Privacy

Draft for review, 8 October 2026 — not yet in force. This is a pilot on a test server; it will change before anyone else is invited.

This page says, in plain words, what the Service Book keeps about you and your home, who can see it, and what it never asks for. It covers starting or claiming a Service Book, the people you invite, and connecting your own AI app. Your home's report is on Tasaab Homes, a separate site open to anyone; the Service Book reads it the way any visitor does and sends it nothing about you.

Who we are

Tasaab LLC, in Washington State. To ask anything about this page, write to info@tasaab.com.

Public records we read

Your home's report is built by computer code from public records: the King County Assessor's parcel, building, sales and permit records, the city's code, and federal and state maps of flood areas, wetlands and geologic hazards. A model never decides a figure in it.

What you give us

Your email, to sign in: we email a link that works once, for 15 minutes. Your email is kept with your sign-in only — never in your home's record, which knows you by an id — and we email you only what you ask for: sign-in links, and the invitations you send to people you add.
Your home's address, when you start a Service Book. We check it with the US Census Bureau's public address service (so the Census sees the address, not your email), and keep the address it matches with its state and county. Starting at your word is enough: the book is private to you. A verified owner badge, which matters only when you share the book, is earned by a check such as a code mailed to the owner on county record, where we have the county's owner records.
People you invite: the name you give them and their email. We never ask, and never keep, who they are to you. They sign in with their own email; you can remove anyone at any time, and their access ends at once.
The verified-owner badge, in King County: from inside your Service Book, we mail a card with a code to the owner's mailing address in the county's tax record — not to an address you type — and you type the code in your Service Book. We keep the code only as a salted hash; it lasts 30 days, and five wrong tries lock it.
Signing in another device without email: the new device shows a square and a short check code; your signed-in phone scans it or you type the code in Service Book, and only the device that asked is signed in, once, within 10 minutes. We keep which kind of browser and system asked (like "Chrome on a Mac"), so you can see it in your record; never the square or the code.
What you save in your Service Book: the things in your house, your notes, the dates you know, and photos — a photo only if you tick "keep".
Photos are read on your phone. To read a label or a receipt, the page loads two open-source reading tools (Tesseract.js and ZXing) from cdn.jsdelivr.net; your photo is not sent anywhere to be read. The same goes for a provider: on the page their link opens, a photo of their receipt or invoice is read on their phone, and only what they then send reaches the owner. Before anything else, the phone redraws the photo smaller, which also removes its location data. Our server removes it again before keeping any photo, from any page: location, camera make and serial, names and comments, keeping only which way up it goes.
Every photo is checked before it is kept. So no one, including a stranger with a link you sent, can put harmful pictures in a Service Book, each photo is sent to Amazon Rekognition, which says whether it shows sexual content, graphic violence, disturbing images or hate symbols. Such a photo is not kept in any book; it is set aside where nothing shows it, and we may report it to the authorities where the law asks us to. A PDF is checked on our server for scripts and attached files, and refused if it has them.
The camera guesses what it sees, on your phone. While you aim, a small open-source image model (TinyCLIP, MIT licence) names the closest kind of thing, such as "water heater". The model is downloaded once from our server and kept on your phone, and the tool that runs it (ONNX Runtime) loads from cdn.jsdelivr.net. The video is not sent or kept. Its guess is only filled in for you to tick.
Money for replacing. If you use it, you say which utility sends your electric bill and your gas bill, and what heats your home; that is kept in your Service Book and matched to rebate programs here. We never ask your income. Nothing is sent to a utility or a program.
The electrification ledger. For your electric and clean-energy things (heat pumps, solar, batteries, EV chargers and the like; for a club or business, every piece of equipment that uses energy), the Service Book counts whether you kept the make and model, the serial and a photo or receipt, and says which is missing. It is counted here from what you kept, shows only whether the serial is kept (never the serial), and is sent to no utility, program or tax office. It isn't part of an insurer or listing link.
Connected things. If you use it, you say which of your things are on Wi-Fi or an app, and tick the safety steps you've done. The Service Book never connects to your things and never asks for or keeps a password.
