Privacy

On your phone only

Your lists, Stock and History stay on your phone unless you share a list or join a household. There is no account to make, and nothing to sign in to, to use TinyBrownie on its own.

Brownie

When you ask Brownie something, the phrase you typed is sent to TinyBrownie's server, which passes it on to an AI model provider (OpenRouter, which routes it to Anthropic's Claude) so it can work out the items. Brownie asks for your OK the first time.

Nothing else from your lists is sent, only the phrase. TinyBrownie does not store it. Our logs keep metadata only: a short hash of your install ID and, if you are signed in, of your user ID, the model used, token counts, cost, timing and the result status. They never hold the phrase or the answer.

The AI providers handle the phrase under their own terms and privacy policies.

Guest links

When you share a list with a link, the list's items (and who ticked what) are held on TinyBrownie's server for as long as the link lives. Anyone with the link can see and tick them.

A link ends when you stop it, when the guest taps Finish (the page stays read-only for 2 hours), or when it expires: 48 hours after the last activity, or 7 days after you made it, whichever comes first. It never expires while someone is still shopping (activity in the last 2 hours). Once it has ended, the shared copy is deleted when your phone has saved the trip, or after 7 days at the latest. Your guest's browser also keeps a local copy of the list on their device.

Households

Households are optional. To use one you sign in with Apple. We keep:

• your Apple user ID (an ID that is private to this app, not your Apple ID);
• the display name you choose;
• the household's content: its lists, Stock and shopping trips, including who added or ticked what.

We do not store your email address, even if Apple offers one or you hide it.

We also keep Apple's refresh token for your sign-in. It is stored only so we can revoke it when you delete your account.

The other members of your household can see your display name and what you add and tick.

Purchases

Apple handles every purchase, and TinyBrownie never sees your payment details. We use RevenueCat to keep track of who has Plus: it receives your purchase and subscription status from Apple, linked to a random ID the app creates (or to your household account ID if you sign in). When you ask Brownie, our server checks that ID with RevenueCat to confirm you have Plus.

Deleting your data

In the app, go to Household, then Delete account. That removes your sign-in, your membership and your user record, and revokes Sign in with Apple. If you were the last member, the household and everything in it is deleted too. If others remain, the household's lists and Stock stay for them.

Leaving a household keeps your list on your phone. You can also email support@tinybrownie.app to ask for access to your data or for it to be deleted.

Deleting an item, list or trip leaves a small marker (a tombstone) so other phones learn it is gone. We keep up to the newest 1,000 for lists and 1,000 for Stock, and they go when the list copy or household does. Cloudflare may also keep short-lived backups of our storage for recovery.

Sign-in sessions last 90 days and are extended while you use the app.

Your rights (UK GDPR)

TinyBrownie is run by H Silva, who is responsible for your data (the controller under UK GDPR). Contact: support@tinybrownie.app.

We use your data to provide the service you asked for. For Brownie, we rely on your consent, which you can stop at any time by not using it.

You can ask to see your data, correct it, or delete it. You can also complain to the Information Commissioner's Office (ICO) at ico.org.uk. We would like the chance to help first.

Who helps us

• Cloudflare: hosting and storage. It also sees your IP address when your phone connects, which we use only to limit abuse.
• OpenRouter and Anthropic: Brownie, as described above.
• Apple: Sign in with Apple and purchases.
• RevenueCat: tracks purchases and subscription status.

Children

TinyBrownie is not directed at children under 13.

Changes

If this changes, we will update this page and its date. Anything that affects what we collect will be mentioned in the app too.