Notesteadby Tasaab

Notestead by Tasaab

Notestead was called Service Book until 29 October 2026, and House Book before 21 October 2026. Your record, your links and your printed tags carry on as they were.

Privacy

Draft for review, 8 October 2026 — not yet in force. This is a pilot on a test server; it will change before anyone else is invited.

This page says, in plain words, what Notestead keeps about you and your home, who can see it, and what it never asks for. It covers starting or claiming a Notestead, the people you invite, and connecting your own AI app. Your home's report is on Tasaab Homes, a separate site open to anyone; Notestead reads it the way any visitor does and sends it nothing about you.

Who we are

Tasaab LLC, in Washington State. To ask anything about this page, write to info@tasaab.com.

Public records we read

Your home's report is built by computer code from public records: the King County Assessor's parcel, building, sales and permit records, the city's code, and federal and state maps of flood areas, wetlands and geologic hazards. A model never decides a figure in it.

What you give us

Your email, to sign in: we email a link that works once, for 15 minutes. Your email is kept with your sign-in only — never in your home's record, which knows you by an id — and we email you only sign-in links, the invitations you send to people you add, and the regular email and alerts described below, which you can turn off from any of them.
Your home's address, when you start a Notestead. We check it with the US Census Bureau's public address service (so the Census sees the address, not your email), and keep the address it matches with its state and county. Starting at your word is enough: the book is private to you.
People you invite: the name you give them and their email. We never ask, and never keep, who they are to you. They sign in with their own email; you can remove anyone at any time, and their access ends at once.
The verified-owner badge: we no longer mail cards. A code already mailed works until it runs out (30 days); we keep it only as a salted hash, and five wrong tries lock it.
Signing in another device without email: the new device shows a square and a short check code; your signed-in phone scans it or you type the code in Notestead, and only the device that asked is signed in, once, within 10 minutes. We keep which kind of browser and system asked (like "Chrome on a Mac"), so you can see it in your record; never the square or the code.
What you save in your Notestead: the things in your house, your notes, the dates you know, and photos — a photo only when "keep" is ticked, or when you take it at a stop of the Photo walk, which is there to keep it.
Photos are read on your phone. To read a label or a receipt, the page loads two open-source reading tools (Tesseract.js and ZXing) from cdn.jsdelivr.net; your photo is not sent anywhere to be read. The same goes for a provider: on the page their link opens, a photo of their receipt or invoice is read on their phone, and only what they then send reaches the owner. Before anything else, the phone redraws the photo smaller, which also removes its location data. Our server removes it again before keeping any photo, from any page: location, camera make and serial, names and comments, keeping only which way up it goes.
Every photo is checked before it is kept. So no one, including a stranger with a link you sent, can put harmful pictures in a Notestead, each photo is sent to Amazon Rekognition, which says whether it shows sexual content, graphic violence, disturbing images or hate symbols. Such a photo is not kept in any book; it is set aside where nothing shows it, and we may report it to the authorities where the law asks us to. A PDF is checked on our server for scripts and attached files, and refused if it has them.
The camera guesses what it sees, on your phone. While you aim, a small open-source image model (SigLIP 2, Apache-2.0 licence) names the closest kind of thing, such as "water heater". The model is downloaded once from our server and kept on your phone, and the tool that runs it (ONNX Runtime) loads from cdn.jsdelivr.net. The video is not sent or kept. Its guess is only filled in for you to tick.
Money for replacing. If you use it, you say which utility sends your electric bill and your gas bill, and what heats your home; that is kept in your Notestead and matched to rebate programs here. We never ask your income. Nothing is sent to a utility or a program.
The electrification ledger. For your electric and clean-energy things (heat pumps, solar, batteries, EV chargers and the like; for a club or business, every piece of equipment that uses energy), Notestead counts whether you kept the make and model, the serial and a photo or receipt, and says which is missing. It is counted here from what you kept, shows only whether the serial is kept (never the serial), and is sent to no utility, program or tax office. It isn't part of an insurer or listing link.
Connected things. If you use it, you say which of your things are on Wi-Fi or an app, and tick the safety steps you've done. Notestead never connects to your things and never asks for or keeps a password.
The leak check. Your phone's camera watches your water meter's dial for a minute, on your phone: the video isn't sent or kept. Only what you confirm (the dial moved or was still, and the day) is saved in your Notestead.
Sharing with your insurer. Your insurer or broker sees nothing unless you send them a link from My insurance; nothing is ever shared for you. A link shows your 4-point summary only: the roof, water heater and plumbing, heating and cooling, and electrical, with their ages, the service dates a receipt or a provider's own record backs, recall status, and how each fact was read (from a label photo on your phone, a provider's record, a receipt). Under water heater and plumbing it also lists what your book records against water damage: where your main water shut-off is and the handle type you picked on the Photo walk (one of its fixed choices, never your own words), where your sump pump is and its last service, where your water leak sensors are, and the day of your last meter leak check and whether the dial moved. It also lists your remodeling projects: each one's title, days, scope, permit numbers and the kinds of things it put in, never who did the work. You see all of it before you share. It never shows serial numbers, your notes or anything taken from them, or anything else in your book. It says first whether your ownership was checked by a code mailed to the house, or is at your word. You choose how long it works (7, 30 or 90 days); you send it yourself; you or a co-owner can end it in one tap, it stops working at once, and the time it ended is kept; each time it is opened is written to your record so you see it, and the page tells browsers not to keep a copy. The same link can be read as data or as plain text (for the insurer's own tools, or an AI they use): exactly what the page shows, nothing more, and it ends with the link. A claim packet is a separate link you make only after a loss: it shows every thing, photo, service, warranty, receipt and leak check you saved before the day of the loss, and the few words you write about the loss; never serial numbers or your notes on things. Links you sent before 2026-10-15 keep showing what you chose then until they end. What your insurer does with what you show them (a renewal, a claim) is between you and them. The name of your insurer, and your renewal date if you give one, are kept to remind you and to show your insurer's network: saving them sends your insurer nothing and makes no link. If your insurer publishes a list of contractors, a job shows it below the state's license list, each checked against the state's record; nobody pays to be on either list.
Someone you hire to walk the house. You can make a walk link for a few hours (2, 4 or 8) for someone you hire, like a home photographer. They don't sign in. Their page shows the walk's stops, what's already in your book (what and where only), and where the water shut-off and sump pump are; not your notes, serial numbers, receipts or costs. What they send (a thing, its label photo) waits for you to keep or decline. Their photos are cleaned like yours. You or a co-owner can end the link at once.
Sharing with a buyer's side. When you sell, you can make a read-only listing link for your agent, a brokerage or a buyer. It shows who you are to the house (checked by mail, or at your word, and since when), the 4 main systems with what's recorded against water damage, the kitchen and laundry, county permit records, your remodeling projects (never who did the work) and what's missing, each with where it came from: the day your Notestead started, and, where you tapped one, when you recall a thing's last service (said as yours, with no record), and the front photo of the house if you added one. It doesn't show serial numbers, your notes, anything taken from your notes, or what you paid. Each opening is counted for you; you or a co-owner can end it at once, and it ends on its day or when the house changes hands. An ended link shows nothing.
Recall alerts. We keep a copy of the U.S. Consumer Product Safety Commission's public recall list on our server and check your things' brand and model numbers against it there. Nothing about you or your home is sent to the CPSC.
Providers you invite. A link or a code you show lets one provider add their work for one job: what they did, photos, the invoice. They see only the list of things in your home (what and where), nothing else. The link ends after 3 sends, after 14 days, or when you end it. What they send waits for you and joins your Notestead only when you keep it; if you decline it, it stays in your record's history (not in your book) and goes when you delete your Notestead. The code is drawn on your phone by an open-source tool (qrcode-generator) loaded from cdn.jsdelivr.net; the link itself is not sent to it. We send no texts and keep no provider phone numbers.
House tags you print. If you print house tags, each sticker carries a link to one thing: your furnace, water heater, electrical panel or main water shut-off. Anyone who scans one sees only what it is, where it is, its brand, model and year, and (except on the shut-off tag) its service history: each kept visit's day and the kind of work. Never who did it, a serial number, what you paid, your notes, receipts, planned visits, anything still waiting for you, your other things or your address. On the shut-off tag they see where the valve is and the handle type you picked. A provider who scans one may send their visit; it waits for you like any other, at most 3 a day per tag. When you scan your own tag while signed in, you get one-tap logs. A tag has no end date: rotate it in Notestead and the old sticker stops working at once. The QR codes are drawn on our server; printing the page calls no one else.
Blank tags and tag kits. A sticker can be set up after it's stuck on: from a kit (its code, on the card in the box, links the kit to your house once you type it) or from blank tags you print. Until it's set up, anyone who scans it sees only "This tag isn't set up yet": nothing about your house or the kit. You or a co-owner sets it up by tapping it and picking the thing; someone you hired to walk the house can send it with a thing, and it's set up only when you keep that. Once set up it's a house tag like the others, for good.
The weekly email and weather alerts. If you own or co-own a Notestead and it has your email, we send a short email on Sundays when something in it is due or the weather asks for something, and an email when the National Weather Service issues a warning for your area (at most one a day). Turn it off with one tap in any of these emails, or in your Notestead. To find your area, we look up your address with the Census Bureau's geocoder again, send the location it gives, rounded to about 1 km, to the National Weather Service (api.weather.gov), and keep only the weather zone, an area many miles across; we don't keep the location. We do this once, and again every few months in case it changed. Your address isn't sent to them, and nothing else about you or your home is. Only an address the Census Bureau matched is used; an address it didn't match gets no weather. Helpers don't get these emails. Their subject line names your home by the name you gave it, or "your home", never its street, since a phone's lock screen shows it. They never hold a serial number, a note, a receipt or a price. If an email to you bounces for good or you mark one as spam, Amazon tells us (through Amazon SNS), and we stop these emails to that address; sign-in emails still come when you ask for one. We keep only that choice and a coded form of the address, never the message.
Saying what you did. When you use your keyboard's microphone in "Say what you did", your phone (Apple or Google, under their own settings) turns your voice into text. We never get the audio, only the text, which fills in the service form on your screen. It's kept only if you save it, as the service's note.
Finding a manual. "Find the manual" opens, from your phone, a web search (DuckDuckGo) with only the thing's brand and model, or the maker's own manuals page. We send nothing to either. A link you keep is saved as a note on the thing.
Finding a thing's exact page. "Find its exact page" sends the thing's brand and model, and nothing else (never its serial, your address, a photo or a note), to Anthropic, whose Claude searches the web for pages about that model. Our server then opens each page it names, as any visitor would, to check it names that model, and shows you the first one that does. Nothing from the page is copied into your book. It uses Claude, so it is on only where the label reader is on, and each lookup counts as one label read. Where the reader is on, it starts by itself when you keep a thing's label, or save a thing read from its label; a page found waits for you, from "Service Book page finder", until you keep it or not; opening a thing's card starts the look too. The card shows that page's title and a link to the maker's own picture, which opens on their site only if you tap it (that site then sees your browser's address, as with any link); the picture is never copied into your book, and the card is shown only to you. A page you keep is saved as a note on the thing. A page found for a model is kept for that model, for every Notestead (a model is the same in every home): the next book with it gets the page at once, with nothing sent. What is kept is the brand, the model, the page and the day it was checked; never who has it, an address, a serial or a photo. "Not this" takes the page off that model for everyone. Pages are never looked for alarms, detectors, keypads or other entry devices (2026-10-28).
Your calendar link. If you add your Notestead to your calendar, we make a private link that your calendar app (Google, Apple, Outlook or another) reads every few hours. It holds your planned jobs, reminders and warranties ending: the thing, the job, the day and the provider's name. Never costs, notes, your address or serial numbers. That calendar's company can read it under its own terms, and anyone you give the link to can see it. Make a new link (the old one stops) or turn it off any time in your Notestead; it also stops when you lose access to the book.
Quotes you ask for. When you ask a provider for a quote, their link shows your city and ZIP (your street address only once you book them), what the thing is and where it is in your home, the kind of job, your words about it, and only what you tick: its brand and model, the year it went in, its last service, and up to 4 of its photos. Never its serial number, your notes, your costs or your receipts. Their price waits for you; if you book it, the plan goes in your calendar and their page shows your answer. Your AI may draft a request, but only you choose what it shows and who gets it, and you send it from your own phone. You may ask up to 5 providers for the same job; each gets their own link, which shows only their own quote. When you book one, the others' pages say no thanks and the links not answered yet end. We don't show your requests to other providers and we don't sell them. A quote link ends after 7 days, or when you end it.
Taking your Notestead home. In More, Download my Notestead gives you one file with everything you and the people you invited kept here, including photos, receipts and serial numbers. It goes to your device only; we keep a note that you took a copy and its seal, not the file. To keep it only at home, download it, then delete your Notestead. The file also holds your 4-point summary and what's coming up. A house name you choose in More shows on your own screens only; your insurer summary and your take-home copy keep the address.
Finding licensed pros. When you look for licensed pros for a job, we ask Washington's Department of Labor & Industries' public license list for the trade and the ZIP codes near yours. Nothing else about you or your home is sent. The list is the state's, not ours: we don't rate or rank anyone, and nobody pays to be on it. A provider may give their license number with a quote; we check it against the same list.
Your house's flood zone and risks. Only when you or a co-owner tap Look up my house's flood zone and risks, we find your house on the map: for a King County house, from King County's public parcel map by its parcel number (no street address is sent); for any other house, by sending your street address to the U.S. Census Bureau's public geocoder. We then ask the Census Bureau which census tract that spot is in, and read FEMA's flood map at that spot and FEMA's National Risk Index for the tract. Nothing else is sent. What they answer (the flood zone and FEMA's ratings) is kept in your Notestead, so it isn't asked again more than once a day.

What we never ask for

Burglar alarm, lock or camera details; door, gate or garage codes; keys or passwords; where valuables are kept; whether anyone is home or when the house is empty; and anything about the people who live there — family, religion, origin, disability, health or money. Notestead refuses notes about getting into the house, and does not keep security devices at all. Fire and life-safety equipment is kept like any other thing: smoke, CO and fire alarms, fire alarm panels, sprinklers and kitchen hood suppression.

We never ask for a payment card number, and no field keeps one. A receipt photo is kept exactly as you took it, so if it shows more of a card number than you want kept, cover it before you snap it.

Cookies

tasaab_owner keeps you signed in to your Notestead, for 90 days.
tasaab_others is set only when more than one person signs in on the same browser: it keeps the others signed in, so you can switch between them without an email. Signing out on that browser signs them all out.
tasaab_code is set for 15 minutes when you ask for a sign-in email, so the 6-digit code that goes with its link works only in the browser that asked for it, and so the link's page knows whether it was opened there.

It is only readable by our server (http-only). We use no advertising or tracking cookies. Each browser signs in on its own, including the browser inside an AI app.

The sign-in page also remembers the last email typed in it, in that browser's own storage (2026-10-31), so you can pick it next time. It is not a cookie and is not sent to us, except when you send the form, as before. "Use another email" on the sign-in page forgets it.

What we record when you use it

Which pages of your home's record were opened, and when, and each decision about who may see what. This protects the record and lets you see who looked. When you or someone in your book opens the same page again within ten minutes (an open screen checks for news every few seconds), it is written once. Every change, every refusal, and every opening by an AI app, a provider, an insurer or a buyer is written each time.

The days you open your Notestead, with the first and last time each day: not which pages, not your IP address, not your device. Our operators see these days, and how many things you did each time (counted by kind, never what they say), to learn whether Notestead is useful. For the public pages, such as the front page, we keep only a count per day, nothing about who.

Who can see your Notestead

You, the signed-in owner of that house, and the people you invite (you choose each one's role, and can remove them any time), and an insurer or a buyer's side you send a link to, for as long as the link works and only what it shows. No buyer, agent or neighbour sees it unless you send them a link. Later you will be able to choose, thing by thing, what a buyer's team may see when you sell; nothing goes on its own. Tasaab's operators can reach the server to run and repair it. To help when something goes wrong, an operator can look up an email and see counts: which homes it reaches, how many things and notes each holds, which AI is connected, when you last signed in. Not what the things or notes say. Each look is written to that home's record. We do not sell your information or use it for advertising.

If you connect your own AI

You can let Claude, ChatGPT or Gemini read your Notestead and your home's report, and propose things for you to keep. It can't keep, change or remove anything, see serial numbers, or reach any other house (a documenter's AI is the one exception: below, 2026-10-25). What it reads goes to the company that runs it, under that company's own privacy policy (Anthropic, OpenAI, Google). If you make it your manager, it can also keep things for you after you say yes in it; each one is labelled with its name, and you can undo it for 30 days. We keep which AI you connected and when, whether it is your manager, its keys only as hashes, and a count of what it did — which tool, when, and whether it worked, never what was asked. You can disconnect it at any time in your Notestead, and it stops at once.

Where it is kept

On servers run for us by Fly.io, in the United States. A copy of your record and your photos is kept by Cloudflare (R2, western North America) so a broken server loses nothing; we check every week that the copy can be restored. Sign-in and notice emails are sent through Amazon (SES, in the United States), which sees the address and the message, as any email service does. When something breaks, an error report goes to Sentry, which helps us fix it.

Property managers. A manager who adds units holds each unit's Notestead until handing it to the unit's owner: we email the owner a one-time link, and once they accept, the book is theirs. The manager stays on as a helper only if the manager asked and the owner accepts that; the owner can remove them anytime. Nothing about the people who live in a unit is asked or kept: no names, no lease terms.

Your email and your address are locked. Where we keep them to sign you in and to know which home is yours, they're encrypted with a key that is itself locked by the master key in Amazon's key service (AWS KMS). We find you by a locked form of your email that only that key can make, so a copy of our data can't be read for emails or addresses, or checked against a list of them. Your email is opened only to send you an email, and your address only to show it to you and to the people you share with.

Locked with your home's own key. Serial numbers, notes, receipt notes and amounts, and receipt photos are encrypted with a key made for your home alone. That key is itself locked by a master key held by Amazon's key service (AWS KMS), which never leaves Amazon; we keep only the locked copy. Kind, place, brand, model and dates stay readable, so search, recalls, your reminders and your AI keep working. Entries written before we turned this on were changed once, on 2026-10-31, to hold only the locked copy. When you delete your Notestead, your home's key is deleted too: what it locked can't be opened again, and backups made after that can't open it either. A backup made before keeps the locked copy for up to 3 days, as above.

AI, and what trains on your things

On your phone. Labels and receipts are read on your phone (Tesseract.js), and the camera's guess of what a thing is runs on your phone too (SigLIP 2). Nothing is sent to be read, and nothing of yours trains any model.

The photo check. Before a photo is kept, Amazon Rekognition looks at it for harmful content (above), and answers with labels only. We have told Amazon not to keep or train on what we send.

On our server, only when you tap Allow. When you tell a remodeling project out loud and tap Allow, Claude (Anthropic) helps sort it, through Anthropic's commercial service. Anthropic's commercial terms say it does not train its models on what is sent this way. It gets your words and your things' kind and place, never serial numbers, notes or costs. No other AI company is sent anything by us, apart from the photo check.

Your own AI. If you connect Claude, ChatGPT or Gemini yourself, what it reads goes to that company under your own agreement with it (see "If you connect your own AI").

The companies that run parts of Notestead for us: Fly.io (servers), Cloudflare (R2: the backup copy and your photos), Amazon (SES: email; Rekognition: the photo check; KMS: the master key that locks your home's key; SNS: word of bounced emails), Sentry (error reports), Anthropic (only when you tap Allow), and the US Census Bureau (looking up an address). None of them may use your Notestead for their own purposes.

How long it is kept, and deleting it

Your home's record keeps its history: when you take something off your list, it leaves the list but stays in the history, so the house's story stays true.

You can delete your Notestead yourself, at the bottom of your Notestead. That deletes your things, notes, photos, what your AI proposed and your AI connections, and can't be undone. Deleted entries also leave our backup copy within 3 days. If you tell us you've sold or moved out, your Notestead closes to you and to everyone you invited, and every link you shared ends. You choose what the next owner who proves the home is theirs can read: the house, not your notes (your things with their makes, models, serial numbers and dates, service dates and who did them, warranties, leak checks and house jobs, but not your notes, what you paid, receipts, photos, documents, people, AI or shared links); everything; or nothing. You can choose before you sell, and if the county records the sale first, we do what you chose; if you chose nothing, it isn't passed on. What isn't passed on stays in the record and is not shown to anyone. When the house is passed on, your house tags work again for the next owner once they hold it; if not, they stop. What stays: your claim of the house, public records and the report, the record of who opened what, and one line saying you deleted your Notestead — the date, how many entries, and a fingerprint (a hash) of them, never what they said. To ask for a copy of what we hold about your home, write to info@tasaab.com.

Children

Notestead is for home owners, and not for anyone under 18.

Changes

When this page changes, the new version goes here with its date.

2026-10-12: added sharing with your insurer, which happens only when you send a link.

2026-10-15: one way in. You sign in with your email; a device without email can be signed in by your phone; the verified-owner badge is earned inside your Notestead.

2026-10-15: a link to your insurer shows the 4-point summary only, says whether your ownership was checked by mail, and can be ended by you or a co-owner; the claim packet is its own link. Saving your insurer's name shows their contractor network, if they publish one, below the state's list, and sends them nothing. Before you share, a checklist says which of the 4 points are ready; it is yours alone.

2026-10-16: added a listing link for a buyer's side, which happens only when you make one.

2026-10-16: added a walk link for someone you hire to walk the house; what they send waits for you.

2026-10-16: when you sell, you can pass on the house without your notes, and choose that before the sale.

2026-10-16: added blank tags and tag kits, set up by tapping them.

2026-10-16: a house tag shows a technician the thing's service history: the day and the kind of work.

2026-10-16: added remodeling projects. Your insurer and listing links show their title, days, scope, permit numbers and what they put in, never the contractor or any cost. "Pass on the house, not my notes" passes them, contractor included.

2026-10-17: you can tell a remodeling project out loud with your keyboard's microphone; we get only the text. Notestead's own rules read it. Only if you tap Allow, Claude (Anthropic) helps: it gets your words and your things' kind and place, never serial numbers, notes or costs, and each time is written to your record. Nothing is kept until you tap Keep.

2026-10-21: added the electrification ledger, which stays in your Notestead. New kinds of things (such as a heat pump water heater, a cold-climate heat pump, a ventilator or a smart panel) show in your 4-point summary under the point they belong to, with the same facts as any other thing.

2026-10-21: every photo is checked by Amazon Rekognition before it is kept, and a PDF on our server; harmful ones are refused.

2026-10-21: an insurer or listing link can also be read as plain text (Markdown), made from the page itself: nothing more than the page shows, and it ends with the link.

2026-10-21: Notestead is now called Notestead, at servicebook.tasaab.com. Nothing about your data changed; the old address housebook.tasaab.com still works and sends you here.

2026-10-21: a Notestead can be kept for a home, or for a building, property or facility you own or are authorized to keep the record of. What is kept, and who sees it, is unchanged.

2026-10-23: more than one person can stay signed in on one browser and switch without an email (the tasaab_others cookie), and opening the same page of your own book again within ten minutes is written once. Nothing else about what is kept or shared changed.

2026-10-23: the sign-in email also carries a 6-digit code, typed on the page that asked; it works only in that browser, once, for 15 minutes (the tasaab_code cookie). Nothing else changed.

2026-10-23: someone trained to set up a home (a documenter, invited by Tasaab) can, at the owner's request, start the home's Notestead and document it. Until the owner accepts it they work in it as a co-owner, without receipts or costs; everything they add is recorded as theirs. To hand it over they give us the owner's email, which gets a code and an Accept link. Once the owner (or their agent) accepts, the book is the owner's and the documenter's access, and their AI app's, ends for good. If the owner later taps Ask for help, we email the documenter a walk link for 24 hours: they can add or fix equipment, everything waits for the owner to keep, and they don't see the rest of the book.

2026-10-23: packets and listing links say once the day your Notestead started, and don't ask for older service history in its first year. A thing's last service, as you recall it in one tap (within a year, 1 to 3 years, longer, don't know), is kept and shown as yours, with no record; your reminders count from the day you said it.

2026-10-24: if you turn on Read labels with Claude (More, Connect, or at a label stop in the Photo walk), or during a setup visit, label photos can be read by Claude (Anthropic) on our behalf, up to 100 a month and 60 a day for a home; each read is counted in your record, with no photo or content: the photo (in the Photo walk, only the part you box around the label) is sent to Anthropic to read what's printed on the label, and nothing is kept until you or the documenter save it. What the label means (a made date from the serial, the age, a typical life for that kind of equipment, a refrigerant's status) is worked out by Notestead from published sources, each named. Size, fuel, electrical ratings, refrigerant, efficiency and filter size read from a label are kept with that thing, and never shown on an insurer or listing link.

2026-10-24: the help desk (🛟 Help) is Claude (Anthropic) using our own tools: it sees your book's counts and states (how many things, what's waiting, sign-in and AI connection states), never your notes, photos, serial numbers or costs. What you type to it goes to Anthropic to answer. Each time it helps in your book, which checks it ran is written to your record. If it hands you to a person, they get your email, your home's address and what it checked.

2026-11-01: on a club or property book, reminders now include inspections that Washington rules or fire codes ask for (a backflow test, the kitchen hood fire system, an elevator permit, a boiler inspection, a pool permit), each quoting its rule. When you log an inspection you may add the tester's or contractor's license number and the confirmation code the city or state gave. They're kept with that service like the company's name: your AI can read them, and they never go into an insurer or listing link, a packet or a house tag. They are printed in your own documentation package on the Clean Buildings ready page. Homes are unchanged.

2026-11-01: a club or property book also has a Clean Buildings ready page, for Washington's Tier 2 rule. It keeps what you type there: the building's square feet and use, its Washington building ID and Portfolio Manager number, each thing's status (in service, out of service, abandoned in place, removed, other), and your emergency contacts, which are organisations and agencies, never a resident or member. You can keep documents with your inspection reports (your O&M program, replacement policy, energy plan). Two downloads, an inventory spreadsheet and a documentation package, are made for you when you tap them and sent nowhere; they carry no serial numbers, notes or costs. Your AI can read the checklist's summary. Nothing here reaches an insurer, a buyer, a pro or anyone who scans a tag, and Notestead never says a building is compliant: you and your energy manager report to the state.

2026-11-01: on a club or property book, a report that isn't in a layout we know is cut into findings by its problem words (like "deficiency", "failed" or "repair"), and fire and life-safety findings are kept (burglar alarms, cameras and locks still aren't). For each finding you can open a job, plan a date, mark it done or not an issue; open ones show on your Due soon list. Your AI can read the open findings, in the inspector's words, to explain them and suggest next steps; it can't change them. Spoken notes can now fill in a license number and confirmation code; as before, only the text your phone's keyboard makes reaches us.