The leak check. Your phone's camera watches your water meter's dial for a minute, on your phone: the video isn't sent or kept. Only what you confirm (the dial moved or was still, and the day) is saved in your Service Book.
Sharing with your insurer. Your insurer or broker sees nothing unless you send them a link from My insurance; nothing is ever shared for you. A link shows your 4-point summary only: the roof, water heater and plumbing, heating and cooling, and electrical, with their ages, the service dates a receipt or a provider's own record backs, recall status, and how each fact was read (from a label photo on your phone, a provider's record, a receipt). Under water heater and plumbing it also lists what your book records against water damage: where your main water shut-off is and the handle type you picked on the House Walk (one of its fixed choices, never your own words), where your sump pump is and its last service, where your water leak sensors are, and the day of your last meter leak check and whether the dial moved. It also lists your remodeling projects: each one's title, days, scope, permit numbers and the kinds of things it put in, never who did the work. You see all of it before you share. It never shows serial numbers, your notes or anything taken from them, or anything else in your book. It says first whether your ownership was checked by a code mailed to the house, or is at your word. You choose how long it works (7, 30 or 90 days); you send it yourself; you or a co-owner can end it in one tap, it stops working at once, and the time it ended is kept; each time it is opened is written to your record so you see it, and the page tells browsers not to keep a copy. The same link can be read as data or as plain text (for the insurer's own tools, or an AI they use): exactly what the page shows, nothing more, and it ends with the link. A claim packet is a separate link you make only after a loss: it shows every thing, photo, service, warranty, receipt and leak check you saved before the day of the loss, and the few words you write about the loss; never serial numbers or your notes on things. Links you sent before 2026-10-15 keep showing what you chose then until they end. What your insurer does with what you show them (a renewal, a claim) is between you and them. The name of your insurer, and your renewal date if you give one, are kept to remind you and to show your insurer's network: saving them sends your insurer nothing and makes no link. If your insurer publishes a list of contractors, a job shows it below the state's license list, each checked against the state's record; nobody pays to be on either list.
Someone you hire to walk the house. You can make a walk link for a few hours (2, 4 or 8) for someone you hire, like a home photographer. They don't sign in. Their page shows the walk's stops, what's already in your book (what and where only), and where the water shut-off and sump pump are; not your notes, serial numbers, receipts or costs. What they send (a thing, its label photo) waits for you to keep or decline. Their photos are cleaned like yours. You or a co-owner can end the link at once.
Sharing with a buyer's side. When you sell, you can make a read-only listing link for your agent, a brokerage or a buyer. It shows who you are to the house (checked by mail, or at your word, and since when), the 4 main systems with what's recorded against water damage, the kitchen and laundry, county permit records, your remodeling projects (never who did the work) and what's missing, each with where it came from. It doesn't show serial numbers, your notes, anything taken from your notes, or what you paid. Each opening is counted for you; you or a co-owner can end it at once, and it ends on its day or when the house changes hands. An ended link shows nothing.
Recall alerts. We keep a copy of the U.S. Consumer Product Safety Commission's public recall list on our server and check your things' brand and model numbers against it there. Nothing about you or your home is sent to the CPSC.
Providers you invite. A link or a code you show lets one provider add their work for one job: what they did, photos, the invoice. They see only the list of things in your home (what and where), nothing else. The link ends after 3 sends, after 14 days, or when you end it. What they send waits for you and joins your Service Book only when you keep it; if you decline it, it stays in your record's history (not in your book) and goes when you delete your Service Book. The code is drawn on your phone by an open-source tool (qrcode-generator) loaded from cdn.jsdelivr.net; the link itself is not sent to it. We send no texts and keep no provider phone numbers.
House tags you print. If you print house tags, each sticker carries a link to one thing: your furnace, water heater, electrical panel or main water shut-off. Anyone who scans one sees only what it is, where it is, its brand, model and year, and (except on the shut-off tag) its service history: each kept visit's day and the kind of work. Never who did it, a serial number, what you paid, your notes, receipts, planned visits, anything still waiting for you, your other things or your address. On the shut-off tag they see where the valve is and the handle type you picked. A provider who scans one may send their visit; it waits for you like any other, at most 3 a day per tag. When you scan your own tag while signed in, you get one-tap logs. A tag has no end date: rotate it in Service Book and the old sticker stops working at once. The QR codes are drawn on our server; printing the page calls no one else.
