Privacy Policy

• Your account. Name and email. A password is stored only as a hash we cannot read; sign in with Google and we never see a password at all, just your name, email, and profile picture.
• What your household writes down. Chores, pantry items, shopping trips, messages, and the record of who did what.
• Receipts you choose to scan. The photo, so it can be read into your list and prices.
• Notifications, if you turn them on. A push token for each device you enable. You can revoke it any time.
• One sign-in cookie. It keeps you signed in and does nothing else. There are no advertising or tracking cookies.

Why we keep it: because it is the product. Your chores and groceries exist here so your family can see them; your prices exist so the app can tell you what things cost last time. Nobody is reading your household's record, and there is nothing else it gets used for. It stays yours.

• No ads, and no data sold or rented to anyone.
• No advertising trackers and no fingerprinting. We count page views and load times anonymously to keep the app fast: counts and timings, never profiles.
• No access to your location or contacts.
• No bank logins. A budget here is a number you type, not an account you connect.

Your household. Members of your household see the household's shared record, including names. That is what the app is for. Nobody outside your household can see any of it, and every household is isolated from every other.

The services we run on. Like nearly every modern app, Front Burner runs on established infrastructure providers for hosting, storage, email delivery, and crash reports. They process data only to run the service, and none of them may use your household's data for anything of their own. Receipt photos are read by a secure automated service that turns them into line items; your receipts are not used to train anything. If your household sets a ZIP code for the weather line, the forecast lookup carries the town and nothing about you.

• Delete your account any time from the Account page. It takes effect immediately. If you are the last member, the whole household goes with you.
• Completed chores are purged after 30 days.
• Receipt photos are deleted after 30 days. The trip summary (store, total, date) and item prices stay in your household's money record, because that history is the point of the money features.
• Backups rotate on a twelve-week cycle and are used only for disaster recovery.

If something ever breaks for you, you can choose to send an example along with your report so it can be fixed. Nothing is shared unless you send it.

Passwords are stored as strong one-way hashes and session tokens as digests, so a database leak alone cannot be replayed as a login. All traffic is encrypted. Sign-in and invite-code attempts are rate-limited.

Accounts are for people 13 and older. Younger members of a family can be part of the household's routines without holding an account of their own.

If this policy changes, the new version is posted here with a new effective date. Questions, or a data request we haven't automated yet? Write to FrontBurnerApp@gmail.com.