Privacy

Chrome extension privacy notice.

This notice describes the MyHommi Chrome extension and the service it talks to. It does not cover the myhommi.com website; that has its own notice. It follows the notice the service publishes, and it is more precise where that notice is too absolute.

Read the service notice

Read the website privacy notice

What this service is

The service behind the extension is a tutoring and scan relay. It is the gateway between the extension on the child’s laptop and the AI provider, and it holds Scan-from-Phone pages only for a short time. It does not host this website. The public site at myhommi.com is separate, and the website privacy notice covers it.

Two hostnames reach that service. api.myhommi.com is where the extension sends coaching. scan.myhommi.com is where a phone opens a Scan-from-Phone link. The same notice is served on both. An automatically assigned workers.dev address for this service is switched off and is not a way in. No other hostname is named here, because none other is a published entrance to this service.

The short version

No accounts on the extension. No ads. No advertising and no third-party product analytics. The service runs on Cloudflare, which keeps ordinary operational request logs, and the owner may turn on Cloudflare’s own observability while running it. Those are infrastructure logs. They are not used to build a picture of a child.
What the extension remembers stays on the device, in Chrome’s local storage: the child’s nickname and settings, per-child learning memory (topic names and counts only), the parent lock, and — if one was ever shown — a wellbeing note of the kind and the date only, never the child’s words.
Homework the child adds, and has not yet asked about, stays on the device. It is kept for at most 18 hours so an update or a crash cannot eat an evening, then deleted. A parent can erase it sooner. That stored copy is not uploaded. Homework the child actually asks about is sent on, as the next section says.

What leaves the device, and why

Coaching. Page text, uploaded homework (including photos and PDFs), screenshots the child asks for, and the child’s messages to the coach may be sent through the relay at api.myhommi.com to the AI provider, Anthropic, only to produce the coaching reply. Those messages are the personal communications this product sends.
Retention. The service keeps no conversation history and no content logs of its own. Anthropic states that API content is deleted within 30 days under its standard commercial terms and is not used to train models, subject to the exceptions in Anthropic’s own policies, including keeping material longer where needed to investigate a policy violation or to meet a legal obligation. Those are the provider’s terms. This notice does not add a data-processing agreement, a zero-data-retention schedule or a processor list.
Scan-from-Phone. Photos are held on the relay for minutes. Each page is deleted when the laptop confirms it has that page. The last page has no confirmation to wait for, so the same cleanup removes it: a job that runs every 15 minutes deletes anything older than 20 minutes. The realistic worst case is about 20–35 minutes plus platform delay, with a one-day storage rule as a last resort. The link that opens on the phone carries a short-lived token. That phone page is served on scan.myhommi.com.
The microphone. When the child uses the microphone, Chrome’s own speech recognition turns the speech into text. On Chrome this is a network service: the audio is sent to Google to be transcribed, under Google’s terms and not under this notice. The extension never receives the audio, never stores it and never forwards it — only the text that comes back, which is then treated like anything else the child types. The microphone is used only while the child is holding or has switched on the speak button.
The clipboard. While the step for adding a picture of the homework is open, the extension checks the clipboard each time you come back to the page, so a screenshot just copied can be offered without another step. What it finds is shown first and is used only if you accept it. Declining it discards it. Nothing is read while that step is closed.
The box the child is typing in. When the child asks for help with the field they are working in, the extension reads that field, including a rich-text box, so the coaching can be about what they have actually written. It is read at the moment help is asked for, not continuously.
About the child, so the coaching fits. The child’s age, sex, school year, the school system they follow (which names a country — for example the Netherlands — and the local names for methods taught there) and the topics recorded as strong or weak travel with the request to Anthropic. No name is sent.
Reading aloud. The extension asks the browser to speak, using the voices the browser offers. Some of those voices are produced by the browser maker’s own online service, and on a default Chrome install one of them is usually preferred, so the sentence being spoken may be sent to that service, under that company’s terms and not under this notice. Homework text, images and the child’s answers are not sent there — only the sentence being spoken. The product also has a premium cloud voice, and it is switched off in this release. This notice does not describe that voice as something a family can turn on.
Curated videos. The extension links out to Khan Academy’s own website. Nothing is embedded, and no data is shared with them beyond the visit to their page.

