Your household’s data stays your household’s
The short version: only your household can see it, it lives in Australia, it’s backed up every day and it’s never sold. Ever. Here’s the longer version.
Who can see your data
Only the people you invite into your household.
Signing in
With your Google account or your email address.
Where it’s stored
Your household’s data lives in Australia. A backup copy is kept in Singapore, so a bad day for one data centre isn’t a bad day for your dinner plans.
Backups
Automatic, every day.
Calendars
- One-way sync reads your calendars. It never changes them.
- Two-way sync adds family events you create in My Tomte to your calendars.
- Meal plans never leave My Tomte.
Smart Actions and AI
Smart Actions are processed by Google Gemini and Anthropic. Only what a request needs is sent: your request, the photo or receipt, and the household details needed to follow your rules (like dietary rules). Neither provider trains its AI on your data. These providers process requests outside Australia.
Payments
Handled by Stripe. My Tomte never sees or stores your card details.
Leaving
Delete your household at any time from your settings. It’s permanent: there’s no recovery and no undo, so be sure. We’d rather be secure than sneakily keep a copy.
Small print: copies in our daily backups are cleared within 30 days.
A tip about guest Wi-Fi
Everyone in your household can see the Wi-Fi password behind the QR code, so share a guest network, not your main one.
Found a security issue?
Please tell us at [email protected]. We’ll reply quickly and thank you properly.