Fox Haus LLC

Privacy Policy

August 30, 2026

Fox Haus LLC (“Fox Haus,” “we,” “us,” or “our”) is a limited liability company organized under the laws of the State of New York. This Privacy Policy describes how we collect, use, disclose, and protect information in connection with our websites, mobile applications, and related services (collectively, the “Services”). It applies to all Fox Haus Services unless a specific Service provides its own separate privacy policy.

By using our Services, you acknowledge that your information may be handled as described in this Policy.

Geographic Scope and Availability of Services

Fox Haus is based in and operates its Services from the United States. Certain Services, features, data sources, calculations, recommendations, forecasts, and estimates are designed primarily for use with properties, utility systems, markets, regulations, and climate data located within the United States — this includes our real estate investment, home management, and home energy applications (for example, FlipFox, HomeFox, and EnergyFox). Other applications, such as our gardening and landscaping tools (for example, GrowFox and YardFox), may be useful in other locations but are developed with U.S. users in mind.

While you may access the Services from outside the United States — for example, if you live abroad and own, manage, or are considering property within the United States — some functionality may be unavailable, limited, inaccurate, or operate differently when used with properties, assets, or systems outside the United States. If you access the Services from outside the United States, you understand that your information may be transferred to, stored in, and processed in the United States, where data protection laws may differ from those of your country of residence.

Information We Collect

We collect information necessary to provide, operate, secure, maintain, and improve our Services. The specific information collected depends on the Service you use and how you use it.

Information you provide. This may include your name and email address; account and profile information; subscription and billing-related information; communications and support requests; and information you choose to upload, enter, or create within the Services. Depending on the application, this may include property details, energy-usage details, garden and plant details, landscaping details, home-maintenance records, photos and other images, documents, and notes necessary to provide the functionality of the Service. It also includes the measurements, scores, classifications, and other data we derive from that content in order to operate the Services.

Information collected automatically. When you use our Services, we may automatically collect technical and usage information such as device type and operating system, browser type, application version, language and region settings, and usage, performance, and diagnostic information (including crash reports).

Identifiers. We may collect identifiers such as account identifiers, device identifiers, or similar identifiers necessary to operate, secure, and improve the Services.

Connected device and sensor information. Where you connect a sensor, controller, or other equipment (“Connected Device,” as defined in our Terms of Service), we collect readings and telemetry from it and information about it. Depending on the device, this may include soil and air temperature, soil moisture, humidity, light, pH, electrical conductivity, water level and reservoir volume, flow, pressure, rainfall, valve and pump state, runtime, power and battery state, signal strength, fault and error codes, and, where a camera is connected, images. We also collect device identifiers, model, manufacturer, and firmware information; connection status and history; calibration and configuration settings; the schedules, thresholds, rules, and automations you create; and a log of commands issued and actions taken, including their time, source, and outcome. Sensor information is typically collected continuously or at regular intervals for as long as a device is connected, and is associated with the location where the device is installed.

Location information. Many of our applications request access to your device location to provide location-dependent features — for example, weather and climate data, plant-hardiness-zone lookups, property-location functionality, mapping, and local recommendations. Where precise location is not required, we may use only approximate or coarse location (such as a general area) to deliver these features. You may grant or revoke location access at any time through your device settings. Where you install a Connected Device, we also retain the location you associate with it, which is a fixed and precise property location rather than an occasional lookup.

Payment information. We do not store complete payment card numbers. Payment transactions are processed by third-party payment processors, who collect and process payment information under their own privacy policies.

Links and referrals. Some Services include links to third-party products or retailers, which may be affiliate links (see “Affiliate Links and Product Recommendations”). When you interact with these links, we and our partners may collect information about the interaction for attribution and reporting.

Information We Do Not Intentionally Collect

We do not collect:

Social Security numbers, passport numbers, driver’s license numbers, or other government-issued identification numbers;
biometric identifiers used to identify an individual;
financial account credentials or complete payment card numbers; or
audio recordings. Where a Service supports a connected camera, that functionality is used for visual analysis of plants, growing conditions, and equipment, and is not used to capture or transmit audio.

