, and process that content solely for the purpose of providing the functionality you request.

We do not claim ownership of your inventory information, photographs, receipts, or other documents that you upload.

We do not sell your personal inventory information.

Home Base uses third-party infrastructure providers to provide certain technical services.

For example, Home Base uses Supabase for services that may include:

• Authentication
• Database services
• Cloud storage
• Backend infrastructure

Information stored through these services may include your account information, inventory information, photos, documents, and other content necessary to provide Home Base.

We select service providers that are appropriate for the services they provide and require appropriate contractual, security, and data protection measures where applicable.

Home Base may support authentication through third-party providers such as:

• Google
• Apple

If you choose to use a third-party authentication provider, that provider will process information according to its own privacy policy.

We receive only the information made available to us through the authentication process and necessary to create or authenticate your Home Base account.

You should review the privacy policies of any authentication provider you use.

We may use third-party providers to help operate Home Base.

These providers may provide services such as:

• Cloud infrastructure
• Database hosting
• Authentication
• File storage
• Email delivery
• Error and crash reporting
• Application performance monitoring
• Analytics
• Payment processing
• Push notifications
• Security services

Third-party providers may process personal information on our behalf where necessary to provide their services.

We do not authorize our service providers to use your personal information for purposes unrelated to the services they provide to us, except where required or permitted by applicable law.

If Home Base offers paid subscriptions or other purchases, payments may be processed through third-party platforms such as:

• Google Play
• Apple App Store
• Other payment providers we may use in the future

We generally do not receive or store your complete payment card number when payments are processed through these platforms.

Payment providers may provide us with limited information necessary to confirm a purchase or subscription, such as transaction identifiers, subscription status, product information, and relevant account identifiers.

Payment processing is subject to the applicable provider's terms and privacy policy.

Home Base may be offered with or without advertising depending on the version of the Service.

If advertising is introduced, advertising providers may process information such as device identifiers, advertising identifiers, approximate location derived from technical information, and information about interactions with advertisements, subject to applicable law and user choices.

Where legally required, we will obtain consent before using non-essential advertising technologies or identifiers.

If Home Base does not contain advertising, advertising providers will not receive your information from Home Base for advertising purposes.

We may use analytics or diagnostic services to understand how Home Base performs and how users interact with its features.

Depending on the services enabled, this may include information such as:

• App version
• Device type
• Operating system
• Feature usage
• Session information
• Crash information
• Performance information
• General usage statistics

Where applicable, we will provide appropriate controls or obtain consent for analytics that require consent under applicable law.

We do not intentionally use analytics to identify the contents of your private inventory unless specifically necessary for a feature you have requested and disclosed to you.

Home Base may introduce optional artificial intelligence features in the future.

For example, AI functionality may assist with:

• Identifying objects in photographs
• Extracting information from receipts
• Recognizing brands or models
• Categorizing inventory
• Estimating replacement values
• Searching or organizing inventory

If an AI feature processes personal information or uploaded content, we will provide appropriate information about that processing before or when the feature is used.

We will not use your private inventory content to train third-party AI models unless this is specifically disclosed to you and permitted by applicable law.

We do not sell your personal information.

We may disclose personal information in the following circumstances:

Service Providers

To vendors and contractors that provide services necessary to operate Home Base.

Authentication Providers

When you choose to authenticate using Google, Apple, or another supported authentication provider.

Payment Providers

When necessary to process purchases or subscriptions.

Legal Requirements

When disclosure is required by law, regulation, legal process, court order, or valid governmental request.

Protection of Rights and Safety

When reasonably necessary to:

• Protect our users
• Protect our systems
• Prevent fraud or abuse
• Investigate security incidents
• Protect our legal rights
• Prevent serious harm

Business Transfers

If Dwarf Knight Technologies undergoes a merger, acquisition, restructuring, financing, sale of assets, or similar transaction, personal information may be transferred as part of that transaction, subject to applicable law.

Dwarf Knight Technologies and its service providers may process information in countries other than the country where you live.