Blank tags and tag kits. A sticker can be set up after it's stuck on: from a kit (its code, on the card in the box, links the kit to your house once you type it) or from blank tags you print. Until it's set up, anyone who scans it sees only "This tag isn't set up yet": nothing about your house or the kit. You or a co-owner sets it up by tapping it and picking the thing; someone you hired to walk the house can send it with a thing, and it's set up only when you keep that. Once set up it's a house tag like the others, for good.
The weekly email and weather alerts. If you own or co-own a Service Book and it has your email, we send a short email on Sundays when something in it is due or the weather asks for something, and an email when the National Weather Service issues a warning for your area (at most one a day). Turn it off with one tap in any of these emails, or in your Service Book. To find your area, we look up your address with the Census Bureau's geocoder again, send the location it gives, rounded to about 1 km, to the National Weather Service (api.weather.gov), and keep only the weather zone, an area many miles across; we don't keep the location. We do this once, and again every few months in case it changed. Your address isn't sent to them, and nothing else about you or your home is. Only an address the Census Bureau matched is used; an address it didn't match gets no weather. Helpers don't get these emails.
Saying what you did. When you use your keyboard's microphone in "Say what you did", your phone (Apple or Google, under their own settings) turns your voice into text. We never get the audio, only the text, which fills in the service form on your screen. It's kept only if you save it, as the service's note.
Finding a manual. "Find the manual" opens, from your phone, a web search (DuckDuckGo) with only the thing's brand and model, or the maker's own manuals page. We send nothing to either. A link you keep is saved as a note on the thing.
Your calendar link. If you add your Service Book to your calendar, we make a private link that your calendar app (Google, Apple, Outlook or another) reads every few hours. It holds your planned jobs, reminders and warranties ending: the thing, the job, the day and the provider's name. Never costs, notes, your address or serial numbers. That calendar's company can read it under its own terms, and anyone you give the link to can see it. Make a new link (the old one stops) or turn it off any time in your Service Book; it also stops when you lose access to the book.
Quotes you ask for. When you ask a provider for a quote, their link shows your city and ZIP (your street address only once you book them), what the thing is and where it is in your home, the kind of job, your words about it, and only what you tick: its brand and model, the year it went in, its last service, and up to 4 of its photos. Never its serial number, your notes, your costs or your receipts. Their price waits for you; if you book it, the plan goes in your calendar and their page shows your answer. Your AI may draft a request, but only you choose what it shows and who gets it, and you send it from your own phone. You may ask up to 5 providers for the same job; each gets their own link, which shows only their own quote. When you book one, the others' pages say no thanks and the links not answered yet end. We don't show your requests to other providers and we don't sell them. A quote link ends after 7 days, or when you end it.
Taking your Service Book home. In More, Download my Service Book gives you one file with everything you and the people you invited kept here, including photos, receipts and serial numbers. It goes to your device only; we keep a note that you took a copy and its seal, not the file. To keep it only at home, download it, then delete your Service Book. The file also holds your 4-point summary and what's coming up. A house name you choose in More shows on your own screens only; your insurer summary and your take-home copy keep the address.
Finding licensed pros. When you look for licensed pros for a job, we ask Washington's Department of Labor & Industries' public license list for the trade and the ZIP codes near yours. Nothing else about you or your home is sent. The list is the state's, not ours: we don't rate or rank anyone, and nobody pays to be on it. A provider may give their license number with a quote; we check it against the same list.
Your house's flood zone and risks. Only when you or a co-owner tap Look up my house's flood zone and risks, we find your house on the map: for a King County house, from King County's public parcel map by its parcel number (no street address is sent); for any other house, by sending your street address to the U.S. Census Bureau's public geocoder. We then ask the Census Bureau which census tract that spot is in, and read FEMA's flood map at that spot and FEMA's National Risk Index for the tract. Nothing else is sent. What they answer (the flood zone and FEMA's ratings) is kept in your Service Book, so it isn't asked again more than once a day.