How We Use Information

We use information to:

Provide, operate, and maintain our Services;
Authenticate users and manage accounts;
Process subscriptions and transactions;
Respond to inquiries and support requests;
Operate automated and AI features, including analyzing the content you provide to generate diagnoses, recommendations, insights, forecasts, reports, estimates, measurements, and scores;
Operate the monitoring, alert, scheduling, and automation features you enable, including transmitting commands to Connected Devices you have connected;
Diagnose and troubleshoot device, connectivity, calibration, and automation faults;
Develop, test, evaluate, and improve features, algorithms, and functionality, and develop new features and Services;
Measure and analyze the outcomes of treatments, products, techniques, and other interventions to evaluate what is associated with successful results in similar conditions;
Generate de-identified and aggregated analytics, statistics, benchmarks, and reports, and conduct research (see “Analytics, De-Identified Information, and Research”);
Monitor, secure, and improve the reliability of our Services;
Detect, prevent, and address fraud, abuse, security incidents, and technical issues;
Comply with legal obligations; and
Enforce our terms, policies, and agreements.

We do not sell your personal information, and we do not share it for cross-context behavioral advertising.

Analytics, De-Identified Information, and Research

A core function of several Services is to learn, in aggregate, what works. To do this we create de-identified information from the content you provide — including images and the measurements, scores, and other data derived from them — using technical and organizational measures intended to remove or separate information that directly identifies an individual before it is used for analytics, benchmarking, or research. We do not attempt to re-identify de-identified information, and we publicly commit to maintain and use it in de-identified form and not to attempt to re-identify it, except where permitted by law to test the effectiveness of our de-identification measures. We contractually require recipients of de-identified information to do the same. Subject to those commitments, we may use de-identified information for lawful business purposes, including the analytics and research described below.

We use de-identified and aggregated information to:

measure the outcomes of treatments, products, techniques, and other interventions, and compare outcomes across many users to determine how frequently a product, treatment, or technique is associated with successful outcomes in similar conditions;
generate effectiveness statistics, benchmarks (for example, typical outcomes or results under similar conditions), statistical reports, and visualizations;
evaluate, validate, and improve our models, recommendations, and Services; and
conduct internal scientific, statistical, horticultural, agricultural, engineering, and product research.

Because de-identified and aggregated information no longer identifies you, we may retain and continue to use it, including after you delete your account. Any findings we publish will use aggregated or de-identified information unless we separately obtain your permission.

We own the analyses, scores, models, aggregated statistics, benchmarks, reports, and other outputs generated through the Services; we do not claim ownership of the content you provide.

Artificial Intelligence and Automated Features

Certain Services use artificial intelligence, machine learning, or automated processing to analyze information you provide and generate recommendations, insights, forecasts, reports, estimates, measurements, scores, or other outputs. These outputs are provided for informational purposes only and may not always be accurate, complete, or suitable for your specific circumstances.

We use the information you provide to operate these features — including processing it through our own and our providers’ models to produce results for you — and, in de-identified or aggregated form, for the analytics and research described above.

We do not use information that directly identifies you — including sensor readings, device telemetry, and images associated with your account — to train or develop general-purpose artificial intelligence models. Operating these features (such as generating a result from your input), evaluating and benchmarking our systems, and improving our Services do not involve such training. If we intend in the future to use identifiable information to train general-purpose AI models, we will separately request your permission or otherwise disclose such use in accordance with applicable law.

Connected Devices and Automation Data

How we use it. We use device and sensor information to display readings, history, and trends; to run the schedules and automations you configure; to send the alerts you enable; to diagnose device, connectivity, and automation problems; to improve our models, recommendations, and Services; and, in de-identified or aggregated form, for the analytics and research described above.

What this information can reveal. Readings collected continuously from a home, greenhouse, yard, or other property can indicate when a space is occupied, when it is empty, and the routines of the people in it. Where you connect a camera, it may capture images of people, including members of your household and visitors. Please consider this before installing a device in a shared, occupied, or sensitive space, and inform others who live in or use the space. You are responsible for having the right to install a device where you install it, and for complying with any law that applies to recording, including laws governing audio recording and recording in shared, rented, or workplace premises.

Third-party device platforms. Connecting a device commonly requires you to authorize a connection between the Services and the manufacturer’s or platform’s account. That third party independently collects and processes information under its own privacy policy, which we do not control and are not responsible for. Disconnecting a device in our Services may not stop the third party’s collection; you may also need to act in that platform’s own settings or account.