Location, the page, and web history

The service notice denies device location and browsing history without qualification. That is too absolute for what the product does. This section is the precise version.

Device location. The extension does not ask Chrome for the device’s geolocation. Its install permissions do not include the browser’s location permission. That is not the same as no location anywhere.
Crisis-help country. A parent can store a two-letter country code on the device, in chrome.storage.local, under the name safetyCountry. background.js reads safetyCountry, and the settings control is #safetyCountry. A per-child value, profile.safetyCountry, when one is set, is used before the family value. It chooses which country’s reviewed crisis-help numbers the safeguarding directory may show. It is not a GPS reading, and it is not guessed from language, the school system or the network. Left unset, no country-specific numbers are shown.
The page and the homework. When the child asks for help, the extension can read the page already open, and homework the child adds. That page or that homework can name a place. The place is part of the work, not a GPS reading from the device.
Photographs. A Scan-from-Phone picture can carry a place inside the photo file itself. The relay removes that camera data, including location, before it holds the picture. A picture it cannot read well enough to remove that data is refused and not stored. A well-formed picture with nothing to remove is still stored as the picture.
The network. Cloudflare, which carries the traffic, can tell the service owner how many requests arrived from each country — a counted total taken from the network address. It is not joined to an access code, a child or a family, and MyHommi does not store that address as a location record of a child. Separately, the school system chosen in settings names a country, and that choice travels with the coaching request so the words match the school.
Web history. This category stays marked as collected. What is retained is a list of hostnames the family has pinned, stored on the device in chrome.storage.local under the name autoSites (the Autosite pin). Pinning a site makes MyHommi open there by itself next time. The list is those hostnames only. It is not a full browsing history, and it is not a record of every page the child has opened. The extension may still run on every website, so it can coach the page the child already has open, when the child brings MyHommi in.
Website content. The text of the study page, read when the child asks for help, is website content used for coaching, together with homework the child supplies. That is the page in front of them, used to coach that work. It is separate from the pinned-hostname list.

What the relay stores

To enforce daily limits it keeps counters against the access code: request and token counts, and whether a code is disabled or expired. The access code is how the service recognises a family. The parent PIN stays on the device and is not one of these counters. The counters are usage metadata for the limit. They are not a log of how the child moves through other websites.
The service notice also says that, where the service is used without an access code, the relay keeps a per-install identifier, up to 90 days from its last use, and a salted one-way digest of the network address (never the address itself), for about two days. No homework, no messages and no answers are written into those records. This website does not offer that path.
No sale of data. No advertising use. No profiling beyond the on-device learning memory a parent can view, copy, back up or erase per child.
The extension does not ask for payment-card or bank-account details. This notice is not a billing policy. It is not a health-information product: the only wellbeing record is the kind and the date, never the words, and only if a wellbeing note was shown.

Parent controls

Settings include a parent lock (PIN), a full view of the learning memory, a per-child erase, a downloadable family backup (which by design can never contain keys, codes or PINs), and a full reset. Backups are files the family keeps. The service does not receive them.

Chrome Web Store

Use and transfer of information follows the Chrome Web Store User Data Policy, including the Limited Use requirements. User data is used for the single purpose of coaching the student on their homework. It is not sold, not used for advertising, and not transferred for other purposes.

The store disclosure that matches this notice marks these categories as collected, in the senses above and not as something broader: personally identifiable information, authentication information, personal communications, location, web history and website content. Health, financial and payment information, and user activity are not marked as collected.

What this notice does not claim

It does not claim an independent audit. The service notice says its own build checks enforce its claims. This page does not repeat that as a finding of this website.
It does not set out a data-processing agreement, a zero-data-retention addendum or a legal processor schedule. None of those is published on this page.
It does not describe a cloud voice as switched on. The premium cloud voice is off in this release.
It does not describe school-wide accounts, payment, or a public download from this website. None of those is available here.

Contact

Questions or requests go to the same address as the service notice.

Privacy questions: hello@myhommi.com

Who is responsible

The extension and this service are operated under the name MyHommi from the Netherlands. This page does not add a company registration or a transfer mechanism that the service notice does not already state.

Last updated 7 September 2026, the date on the service notice at api.myhommi.com/privacy. That service publishes the notice in English. There is no Dutch page at that address.