For users in the European Economic Area, Switzerland, or the United Kingdom, this may include transfers to countries outside the EEA, Switzerland, or the UK.

Where applicable law requires safeguards for international transfers, we will use appropriate mechanisms, which may include:

• Adequacy decisions
• Standard Contractual Clauses
• UK International Data Transfer Agreements or Addendums
• Other legally recognized transfer mechanisms

You may contact us at homebase@dwarfknight.com for additional information regarding applicable transfer safeguards.

We retain personal information only for as long as reasonably necessary for the purposes described in this Privacy Policy, including to:

• Provide Home Base
• Maintain your account
• Provide requested services
• Maintain security
• Resolve disputes
• Enforce agreements
• Comply with legal obligations

Your inventory data and uploaded files are generally retained while your account remains active or until you delete them.

If you delete your account, we will initiate deletion of your account and associated personal information, subject to:

• Legal retention requirements
• Legitimate security or fraud-prevention requirements
• Backup systems that may retain information temporarily
• Information that must be retained to establish, exercise, or defend legal claims

Backup copies may take a reasonable period to be overwritten or securely deleted.

You may request deletion of your Home Base account and associated personal information.

To request account deletion, contact:

homebase@dwarfknight.com

Where account deletion functionality is available directly within Home Base, you may also use that functionality.

Account deletion may result in permanent deletion of:

• Your account
• Inventory information
• Photos
• Uploaded documents
• Rooms
• Reminders
• Other account-associated content

Deleted information may not be recoverable.

Some information may be retained where required or permitted by law.

If the GDPR or UK GDPR applies to you, you may have the following rights, subject to applicable legal conditions and exceptions:

Right of Access

You may request a copy of the personal information we hold about you.

Right to Rectification

You may request correction of inaccurate or incomplete information.

Right to Erasure

You may request deletion of your personal information in certain circumstances.

Right to Restriction

You may request that we restrict processing in certain circumstances.

Right to Object

You may object to certain processing, including processing based on legitimate interests.

Right to Data Portability

Where applicable, you may request your personal information in a structured, commonly used, machine-readable format and request that it be transferred to another controller.

Right to Withdraw Consent

Where processing is based on consent, you may withdraw your consent at any time.

Rights Relating to Automated Decision-Making

Where applicable, you may have rights concerning solely automated decision-making that produces legal or similarly significant effects.

Home Base is not intended to make decisions about users that produce legal or similarly significant effects solely through automated processing.

To exercise your rights, contact:

homebase@dwarfknight.com

We may need to verify your identity before fulfilling certain requests.

We will respond within the time period required by applicable law.

You generally will not be charged for exercising your privacy rights unless applicable law permits us to charge a reasonable fee for manifestly unfounded, repetitive, or excessive requests.

If you are located in the European Economic Area, you have the right to lodge a complaint with the data protection authority in your country of residence, place of work, or place where you believe an infringement occurred.

If you are located in the United Kingdom, you may lodge a complaint with the Information Commissioner's Office (ICO).

We encourage you to contact us first so that we have an opportunity to address your concern, but you are not required to do so before contacting a supervisory authority.

This section applies to California residents to the extent the CCPA/CPRA applies to Dwarf Knight Technologies and Home Base.

California residents may have rights including:

• The right to know what personal information is collected, used, disclosed, or sold or shared, as applicable
• The right to request access to personal information
• The right to request deletion of personal information
• The right to correct inaccurate personal information
• The right to opt out of the sale or sharing of personal information, where applicable
• The right to limit certain uses or disclosures of sensitive personal information, where applicable
• The right not to receive discriminatory treatment for exercising applicable privacy rights

Categories of Personal Information

Depending on how you use Home Base, we may collect categories of personal information that correspond to categories described under California law, including:

• Identifiers, such as email address and account identifiers
• Internet or network information, such as IP address and interaction information
• Commercial information, such as purchase information that you choose to store in your inventory
• Geolocation-related information, if you voluntarily provide or enable such functionality
• User-generated content, such as photographs, receipts, documents, notes, and inventory information
• Inferences derived from information you provide, where applicable

We do not intentionally collect sensitive personal information unless it is necessary for a feature you choose to use or you voluntarily provide it.

