Privacy at Homnna

Last updated: 8 October 2026

Homnna connects travelers with Moroccan host families. Trust is the whole product, so we collect as little as possible and tell you exactly what happens to it.

What we collect

Booking details: your name, email, optional phone number, party size, date, and dietary notes. Kept for 12 months for safety and quality, then deleted.
Who you are: your first and last name as on your ID and your nationality, typed when you sign up, with the pseudo families see, on your requests, your table and your reviews; and the country and city you live in, if you add them under You. Your date of birth is read from your document by Didit, never typed: Homnna is for adults. The name and the nationality are compared with your document and cannot be changed once it has been checked; your nationality and where you live are counted for statistics and never shown to anybody. Families see only your pseudo, and whether your ID has been checked. All of it is kept with your account and deleted with it.
Identity check: when you sign up, as your first request goes out, Didit checks your passport or ID card for Homnna: that it is genuine and valid, and what is printed on it, its number included. With it, a short selfie: Didit checks that a real person is holding the phone and that their face matches the photo on the document. That is biometric data, used for this check and nothing else, with your consent, which you give by starting it. Didit is our processor, in the European Union, under its verification privacy notice and terms for the people it checks. Homnna never stores the document or the selfie, and the host family never sees either: we learn whether the check passed and, when it did not, why (an expired document, a photo that could not be read), which we tell you in the app and by email; and we look at them ourselves, in Didit's console, only when Didit asks us to decide. Didit keeps them for a year after your last visit, or after the check if you have not visited yet, so that a problem a family reports after a meal can still be traced, and then deletes them; at once if you delete your account.
A refused check: if a person at Homnna refuses your identity check, or closes your account after a problem at a table, we keep one thing of the document: a fingerprint of its number, made with a secret key, from which the number cannot be read, and nothing else of it. It lets us recognise the same document on another account, where its check is refused and a person at Homnna looks at it again; after a refused check, you can still try again on the same account. It is kept for three years after the refusal, even if you delete your account, so that a refusal is not undone by signing up again, and then deleted.
At the door: when you tap Here at a family’s door, your phone’s position is sent once and compared with her door on our server. It is not stored: only that you arrived, and when, and when the family answered that she is coming.
Ratings: your public review of the meal, and the family's private rating of the visit (seen only by Homnna and, as an average, by the families you ask later). Those families also see how many tables you came to, and how many you did not come to; one you dispute is left out until Homnna decides.
Reports: if you report a problem with a table, what you write is read by Homnna only, never by the family. It is kept 12 months, then deleted; deleting your account deletes the reports you wrote. A report a family makes about a table with you is read by Homnna only and kept 12 months, even if you delete your account, because it may be needed to keep people safe. A family you block, from the same sheet or your table, no longer sees your requests and is never told; the block is kept with your account until you undo it, on the table or under You, and deleted with it.
Sharing your table: the link you may send a friend shows the day, the time, the family's first name, the area within about 400 m and whether you arrived, never the address. It stops at noon the day after the meal, or when you stop it.
Notify: when you ask to be told that a family near you can host you, the place you asked from is kept until one can or asking ends that day, and deleted by the next morning at the latest. Asking for a table, or turning it off, deletes it at once.
How the app is used: which screens were reached, on what kind of phone and browser and with which version of the app, so we can see where people get stuck. When something fails in the app, also what failed and the app’s last steps before it (the screens it opened and the requests it made, never what you typed), so we can mend it. Stored on Homnna’s own servers and nowhere else, with a random number for your browser rather than your name. No advertising identifier, no third party, nothing sold or shared. Deleted after 6 months, or with your account if you delete it.
Visits to this website: the public pages of homnna.com (the home page, this page, the terms and a family’s page) are counted by Vercel, the company that hosts Homnna: which page was opened, the site you came from, roughly where you are, to the city, the kind of device and browser, and how fast the page loaded. The counting sets no cookie. To count visitors, Vercel makes a number from the request and discards it within a day; nobody is followed from one site to another, and Homnna sees totals only, under Vercel’s notice on what it collects. Neither app is counted this way: the line above says how they are.

If you host

A host family gives us more than a guest does, and this is the notice behind the consent recorded when you apply.

