Burrow Privacy Policy

Last updated: October 20, 2026

This Privacy Policy describes how Appify ("we", "us", or "our") handles information in connection with the Burrow mobile application (the "App"). Burrow is designed with privacy in mind: your data is stored locally on your device by default, and an account is only needed if you choose to use the optional cloud sync feature.

Appify, based in Warsaw, Poland, is the data controller for personal data processed in connection with the App. You can contact us at any time using the details in the Contact Us section.

1. Information We Collect

Local Data

All app data is stored locally on your device and is not transmitted to our servers unless you sign in and enable cloud sync. This includes:

  • Inventory items, quantities, and expiration dates
  • Categories, storage locations, and consumption history
  • Reminders, photos, and app preferences

Account & Authentication Data (Optional)

Using Burrow does not require an account. If you choose to enable cloud sync (a Premium feature), you sign in with Google or Sign in with Apple. We receive your email address (or Apple's private relay address) and a user identifier, used solely to authenticate you and associate your synced data with your account. We never receive your Google or Apple password.

Cloud Sync (Optional)

When you are signed in and sync is active, your inventory data (items, batches, categories, storage locations, consumption history, usage statistics, and item photos) is stored in Firebase cloud storage associated with your account. This data is used solely to provide backup and multi-device synchronization. Each account can store up to 500 MB of photos.

Analytics & Crash Reporting

The App uses Firebase Analytics and Firebase Crashlytics to collect usage data and crash reports. This helps us understand how the App is used and identify issues. The data collected includes:

  • Device type, operating system version, and app version
  • Usage events (e.g., feature interactions)
  • Crash logs and error diagnostics
  • A random app-instance identifier generated by Firebase

This data is pseudonymous: it is linked to a random identifier, not to your name, email address, or the contents of your inventory, and we do not use it to identify you. Analytics and crash reporting are disabled in debug/development builds and are only active in production releases.

Account Deletion Requests via Our Website

If you request account deletion using the web form, we receive the email address and sign-in method you provide, plus any additional details you choose to include. We use this information only to verify and process your request and to confirm its completion, and we delete it once the request has been handled, except where we need to keep a record that the request was fulfilled.

2. How We Use Your Information

We use the information described above to:

  • Provide, maintain, and improve the App's functionality
  • Authenticate you and sync your data across devices, if you opt in
  • Diagnose crashes and technical issues
  • Understand anonymous usage patterns to guide development
  • Process in-app purchases and verify entitlements
  • Handle account deletion and other privacy requests

3. Legal Bases for Processing

If you are in the European Economic Area, the United Kingdom, or another region with similar laws, we rely on the following legal bases under the GDPR:

  • Performance of a contract (Art. 6(1)(b)): to provide your account, cloud sync, and Premium features you purchased.
  • Legitimate interests (Art. 6(1)(f)): to keep the App secure and stable, diagnose crashes, and understand aggregated usage to improve the App.
  • Legal obligation (Art. 6(1)(c)): to respond to privacy requests and keep records required by law.

4. Third-Party Services

Burrow integrates with the following third-party services, each governed by their own privacy policies:

  • Firebase: Authentication, cloud database and storage (for sync), cloud functions, analytics, crash reporting, and remote configuration. See Firebase Privacy Policy.
  • RevenueCat: In-app purchase management. See RevenueCat Privacy Policy.
  • Apple App Store / Google Play Store: In-app purchases are processed through the respective platform's payment systems. We do not have access to your payment details.
  • Google Sign-In / Sign in with Apple: Used for account authentication if you enable sync. See Google Privacy Policy and Apple Privacy Policy.

These providers process data on our behalf as processors under their data processing terms, and only for the purposes described in this policy. We do not sell your personal data or share it for advertising.

5. International Data Transfers

Firebase is operated by Google, and your data may be stored on or accessed from servers located outside the European Economic Area, including in the United States. Where data is transferred outside the EEA, it is protected by appropriate safeguards, such as the EU–U.S. Data Privacy Framework, to which Google is certified, and the European Commission's Standard Contractual Clauses included in Google's data processing terms.

6. Device Permissions

The App may request the following device permissions, only when needed:

  • Camera: To take photos of items and to scan barcodes.
  • Photo Library: To save or select photos.
  • Notifications: To send reminders about expiring items. You can disable notifications at any time in your device settings.

7. Data Retention & Deletion

Local data remains on your device until you delete it or uninstall the App. If you use cloud sync, synced data is retained in the cloud until you delete it or delete your account. If your account has had no active Premium entitlement for more than 12 months, we may delete its cloud data, after notifying you in advance where we are able to.

You can delete your data at any time by:

  • Removing items, categories, or locations within the App (deletions are synced to the cloud when sync is active)
  • Uninstalling the App (removes all local data)
  • Deleting your account (see Account Deletion below)

8. Account Deletion

If you signed in to Burrow with Google or Apple, you can delete your account and its cloud data at any time:

  • In the App: go to Settings → Account and tap Delete account. Deletion happens immediately after you confirm by signing in once more.
  • Without the App: submit a request using our account deletion form or email us at [click to reveal email] . We process web and email requests within 7 business days.

When your account is deleted, we permanently remove:

  • Your Firebase Authentication profile and linked sign-in providers
  • All synced inventory data: items, batches, categories, storage locations, consumption history, and usage statistics
  • Item photos stored in the cloud and storage usage records

If you signed in with Apple, we also revoke the App's access to your Apple ID. The following is not deleted:

  • Data on your device: your inventory stays on your device as local-only data until you remove it or uninstall the App.
  • Purchase records: kept by Apple, Google, and RevenueCat as required by tax and financial regulations. Deleting your account does not cancel an active Premium subscription; cancel it in your App Store or Google Play settings.
  • Analytics and crash reports: these are pseudonymous and not linked to your account. Crash reports are kept for up to 90 days.

9. Your Rights

Depending on where you live, you may have the right to:

  • Access the personal data we hold about you
  • Have inaccurate data corrected
  • Have your data deleted
  • Restrict or object to certain processing
  • Receive your synced data in a portable format (data portability)

To exercise any of these rights, contact us at [click to reveal email] . We will respond within one month. You also have the right to lodge a complaint with a data protection authority. In Poland, this is the President of the Personal Data Protection Office (Prezes Urzędu Ochrony Danych Osobowych, uodo.gov.pl), or the authority in your country of residence.

10. Data Security

We take reasonable measures to protect your data. Local data is stored using standard device storage mechanisms. If you use cloud sync, all network communication is encrypted over HTTPS, and synced data is stored using Firebase's security infrastructure with access restricted to your own account.

However, no method of electronic transmission or storage is 100% secure, and we cannot guarantee absolute security.

11. Children's Privacy

Burrow is not directed at children under the age of 16. We do not knowingly collect personally identifiable information from children under 16. If we discover that a child under 16 has provided us with personal information, we will promptly delete it. If you are a parent or guardian and believe your child has provided us with personal information, please contact us.

12. Links to Other Sites

The App may contain links to external websites or services not operated by us. We strongly advise you to review the privacy policies of any third-party sites you visit. We have no control over and assume no responsibility for the content or privacy practices of external sites.

13. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. Changes will be posted on this page with an updated date. We encourage you to review this page periodically. Continued use of the App after changes are posted constitutes acceptance of the updated policy.

14. Contact Us

If you have any questions or concerns about this Privacy Policy, please contact us at:

Appify
Email: [click to reveal email]
Warsaw, Poland