Privacy Policy

This policy explains how information is handled when you use the ChangeBro app for iPhone (including its Home Screen widget) and our website. In data-protection terms, the developer of ChangeBro is the controller of the information described here. Contact details are in the final section.

All of the above stays on your iPhone (and in your own iPhone backups, if you use them) unless you turn on household sharing.

The snapshot is synchronized when you bring the app to the foreground, shortly after you make a change, and when another member's change arrives. A realtime channel is used only to signal that a new version of the snapshot is available. You can leave a shared home at any time, and the app then offers to keep a private local copy or clear it from the device.

Household visibility: everyone in a shared home can see that home's chores, supplies, notes, history, member profiles, and who completed each action. The invitation link is a secret — treat it like a password. An owner can create a new link (which immediately invalidates the old one) and remove members.

Sending an invitation: the invitation is a link of the form changebro://join?code=… If you pass it on with the iOS share sheet, it travels through whichever app you choose — Messages, Mail, or a third-party messenger — and that transmission is governed by that app's own privacy policy, not ours.

• No real name, email address, phone number, or password.
• No contacts, calendars, photo library, health data, or location data.
• No advertising identifier, and no ad networks of any kind.
• No third-party analytics, attribution, or crash-reporting SDKs.
• No payment or purchase information.

We do not sell or share personal information for advertising, and we do not use your content to train machine-learning models.

The camera is used for one purpose: scanning a household invitation QR code. Scanning is performed live on your device, and no photo or video is recorded, stored, or transmitted. You can decline or revoke camera access in iOS Settings — the invitation link can always be typed or pasted instead.

Chore reminders are local iOS notifications scheduled on your device. ChangeBro does not operate a push-notification server and does not collect device push tokens; reminder text is generated on the device. A reminder shows the chore's name, so it can appear on your Lock Screen — iOS Settings let you hide notification previews if you would rather it did not. You can change notification permission in iOS Settings and adjust reminder timing per chore in the app.

• To provide the app's core features — schedules, reminders, history, and supply tracking (performance of our agreement with you).
• To create and maintain the anonymous account that household sharing runs on, so the feature is ready when you want it (our legitimate interest in an app that works without a sign-up step).
• To synchronize a shared home between members and show who completed each action (performance of our agreement with you).
• To protect invitation links and control access to shared homes (our legitimate interest in preventing abuse).
• To maintain reliability, diagnose faults, and keep the service secure (our legitimate interest in a functioning service).
• Camera access and notifications operate on your consent, which you can withdraw at any time in iOS Settings.

Members of a shared home, as described above. Beyond them, information is processed by our service providers on our instructions: Supabase, which hosts the database, anonymous authentication, and realtime service for household sharing, and our website hosting provider. We may disclose information if we are legally required to do so, and would limit any such disclosure to what is required.

Servers used for household sharing and for our website may be located outside your country, including in the United States. Where required by law, such transfers rely on appropriate safeguards, such as the European Commission's standard contractual clauses.

Data on your device is kept until you delete it. You can delete individual chores, supplies, or history entries; use "Erase all data" under Settings > About to wipe the app's content and scheduled reminders; or delete the app.

Please note that "Erase all data" is not a local-only wipe while you are in a shared home: the deletions are synchronized, so the household's chores, supplies, and history are removed for every member. It does not delete the home itself, the member roster, or your anonymous account on the server.

Content in a shared home remains on the server for as long as the home exists, so that other members keep working access. Leaving a household deletes your membership record and ends your access, but your display name, avatar, account identifier, and the history entries attributed to you stay in that home's snapshot, which the remaining members continue to use. Being removed by an owner ends your access and also removes your profile from the household's data.

Deleting the app removes everything stored on the device. It does not delete a shared home or your anonymous account from the server. To have a shared home, its snapshot, and the anonymous account associated with your device deleted from the server, contact us using the address below — we will act within 30 days. Residual copies may persist in encrypted backups for a short period before being overwritten.

Depending on where you live, you may have the right to access, correct, delete, export, or restrict the processing of your personal information, and to object to processing based on legitimate interests. Because household accounts are anonymous, we may need details such as your home's invitation link or identifier in order to locate the right data — without them we may be unable to identify you, and will say so rather than act on the wrong data.

If you are in the EEA or the UK, you also have the right to lodge a complaint with your local data protection authority.

Data in transit is protected with TLS. On the server, PostgreSQL row-level security restricts each home's rows to the members of that home. Your anonymous session token is stored in the iOS Keychain, and invitation links use 256-bit random tokens that an owner can rotate at any time. No system can be guaranteed perfectly secure, and we do not claim otherwise.

ChangeBro is a general household utility and is not directed to children under 13 (or under 16 where local law sets that age). We do not knowingly collect personal information from them. A parent or guardian who believes a child has provided information through household sharing can contact us to have it removed.

Our website has no advertising, no tracking cookies, no accounts, and no marketing forms. Our hosting provider processes standard request information — such as IP address, browser type, and request time — to deliver and secure the site.

We may update this policy as the app develops. The date at the top of the page changes when we do, and material changes will be highlighted in the app or on our website.

Privacy questions, requests, and complaints: info@funplat.com