Privacy notice

Controller and scope

The controller is Priyanka Nagabhushana, Blumenfeldstrasse 13, 8046 Zürich, Switzerland. Contact: info@homecompare.ch. Use this address for privacy requests, complaints and questions about processing.

HomeCompare is a Switzerland-focused beta for comparing Swiss residential addresses. Swiss data-protection law applies to the controller. The GDPR can also apply when its territorial-scope rules cover a visitor or an offering; this notice describes the same safeguards for those visitors. The official texts are the EU GDPR and the Swiss FDPIC guidance.

Privacy requests are handled by the controller at the contact above. HomeCompare has not published a separate DPO or EU-representative contact for this limited Switzerland-focused beta. Before any EU-directed marketing or materially broader EU offering, the controller will reassess whether a representative or DPO is legally required and will publish the required details before that processing begins.

What we process and why

• Requested comparison: two official home addresses, actual rents, household bands, optional costs and priorities; one or two workplace addresses and an arrival time when public transport is requested. This is necessary to provide the requested service or take requested pre-contract steps (GDPR Art. 6(1)(b)) and to operate the Swiss service under the FADP.
• Official identity and journeys: the address coordinates and labels needed for the requested lookup are sent to swisstopo and, when selected, the official OJP public-transport service. Household facts are not sent to those services.
• Optional measurement: only after you allow analytics, we process a random tab identifier, page path, time and restricted comparison events to understand use of the beta. Where GDPR applies, the basis is consent (Art. 6(1)(a)). These records are pseudonymous, not guaranteed anonymous. Use Analytics preferences at the bottom of a product page to withdraw consent. Withdrawal stops future tracking and removes the tab identifier; it does not erase earlier lawful records. Declining has no effect on your comparison.
• Analytics choice counts: we store a single allow or decline event so visitor statistics can separate measured visits from declined measurement. A decline is stored without a tab identifier.
• Feedback: submitting the optional fixed-choice survey is your choice. We store the submitted answers; they are linked to your tab only if you allowed analytics. Do not submit private details in feedback.
• Security and support: rate-limit signals, error codes and correspondence are used to prevent abuse, resolve incidents and answer requests. Legal obligations may also require limited records.

What we do not do

• Raw comparison request bodies are not written to HomeCompare application logs or analytics. The free result stays in page memory and no account or public result link is created.
• Addresses and household information are never sent to a large-language model. We do not sell personal data, use advertising profiles, install session replay, or use automatic form capture.
• The deterministic comparison is an informational aid, not an automated decision that determines a person's legal rights, credit, employment, housing eligibility or access to a service. It does not replace tax, legal, medical, financial or real-estate advice.
• The optional consumer share card is generated locally and excludes street addresses, household details, BFS identifiers and report identifiers. It creates no stored public link.
• The optional spending planner and life-fit notes remain in page memory. They are not sent to the API, analytics, an LLM or browser storage.
• HomeCompare uses no advertising cookies. Session storage remembers your analytics choice for this tab. A separate random analytics identifier is created only after you allow measurement and removed if you withdraw. The preference itself is used only to respect your choice. No cross-site tracking, fingerprinting or browser recording is used.

Storage and retention

• Free comparison inputs are processed in memory and are not saved as a server-side household profile. The result stays in your page until you leave or replace it. Browsers may restore tab storage when restoring a browsing session. Address searches use an uncached POST to HomeCompare; the official address provider still receives the query required to answer it and applies its own retention policies.
• Sanitized validation events are stored by Supabase, capped at 20,000 records. Events older than 120 days are excluded from reports and deleted on the next event write. An optional daily database job may delete the same aged rows if that scheduler is available on the host.
• Support email is processed to answer the message. Correspondence is kept in the Infomaniak mailbox under Infomaniak's current retention settings, and by the controller only as long as needed to complete the request or a related legal duty, then deleted.
• Technical infrastructure logs are controlled by the hosting providers under their current policies. HomeCompare application logs exclude raw addresses, rents and household inputs. Provider logs may still contain IP addresses, timestamps and requested URLs for security and operations.

Recipients and international transfers

• Railway hosts the application in an EU West region. Railway's Data Processing Addendum still describes US processing and other subprocessors. EU Standard Contractual Clauses and related safeguards in that DPA are the documented transfer mechanism. The current subprocessors are listed in Railway's Trust Center. Selecting an EU region does not mean all processing stays in the EU.
• Supabase stores only the restricted, sanitized validation/replay data required by the service. The current project is in London, UK; its DPA and subprocessors govern its processing.
• swisstopo and OJP receive the address information needed to resolve official identity and requested journeys. Household budgets and insurance settings are not sent to transport providers. Their service terms and privacy notices apply to their technical processing.
• The community transport fallback is disabled. If official journeys cannot be obtained, commute information is shown as unavailable.
• Infomaniak provides the domain/DNS and the info@homecompare.ch mailbox. Email correspondence is processed to answer the message.
• PostHog is disabled in this release; HomeCompare sends it no events.

Providers may use approved subprocessors or support operations outside Switzerland/EEA/UK. Where GDPR applies, transfers use an adequacy decision, the EU/UK Standard Contractual Clauses or another lawful safeguard as documented by the relevant provider. We do not claim EU-only processing.

Your rights and complaints

Subject to applicable law, you may request access, rectification, erasure, restriction, data portability and information about recipients; you may object to processing based on legitimate interests and withdraw consent where processing is based on consent. There is no automated significant decision-making or profiling. Because free comparison inputs are not retained and anonymous events are not linked to an account, there may be no stored record to locate; we may ask for enough information to verify a request without asking for the original home address by email.

Send requests to info@homecompare.ch. We normally respond within one month under the GDPR or within the applicable Swiss time limit. You may also complain to your local EU/EEA supervisory authority (the EDPB authority list) or to the Swiss FDPIC.

Security and changes

HomeCompare uses HTTPS, server-only secrets, access-controlled provider accounts, bounded retention, privacy filtering and no raw request-body logging. No internet service can promise absolute security. Report a suspected incident promptly to info@homecompare.ch; the controller will assess notification duties under the FADP/GDPR.

We update this notice when the service, providers or legal requirements change. The current application surfaces remain free and paid reports are disabled unless the page says otherwise.