Retention. We retain device and sensor readings for as long as reasonably necessary to provide history, trend, comparison, and diagnostic features, after which they may be deleted, anonymized, or aggregated. Records of commands, automations, configuration changes, and account access may be retained longer to support security, fault diagnosis, and the resolution of disputes.

Security and control. Because account access can allow a person to operate physical equipment, see “Data Security” and “Account and Data Deletion” below.

Affiliate Links and Product Recommendations

Some Services recommend products and may include affiliate links, meaning Fox Haus may earn a commission if you purchase through them, at no additional cost to you. Where we use affiliate links, we disclose this in context. We, or the affiliate programs and networks we work with, may collect information about link interactions and resulting purchases in order to attribute referrals and report on them; affiliate partners may act as independent controllers of information collected through their links, under their own privacy policies. The existence of compensation is not a warranty, endorsement, certification, or guarantee by Fox Haus regarding any recommended product.

Cookies and Similar Technologies

Our websites and certain Services use cookies, local storage, pixels, and similar technologies to:

keep you signed in;
remember preferences;
improve security;
measure performance and usage;
understand how our Services are used; and
support affiliate attribution where applicable.

Most browsers allow you to manage or disable cookies. Some features of the Services may not function properly if cookies are disabled.

We do not sell personal information. We share information only in the following limited circumstances:

Service providers. We use trusted third-party service providers to host, store, process, analyze, secure, support, and improve our Services, and they may process information on our behalf only as necessary to perform services for us. These providers include cloud hosting and storage providers; analytics providers; crash-reporting and diagnostics providers; subscription and payment processors; AI-processing providers that process information solely to provide requested functionality on our behalf; environmental and other data providers; connected-device manufacturers, device cloud platforms, and connectivity and integration providers, where necessary to operate a connection you have authorized; and email and customer-support providers.

Affiliate programs and networks. Where you interact with affiliate links, we may share limited interaction information with affiliate programs and networks for attribution and reporting, as described above.

Legal requirements and safety. We may disclose information if required by law, regulation, legal process, or governmental request, or where we reasonably believe disclosure is necessary to comply with legal obligations, protect our rights or property, protect the safety of our users or others, or investigate fraud, abuse, or security issues.

Business transfers. If Fox Haus is involved in a merger, acquisition, financing, reorganization, or sale of assets, information may be transferred as part of that transaction, subject to this Policy.

Data Security

We implement reasonable administrative, technical, and organizational safeguards, including encryption where appropriate, access controls, authentication measures, monitoring, and other security practices designed to protect information against unauthorized access, disclosure, alteration, loss, or misuse. However, no method of transmission over the Internet or electronic storage is completely secure, and we cannot guarantee absolute security.

Because the Services can operate physical equipment, unauthorized access to your account could allow another person to view your property’s conditions or to operate your equipment. Please use a strong, unique password, enable any additional account-security features we offer, revoke access for anyone who no longer needs it, and contact us promptly at developer@foxhaus.org if you suspect unauthorized access.

Data Retention

We retain information only for as long as reasonably necessary to provide our Services, maintain accounts, comply with legal obligations, resolve disputes, enforce agreements, and support legitimate business operations. When information is no longer needed, it may be deleted, anonymized, or aggregated. As described in “Analytics, De-Identified Information, and Research,” we may retain de-identified and aggregated information, which no longer identifies you, on an ongoing basis, including after account deletion.

Your Privacy Rights and Choices

Depending on where you live, you may have some or all of the following rights regarding your personal information:

Access — request a copy of the personal information we maintain about you;
Correction — request that we correct inaccurate or incomplete information;
Deletion — request that we delete your personal information;
Portability — request a copy of certain information in a portable format;
Opt out — opt out of the “sale” or “sharing” of personal information (note: we do not sell or share personal information for cross-context behavioral advertising);
Limit the use of sensitive personal information — where applicable law treats certain information as sensitive, including precise geolocation, limit its use and disclosure to what is necessary to provide the Services. Because a Connected Device is associated with a fixed property location, information you provide may include precise geolocation; we use it to deliver the location-dependent and device features you request and for the purposes described in this Policy, and not for advertising or profiling; and
Opt out of profiling — where applicable law provides it, opt out of profiling in furtherance of decisions producing legal or similarly significant effects. We do not use the Services to make such decisions about you. Automated features such as schedules, alerts, and automations operate your equipment and produce recommendations; they do not determine your legal rights, eligibility, or access to any service.