What we never ask for

Burglar alarm, lock or camera details; door, gate or garage codes; keys or passwords; where valuables are kept; whether anyone is home or when the house is empty; and anything about the people who live there — family, religion, origin, disability, health or money. The Service Book refuses notes about getting into the house, and does not keep security devices at all. Fire and life-safety equipment is kept like any other thing: smoke, CO and fire alarms, fire alarm panels, sprinklers and kitchen hood suppression.

We never ask for a payment card number, and no field keeps one. A receipt photo is kept exactly as you took it, so if it shows more of a card number than you want kept, cover it before you snap it.

Cookies

tasaab_owner keeps you signed in to your Service Book, for 90 days.

It is only readable by our server (http-only). We use no advertising or tracking cookies. Each browser signs in on its own, including the browser inside an AI app.

What we record when you use it

Which pages of your home's record were opened, and when, and each decision about who may see what. This protects the record and lets you see who looked.

The days you open your Service Book, with the first and last time each day: not which pages, not your IP address, not your device. Our operators see these days, and how many things you did each time (counted by kind, never what they say), to learn whether the Service Book is useful. For the public pages, such as the front page, we keep only a count per day, nothing about who.

Who can see your Service Book

You, the signed-in owner of that house, and the people you invite (you choose each one's role, and can remove them any time), and an insurer or a buyer's side you send a link to, for as long as the link works and only what it shows. No buyer, agent or neighbour sees it unless you send them a link. Later you will be able to choose, thing by thing, what a buyer's team may see when you sell; nothing goes on its own. Tasaab's operators can reach the server to run and repair it. To help when something goes wrong, an operator can look up an email and see counts: which homes it reaches, how many things and notes each holds, which AI is connected, when you last signed in. Not what the things or notes say. Each look is written to that home's record. We do not sell your information or use it for advertising.

If you connect your own AI

You can let Claude, ChatGPT or Gemini read your Service Book and your home's report, and propose things for you to keep. It can't keep, change or remove anything, see serial numbers, or reach any other house. What it reads goes to the company that runs it, under that company's own privacy policy (Anthropic, OpenAI, Google). We keep which AI you connected and when, its keys only as hashes, and a count of what it did — which tool, when, and whether it worked, never what was asked. You can disconnect it at any time in your Service Book, and it stops at once.

Where it is kept

On servers run for us by Fly.io, in the United States. A copy of your record and your photos is kept by Cloudflare (R2, western North America) so a broken server loses nothing; we check every week that the copy can be restored. Sign-in and notice emails are sent through Amazon (SES, in the United States), which sees the address and the message, as any email service does. When something breaks, an error report goes to Sentry, which helps us fix it.

AI, and what trains on your things

On your phone. Labels and receipts are read on your phone (Tesseract.js), and the camera's guess of what a thing is runs on your phone too (TinyCLIP). Nothing is sent to be read, and nothing of yours trains any model.

The photo check. Before a photo is kept, Amazon Rekognition looks at it for harmful content (above), and answers with labels only. We have told Amazon not to keep or train on what we send.

On our server, only when you tap Allow. When you tell a remodeling project out loud and tap Allow, Claude (Anthropic) helps sort it, through Anthropic's commercial service. Anthropic's commercial terms say it does not train its models on what is sent this way. It gets your words and your things' kind and place, never serial numbers, notes or costs. No other AI company is sent anything by us, apart from the photo check.