Sale of Personal Information

We do not sell your personal information for monetary consideration.

Sharing for Cross-Context Behavioral Advertising

If Home Base uses advertising or similar technologies that constitute "sharing" under California law, we will provide the legally required disclosures and opt-out mechanisms.

California Requests

California residents may submit applicable privacy requests by contacting:

homebase@dwarfknight.com

We may verify your identity before processing a request.

Authorized agents may submit requests on behalf of California residents where permitted by law. We may require appropriate documentation confirming the agent's authority.

Home Base is not directed toward children under the age required by applicable law to provide parental consent.

We do not knowingly collect personal information from children in violation of applicable law.

If you believe that a child has provided personal information to us without appropriate authorization, please contact:

homebase@dwarfknight.com

If we become aware that we have collected personal information from a child where collection was not permitted, we will take reasonable steps to delete it.

We use reasonable technical and organizational measures designed to protect personal information against unauthorized access, alteration, disclosure, destruction, or misuse.

Security measures may include:

• Encrypted connections
• Authentication controls
• Access controls
• Secure cloud infrastructure
• Database security measures
• Security monitoring
• Application-level protections
• Appropriate handling of authentication credentials

However, no method of transmission, storage, or electronic security is completely secure.

We cannot guarantee that personal information will never be accessed, disclosed, altered, or destroyed through circumstances outside our reasonable control.

You are responsible for maintaining the security of your account credentials and devices.

The Home Base website may use cookies and similar technologies where necessary to:

• Maintain website functionality
• Remember preferences
• Maintain authentication sessions
• Improve security
• Understand website usage

Non-essential cookies or similar technologies may require consent depending on applicable law.

You can manage cookies through your browser settings and, where provided, through our cookie preferences.

The Home Base mobile application may use technologies necessary for authentication, security, functionality, analytics, or other purposes described in this Privacy Policy.

Home Base may contain links to third-party websites or services.

We are not responsible for the privacy practices, security, or content of third-party websites.

We encourage you to review the privacy policies of third parties before providing them with personal information.

If Home Base provides features such as household or family sharing, information that you choose to share with another user may become accessible to that user.

You should only share information with people you trust.

We are not responsible for how another user subsequently uses information that you voluntarily share with them, except where otherwise required by applicable law.

Home Base may allow you to upload information relating to other individuals, including information contained in receipts, invoices, warranties, photographs, or documents.

Before uploading information about another person, you should ensure that doing so is lawful and appropriate.

You should not use Home Base to store unlawful content or information that you do not have the right to process or upload.

If we become aware of a personal data breach that is required to be reported under applicable law, we will take appropriate steps to investigate, contain, remediate, and notify affected individuals or regulatory authorities where legally required.

We may update this Privacy Policy from time to time to reflect:

• Changes to Home Base
• Changes to our data processing practices
• Changes to technology
• Changes to applicable law
• Changes to our service providers

When we make material changes, we will provide appropriate notice where required by law.

The "Last Updated" date at the beginning of this Privacy Policy indicates when it was most recently revised.

We encourage you to periodically review this Privacy Policy.

If you have questions, concerns, or requests regarding this Privacy Policy or your personal information, contact:

Dwarf Knight Technologies

Email: homebase@dwarfknight.com

Website: https://homebase.dwarfknight.com

For privacy requests, please include sufficient information for us to understand and respond to your request. We may request additional information to verify your identity where necessary.

This Privacy Policy is intended to describe our privacy practices in a manner that supports compliance with applicable privacy and data protection laws.

Depending on where you live and how the law applies to our Service, different rights and obligations may apply.

Nothing in this Privacy Policy limits any rights you may have under applicable law.

Last Updated: August 11, 2026

Dwarf Knight Technologies

Home Base

homebase@dwarfknight.com