Your application: name, phone, email, the choices you tap, the GPS point of your home and its address as you write it. The coordinates are never published. Before a table, a guest sees only the area your home is in, within about 400 m, and whether a guest asking nearby is close enough to ask you is measured from that area. The exact point goes only to a guest whose table you have confirmed, with your address, so their map can lead them to your door, and it leaves their screen a week after the meal. When that guest taps Here at your door, the position of their phone is compared with your point on our server, to tell you they have arrived; when you answer Coming, the guest is told, and the time of your answer is kept with the table. If they ring from far from your point, Homnna is told, so a person can check that your point is where your door is.
Identity document and selfie: before your home goes live, Didit checks your ID card or passport for Homnna, and a short selfie: that a real person is holding the phone and that their face matches the photo on the document. That is biometric data, used for this check and nothing else, with your consent, which you give by ticking it over the button that starts the check. Didit also compares the name you typed with the one on the document, and reads your date of birth from it: a home is opened by an adult. Didit is our processor, in the European Union, under its verification privacy notice and terms for the people it checks. Homnna never stores the document or the selfie: we learn whether the check passed and, when it did not, why (an expired document, a photo that could not be read), which we tell you in the app and by email; and we look at them ourselves, in Didit's console, only when Didit asks a person to decide. Didit deletes them the moment your home is accepted or refused, and after 30 days if the check is never finished.
What survives the check: the document type, its number, that the name matched, the date, and who approved it: Didit, or the person at Homnna who decided. We keep the number so an approved home can be traced to a real person, and because one document opens one home: if Homnna removes a home, once the home is closed and everything else deleted, only a fingerprint of the number is kept, made with a secret key, from which the number cannot be read, for three years and then deleted, so the same document cannot open another. This is sensitive personal data and it is the reason this section exists.
Profile photos and your description: kept and shown to guests, because they are what a guest chooses from.
Your address: never published. It is sent only to a guest whose table you have confirmed.
A guest's shared table: a guest may share their table with a friend. The link shows your first name, the day and time and the area within about 400 m, never your address.
Reports: if you report a problem with a table, what you write is read by Homnna only, never by the guest. It is kept 12 months, then deleted; closing your home deletes the reports you wrote. A report a guest makes about a table at your home is read by Homnna only and kept 12 months, even if you close your home, because it may be needed to keep people safe.
Your credit: your balance and every movement of it: credit you bought, what you paid for each guest you served, and when. Your guests pay you in cash and none of that money passes through us. We hold no card or bank details.
Invitations: the code your app gives you to invite another family, which homes opened with it, and the credit Homnna offered you for each. If you gave a family's code when you registered, we keep whose it was, and once your home is live she is shown your first name, the one guests read. Your code is deleted with your home; the credit stays in our accounts, as the rest of your credit does.
Your commitments: the moment you commit to the host charter is recorded with your home. A founding family also signs a paper agreement with Homnna: Homnna's copy is kept for as long as her home is open and five years after, even if she closes it, as proof of what was agreed, then destroyed.

You can correct your details yourself, from your profile page (a new email or phone is confirmed by a code we email you), and close your home there too: it goes offline at once, and 30 days later all of this is deleted, unless you sign in again before then. Past bookings stay in our records with nothing that identifies you, and so do the movements of your credit: they are our accounts, and what an admin typed beside them is deleted with the rest of your details.

What we don't do

No advertising trackers and no sale of data to anyone, ever.
No online payment, so no card data exists here.
Family addresses are never published; you receive the address only after the family confirms your booking.

Your rights

Moroccan law 09-08 on personal data protection applies. You can correct your details and delete your account yourself, from your account page; a new email or phone is confirmed by a code we email you. Deleting takes your account offline at once, and 30 days later erases your name, email and phone, and has Didit delete your identity check; signing in before then keeps it. Meals you have already eaten stay in the family's own records with your name removed. For anything else, including a copy of your data, the contact channels are in the site footer.

Who holds this, and how to reach them

The data controller is:
Homnna
Paris, France

To ask for a copy of your data, to correct it, or to have it deleted, write to: contact@homnna.com

We answer within 30 days. You can also delete your own account at any moment from the app: it goes offline at once, and 30 days later your name, email, phone and any identity document are erased. Signing in before then keeps it.