Privacy Policy

What we collect

• Account information: your email address and password, used to create and sign in to your account. Passwords are handled by our authentication provider and are never stored or visible to us in plain text.
• Household data: the household name, monthly income, budget categories, expenses (description, amount, date, and which category they're logged under), and recurring autopay entries you and your household members create.
• Receipt photos: if you attach a photo to an expense or use AI receipt scanning, that image is stored so it can be viewed later.
• Display name and household roster: the name you choose to display to other members, and which household(s) you've joined.
• Billing information: if you subscribe to a paid plan, we store your plan tier and a reference to your subscription in Stripe. We do not store your card number — Stripe handles and stores payment details directly.

How your household's data is shared

A household's budget is shared by design: all members of a household can see that household's income, categories, expenses, receipts, autopays, and billing plan. Members can also see each other's display name and email address, since you're managing shared finances together. Your data is never visible to people outside your household.

Each account can belong to one household at a time. Any member can leave a household on their own; only the household owner can remove other members, rename the household, or permanently delete it. Deleting a household removes its receipts, expenses, categories, members, and billing records entirely — this cannot be undone.

AI receipt scanning

Receipt scanning is an optional feature available on paid plans. When you use it, the photo you submit is sent to Anthropic's Claude API to read the merchant name, amount, date, and category — nothing else on the receipt is retained or used beyond producing that result. We log that a scan occurred (to enforce your plan's monthly scan limit) but do not store the receipt image separately from what you've already saved to the expense itself.

Account approval and email notifications

New sign-ups are reviewed before an account is activated. When you sign up, your email address is shared with our team via a notification email so we can approve or reject the request; approval links expire automatically after 72 hours. We use this process to keep the app limited to invited households.

How your data is protected

• Data is stored with Supabase (hosted Postgres and file storage) behind row-level security rules that restrict every household's data — budgets, expenses, receipts, billing — to members of that household only, enforced at the database level, not just in the app's interface.
• Receipt photos are kept in a private storage bucket that only your household's members can access.
• Payments are processed by Stripe; we never see or store your full card details.
• Administrative actions like removing a member, deleting a household, or changing billing are restricted to the household owner and enforced server-side.

Data retention and deletion

We keep your household's data for as long as the household exists. If the household owner deletes the household, all associated data — expenses, categories, receipts, autopays, membership, and billing records — is permanently deleted, and any active subscription is canceled. To request deletion of your account itself, contact support@brokey.app.

Third parties we use

• Supabase — authentication, database, and file storage.
• Stripe — subscription billing and payment processing.
• Anthropic — reads receipt photos when you use AI receipt scanning.
• Resend — delivers account-approval notification emails.

Each of these providers only receives the data necessary to perform its specific function.

Changes to this policy

If this policy changes in a meaningful way, we'll update the date at the top of this page. Continued use of Brokey after a change means you accept the updated policy.

Contact

Questions about your data or this policy? Email support@brokey.app.