Your own AI. If you connect Claude, ChatGPT or Gemini yourself, what it reads goes to that company under your own agreement with it (see "If you connect your own AI").

The companies that run parts of the Service Book for us: Fly.io (servers), Cloudflare (R2: the backup copy and your photos), Amazon (SES: email; Rekognition: the photo check), Sentry (error reports), Anthropic (only when you tap Allow), and the US Census Bureau (looking up an address). None of them may use your Service Book for their own purposes.

How long it is kept, and deleting it

Your home's record keeps its history: when you take something off your list, it leaves the list but stays in the history, so the house's story stays true.

You can delete your Service Book yourself, at the bottom of your Service Book. That deletes your things, notes, photos, what your AI proposed and your AI connections, and can't be undone. Deleted entries also leave our backup copy within 3 days. If you tell us you've sold or moved out, your Service Book closes to you and to everyone you invited, and every link you shared ends. You choose what the next owner who proves the home is theirs can read: the house, not your notes (your things with their makes, models, serial numbers and dates, service dates and who did them, warranties, leak checks and house jobs, but not your notes, what you paid, receipts, photos, documents, people, AI or shared links); everything; or nothing. You can choose before you sell, and if the county records the sale first, we do what you chose; if you chose nothing, it isn't passed on. What isn't passed on stays in the record and is not shown to anyone. When the house is passed on, your house tags work again for the next owner once they hold it; if not, they stop. What stays: your claim of the house, public records and the report, the record of who opened what, and one line saying you deleted your Service Book — the date, how many entries, and a fingerprint (a hash) of them, never what they said. To ask for a copy of what we hold about your home, write to info@tasaab.com.

Children

The Service Book is for home owners, and not for anyone under 18.

Changes

When this page changes, the new version goes here with its date.

2026-10-12: added sharing with your insurer, which happens only when you send a link.

2026-10-15: one way in. You sign in with your email; a device without email can be signed in by your phone; the verified-owner badge is earned inside your Service Book.

2026-10-15: a link to your insurer shows the 4-point summary only, says whether your ownership was checked by mail, and can be ended by you or a co-owner; the claim packet is its own link. Saving your insurer's name shows their contractor network, if they publish one, below the state's list, and sends them nothing. Before you share, a checklist says which of the 4 points are ready; it is yours alone.

2026-10-16: added a listing link for a buyer's side, which happens only when you make one.

2026-10-16: added a walk link for someone you hire to walk the house; what they send waits for you.

2026-10-16: when you sell, you can pass on the house without your notes, and choose that before the sale.

2026-10-16: added blank tags and tag kits, set up by tapping them.

2026-10-16: a house tag shows a technician the thing's service history: the day and the kind of work.

2026-10-16: added remodeling projects. Your insurer and listing links show their title, days, scope, permit numbers and what they put in, never the contractor or any cost. "Pass on the house, not my notes" passes them, contractor included.

2026-10-17: you can tell a remodeling project out loud with your keyboard's microphone; we get only the text. The Service Book's own rules read it. Only if you tap Allow, Claude (Anthropic) helps: it gets your words and your things' kind and place, never serial numbers, notes or costs, and each time is written to your record. Nothing is kept until you tap Keep.

2026-10-21: added the electrification ledger, which stays in your Service Book. New kinds of things (such as a heat pump water heater, a cold-climate heat pump, a ventilator or a smart panel) show in your 4-point summary under the point they belong to, with the same facts as any other thing.

2026-10-21: every photo is checked by Amazon Rekognition before it is kept, and a PDF on our server; harmful ones are refused.

2026-10-21: an insurer or listing link can also be read as plain text (Markdown), made from the page itself: nothing more than the page shows, and it ends with the link.

2026-10-21: House Book is now called Service Book, at servicebook.tasaab.com. Nothing about your data changed; the old address housebook.tasaab.com still works and sends you here.

2026-10-21: a Service Book can be kept for a home, or for a building, property or facility you own or are authorized to keep the record of. What is kept, and who sees it, is unchanged.