To exercise any of these rights, contact us at developer@foxhaus.org. We will respond within the timeframe required by applicable law and will not discriminate against you for exercising your rights. These rights are available to residents of U.S. states with comprehensive privacy laws, including California, to the extent those laws apply; as noted above, we do not sell or share personal information as those terms are defined under those laws.

Authorized agents. Authorized agents may submit requests on behalf of eligible individuals where permitted by law. We may request verification of both the request and the agent’s authority.

Do Not Track Signals

Some web browsers offer a “Do Not Track” feature. Because there is not currently a universally accepted standard for responding to these signals, our Services do not currently respond differently to them.

Account and Data Deletion

Our applications require you to create an account in order to use them. You can delete your account and its associated data directly within each application, under Settings, or by contacting us at developer@foxhaus.org. Deleting your account will stop monitoring, alerts, schedules, and automations, and connected equipment may stop operating or remain in its current state. Before deleting your account, return any connected equipment to safe manual operation.

When you delete your account, we delete or anonymize the associated personal information — including identifiable copies of your images, subject to legal obligations and routine backup retention schedules — except where required or permitted by law, or reasonably necessary for security, fraud prevention, tax, accounting, or dispute resolution purposes, or where information has been de-identified or aggregated as described above.

For Users in the European Economic Area, United Kingdom, and Switzerland

If you are located in these regions, Fox Haus LLC is the data controller of your personal information, and you may contact us about it at developer@foxhaus.org.

Legal bases. We process personal information to perform our contract with you — creating and maintaining your account, providing the Services and features you request, operating the monitoring, alerts, schedules, and automations you enable, and processing subscriptions and payments. We process it for our legitimate interests — securing the Services and preventing fraud and abuse, diagnosing faults, measuring outcomes and conducting research using de-identified information, and improving and developing our Services — where those interests are not overridden by your rights. We process it to comply with legal obligations. Where required, including for certain non-essential cookies and similar technologies, and for any use of a connected camera where consent is the applicable basis, we process it with your consent, which you may withdraw at any time without affecting processing already carried out.

Your rights. Subject to applicable conditions and exemptions, you have the right to access your personal information; to have it corrected; to have it erased; to restrict its processing; to object to processing carried out on the basis of legitimate interests, including at any time to processing for direct marketing; to receive it in a portable format; and to withdraw consent where processing is based on consent. To exercise any of these rights, contact us at developer@foxhaus.org.

Automated decision-making. We do not make decisions based solely on automated processing that produce legal effects concerning you or similarly significantly affect you.

Retention. We retain personal information for the periods and according to the criteria described in “Data Retention” above.

International transfers. Fox Haus operates from the United States, and your personal information will be transferred to and processed there. Where we transfer personal information out of the EEA, United Kingdom, or Switzerland, we rely on appropriate safeguards as required by applicable law, including standard contractual clauses with our service providers where applicable. You may contact us for further information about the safeguards we use.

Complaints. You have the right to lodge a complaint with your local data protection supervisory authority.

Children’s Privacy

Our Services are intended for adults. As set out in our Terms of Service, you must be at least 18 years old, or the age of majority in your jurisdiction, to create an account or use the Services. We do not direct the Services to children and do not knowingly collect personal information from anyone under 18, and in no case from a child under 13 (or under 16 in regions where that is the applicable age). If we become aware that we have collected personal information from a child, we will take reasonable steps to delete it and to close any associated account. If you believe a child has provided us with personal information, contact us at developer@foxhaus.org.

Where a connected camera or other device is installed in a household, it may capture images of children who are not users of the Services. You are responsible for the placement of any device you install and for informing others in the household.

Changes to This Policy

We may update this Privacy Policy from time to time. When we make material changes, we will revise the date at the top of this Policy and, where appropriate, provide additional notice.

Contact Us

If you have questions, contact us at: