Privacy Policy

Who we are

Burrow Budgie is an independently built family meal-planning app, currently running as a small pilot. Questions and requests about your data go to 0xausty@proton.me.

What we collect

• Adult accounts: your email address, used for sign-in links and account communication.
• Teen accounts (13+): a teen's email address and their votes. Teens can only join by redeeming an invite a parent generated while confirming the teen is at least 13 — there is no self-serve signup for minors.
• Family data you create: your family name, the display names you choose for child profiles, suggested meals and pasted recipes, votes, weekly plans, shopping list items, and the budget number you set.
• Store and price data: the Kroger store you pick, items you match to Kroger products, and prices you log ("I paid $X at store Z").

Children and teens

Children under 13 never have accounts, logins, email addresses, or passwords in Burrow Budgie. They participate through profiles that exist inside a parent's signed-in session, with display names the parent chooses. We do not knowingly collect personal information from children under 13, and their votes are attributed to parent-owned profile IDs. Household members aged 13 and older may have their own accounts, but only through a parent-generated invite that includes the parent's confirmation of their age — teens can vote and edit the shopping list, and cannot veto, schedule, change budgets, or touch the Kroger connection.

Prices are a shared commons

When you log a price, other Burrow Budgie families can see the product, price, store name, and date — that sharing is what makes the price book useful. They never see your name, your email, your family name, or anything else about who logged it.

Your Kroger connection

Linking a Kroger account is optional and happens on Kroger's own sign-in page — Burrow Budgie never sees or stores your Kroger password. We hold only the scoped, revocable permission Kroger issues, encrypted at rest, and use it for exactly one thing: adding the items you choose to your Kroger cart. Kroger does not let apps read your cart, and we never see your Kroger order history or payment details. Disconnecting in Burrow Budgie deletes the stored permission immediately; you can also revoke Burrow Budgie from your Kroger account settings.

Where your data lives

Data is stored with Supabase (our database provider, hosted in the United States) and the app is served by our hosting provider. Product and price lookups query Kroger's public API. We use no analytics trackers and no advertising SDKs.

What we never do

• Sell or rent your data, or show ads.
• Market to children or send them communications.
• Ask for, store, or automate retailer usernames or passwords.
• Hold, move, or collect money — the budget bar is visualization only.

Retention and deletion

Your family's data stays until you delete it or ask us to. Disconnecting Kroger deletes the stored tokens right away. Email 0xausty@proton.me from your account address to have your family's data — including child profiles, votes, lists, and logged prices — deleted.

Changes

If this policy changes in a way that matters, we'll tell parents by email before the change takes effect. The effective date above always reflects the current version.