2026-11-02: a club's or property's book can have a daily checklist. The manager writes each job (a few words, never a code or password), how often, and who does it. Each person sees the jobs that are theirs and ticks them done. The book keeps who ticked each job and when, and the manager sees it. Ticks stay in the book's history like any other entry, and are erased with the book. Nothing on the checklist, and no name, is sent to Anthropic or anyone else.

2026-11-03: on a club's or property's book, the owner can offer the owner role to a co-owner who has already joined. Nothing changes until that co-owner takes it, signed in to the book themselves, within 7 days; a connected AI can't offer or take it. Then they are the owner, and the past owner stays on as a co-owner under the name they typed, or leaves the book if they chose to (their sign-ins to it end at once). The past owner's connected AIs stop reaching the book. Both get one email saying who the owner is now. The book keeps when it was offered, cancelled or taken, and by whom, like any other entry; nothing in it moves or is shared.

2026-11-03: when someone is removed from a club's or property's book, the checklist jobs and open projects that were theirs are listed, under their name, for the owner and co-owners to give to someone else; until then they show on the owner's and co-owners' greeting. Handing one on is kept like any other change to the job or project.

2026-11-02: a club's or property's book can keep projects: work bigger than a repair, with its stage, target date, the person responsible, the next step and who marked it done, why it was started, the equipment it touches and the contractor's name. Projects are private: only the book's owner and co-owners see them, never a helper, and only the owner can approve one. A project can keep amounts in dollars: its budget, each quote and what was spent, with a few words like who quoted. Those amounts are seen only by the book's owner and co-owners; they are never on a link you share, never in an email, and never sent to Anthropic or a connected AI. They are in the copy of the book an owner takes home, and erased with the book. When a project is done, it is kept as a remodeling project like any other, and only its title, scope, dates and permit numbers can appear on a link you share. When an owner or co-owner asks the club's assistant a question (and the manager turned it on), each open project's title, stage, target date and next step go to Anthropic with the question; never an amount, the scope, the contractor or a name, and never when someone on the team asks. Project next steps show in the greeting and the Sunday email of the book's owners and co-owners only, without amounts.

2026-11-02: a project can be split into areas (like an entrance or a cold plunge), each with the permits and reviews its public sources name. An owner or co-owner can mark each one sent, in the book or not theirs, with its number and date as they typed them. Those numbers and dates are seen only by the book's owner and co-owners, on the Projects page: never in a greeting, an email, a link you share or the remodeling record, and never sent to Anthropic or a connected AI. When an owner or co-owner asks the club's assistant a question, each open project's area names and how many of their permits are in the book or not yet go with it, never a number or a date. A reminder that a permit's stated time is near shows in the greeting and Sunday email of the book's owners and co-owners, without its number.

2026-11-02: each area also lists the end-of-job papers that should end up in the book (warranties, manuals, permit finals, as-built drawings, start-up reports). An owner or co-owner can keep a PDF on each, or mark it not theirs. Those PDFs are kept like inspection reports, seen only by the book's owner and co-owners, and never on a link you share, in an email or in the remodeling record. If the manager turned the club's assistant on and lets the book suggest where a paper goes, the PDF, the project's paper lines and its things' kinds and places go to Anthropic for that one suggestion, inside the monthly cap; the owner confirms before anything is kept. Invoices, pay applications and lien waivers are refused before anything reads them. When someone asks the assistant, only how many papers are in the book or missing go with the question.

2026-11-02: when an area is done, the book shows what it leaves behind: the things it put in, checklist jobs with the rule that sets how often, and for a cold plunge the drain-and-refill interval worked out from the gallons and users a day an owner types. Nothing is added until an owner presses it; those gallons and users are kept with the project, seen only by its owners.

2026-11-02: remodeling and improvement projects are seen only by a book's owner and co-owners. Helpers don't see them.

2026-10-24: the list of what a thing is now has the house's structure and spaces (foundation, crawl space, mezzanine and more), and when nothing fits you can choose Something else and type what it is. Those words are kept in your book like the rest; an insurer or listing link that names the thing (a remodeling project's things) says only "Other thing", never your words.

2026-10-24: an AI you connect yourself (Claude, ChatGPT, Gemini or another app) is now told everything it can help with in your book, not only the walk, and it can now read your remodeling projects: title, what was done, the contractor's name you wrote, dates, permit numbers and which things. Never a cost or a file. It still can't keep anything.

2026-10-24: the camera's guess of what a thing is uses a newer model, SigLIP 2 (Apache-2.0 licence), in place of TinyCLIP. It still runs only on your phone; the video is still not sent or kept, and its guess is still only filled in for you to tick. The model is a little bigger (about 55 MB, downloaded once).

2026-10-24: you can make an AI you connect your manager (when you connect it, or in More, Your AI). It can then keep things for you after you say yes in it. Each keep is labelled with the AI's name and can be undone for 30 days; Undo takes it out of your book and puts it back in Waiting, without erasing the record that it happened.

2026-10-24: an AI you made your manager can ask to invite a person into your book, or to make an insurer or listing link. It only asks: we email you, and nothing happens unless you tap Confirm on the page that email opens. The link is shown on that page, not to the AI; you send it yourself. It can remove a person or end a link at once, which only takes access away.

2026-10-24: packets for design apps. An AI you connect can read your listing or insurance packet as slides, for a design app you use (like Gamma). A photo goes in only if you ticked "OK to use in packets" on it, because label photos show serial numbers. Each such photo gets a link that works for a day and stops at once if you untick it; whoever has the link can open that one photo, so it goes to your AI's company and the design app under their terms.

2026-10-24: your AI can also read one list of what needs your attention (what's due, recalls, what's waiting, gaps), worked out from your record. You can start a new Notestead from your AI's sign-in page: the same email and 6-digit code as anywhere else.

2026-10-25: a documenter setting a home up can't make a listing or insurer link for it, or pick its packet photos, and neither can their AI: that waits for the owner, once they accept it. A documenter setting up several homes can point their AI at another of those homes with a tap on Set up a home, without connecting it again; the AI then reads and proposes for that home only, and a home leaves that list the moment its owner accepts it.

2026-10-25: you can add one front photo of the house, for listings. It shows at the top of your listing links and listing packets, never on an insurer link, and only while the link works. Location and camera details are taken out of it when you add it. Remove it and it comes off at once, and the file is deleted from your Notestead and our backup.

2026-10-25: the Service walk can have Claude (Anthropic) read each label photo you take in it, so the photo is kept with the thing when you save it. Each person in a book says yes once before their photos are sent; turning the reader on is that yes, and you can say no later. A book sends at most 60 photos a day. Nothing is kept until you save it.

When we use Claude for your home, we keep how many words (tokens) it used and what it cost us, never what it read or wrote. It's in your take-home copy and goes when you delete your Notestead.

2026-10-25: someone who started a home's Notestead for its owner (an agent, say) can send it to the owner from People. From then on they work in it without receipts or costs and can't share it. Once the owner accepts, it's the owner's: the person who started it, and anyone they invited, can't open it again.

2026-10-25: on the Service walk, "keep the photo" starts ticked, so a label photo stays with the thing you save. Untick it before Save to keep the facts without the photo.

2026-10-28: the Service walk and the Photo walk are now one walk, the Photo walk. What you marked on the old walk, like "not in this house", stays. A "not in this house" mark is part of your book, so your connected AI and an insurer link you make can show it. When Claude reads a label on the walk, it can also offer what else is printed there (capacity, fuel, volts, amps, refrigerant, efficiency, filter size), each kept only if you tick it, as on the main screen. Nothing new is sent to anyone.

2026-10-28: to find where the walk is hard, we count, by walk step and day: how often a label read worked or didn't, who read the label (Claude or your phone), when Claude read another thing's label, when a step ran out of photos, when you typed a label instead of photographing it, when you marked a thing not in your house, when you finished a part of the walk, and how often help was asked there (for example "furnace label: 3 not read"). The counts carry no name, email, home, photo or words you typed. Using "Stuck here?" on a walk stop is your choice: the help desk is told which stop you're on; "Send to a person" emails us your words, the stop's name, your email and your home's address.

2026-10-28: "Find its exact page" sends a thing's brand and model to Anthropic, whose Claude searches the web for that model's page; our server opens the pages it names to check them. Only where the label reader is on, one label read each.

2026-10-28: where the label reader is on, the exact page is looked for by itself once a thing's label is kept, and waits for you to keep it. Nothing else is sent.

2026-10-28: a page found for a model is shared with every Notestead that has that model: only the brand, the model and the page, never who has it.

2026-10-28: an inspection report you add is kept in your book as you sent it, private to you and your co-owners. Our server reads the PDF's own words to list its findings, with the page each is on; nothing is sent to Anthropic or anyone else. A finding is shown with one of your things only if you keep it there. Reports and findings are never in an insurer link, a listing, a buyer's page or a house tag; they go home in your export and are deleted with your book.

2026-10-31: the sign-in email carries only the link. Opened on another phone or computer, the link's page shows the 6-digit code to type on the page that asked; the code still works only there, once, for 15 minutes. Nothing about what is kept or shared changed.