The short version
- No account. Burrow never asks for your name, email address or phone number.
- What you write stays with you. Your activities, notes, reflections, answers and photos are stored on your iPhone, in your own iCloud Drive if you turn on backup, or in files you export. We never receive them.
- Anonymous usage statistics are on by default. They tell us which features get used, never what you write. One switch turns them off: Settings › Privacy › Share usage data.
- Purchases go through Apple. RevenueCat keeps track of your subscription so Burrow Pro turns on and Restore works. We never see your payment details.
- No ads, no selling data, no tracking you across other apps or websites.
Who we are
Burrow (the app, listed on the App Store as "Habit Time Tracker - Burrow") and helloburrow.com are made by TooAvid Technologies LLC ("we", "us"). We decide how the data described here is used, so for privacy law we are its controller.
Questions or requests about privacy: support@helloburrow.com.
What stays on your iPhone
Everything you put into Burrow is stored in the app's own storage on your iPhone. We never receive it. That includes:
- your activities: their names, symbols, colours and goals;
- your sessions: when they started and how long they ran;
- your reflections: ratings, notes, numbers, yes-or-no answers, moods, sliders, tags and photos, and the questions you write;
- what Burrow has learned about when you usually start, which is worked out on your iPhone;
- your gems, Marko's wardrobe, your streaks and your settings.
Burrow's widgets and Live Activity read this data on the device. Nudges are scheduled on your iPhone by iOS; there is no notification server of ours.
If you turn on iCloud Drive backup
Burrow saves a backup file to your own iCloud Drive each night and keeps the last 7 nights. Apple stores it under your Apple Account, under Apple's own privacy policy. We can't see or open it. Backup is off until you turn it on in Settings › Your data.
If you export or import
Exports (JSON, CSV or a backup file) are files you create and send wherever you choose. Imports read a file you pick. Neither goes through us.
Permissions
- Notifications, only if you turn on nudges.
- Camera, only when you take a photo for a photo answer. Choosing from your library uses Apple's picker, which shares only the photos you pick. Photos are copied into Burrow's storage on your iPhone.
Burrow never asks for your location, contacts, health data or advertising identifier.
What we collect, and why
| What | Who receives it | Why |
|---|---|---|
| Usage events: which screens and features are used | PostHog | To see what helps and what confuses, and to improve the app |
| A random install ID and an anonymous purchases ID | PostHog, RevenueCat | To count installs without knowing who you are, and to keep your subscription |
| Rough location: country, region, city and time zone | PostHog | To understand where Burrow is used, for example which languages to add |
| Purchase history: plan, price, dates, store country | Apple, RevenueCat | To turn on Burrow Pro, make Restore work, and count revenue |
1. Usage statistics (PostHog)
While Share usage data is on, which it is by default, the app sends short usage events to PostHog, our analytics service. For example: a timer was started or finished and how long it ran, a reflection was shown, completed or skipped, a widget was added, the Burrow Pro screen was shown and which plan was picked, or an onboarding step was finished.
Every event is built from a fixed list in the app's code. Its details can only be numbers, yes-or-no values or short fixed labels. Events never contain your activity names, notes, answers, photos or anything else you typed.
Events also carry:
- A random install ID. The app makes it when it is first opened. It is not Apple's advertising identifier, not the vendor identifier, and not derived from your hardware. Deleting the app deletes it; a new install gets a new one.
- Device and app details: your iPhone model, iOS version, app version, language and time zone, and a few app settings such as theme, text size, free or Pro, and how many activities you have (in ranges).
- Rough location. PostHog works out your country, region, city and time zone from the IP address the event arrives from. We have set PostHog to then discard the IP address, the coordinates and the postal code, so only that rough location is kept. The app itself never reads your iPhone's location.
PostHog also tells the app which version of a screen to show when we compare two designs.
Your choice. Usage statistics are never needed to use Burrow. They are on when you first open the app, and you can turn them off at any time in Settings › Privacy › Share usage data; the app stops sending them straight away. You can also object, or ask us to delete what was already sent (see Your rights).
2. Purchases (Apple and RevenueCat)
Burrow Pro is sold through the App Store. Apple handles payment, and we never see your card or Apple Account details. RevenueCat, our subscription service, receives the purchase details from Apple: which plan, its price and currency, the purchase, renewal and expiry dates, the store country and transaction IDs, together with an anonymous purchases ID the app makes. RevenueCat uses them to tell the app that Pro is active and to make Restore purchases work. Like any online service, RevenueCat also sees the IP address of each request.
RevenueCat sends subscription events (for example started, renewed or cancelled) to our PostHog project so we can count revenue. While Share usage data is on, these join the usage statistics from the same install. While it is off, they are recorded under a separate random ID that is not linked to your usage, and we strip the IP address and linking IDs from them.
Legal basis: to provide the subscription you bought (contract), to keep the records tax law requires (legal obligation), and our legitimate interest in counting revenue.
3. Emails you send us
If you write to us, we receive your email address and whatever you include, and use them only to answer you. Legal basis: our legitimate interest in replying, or steps you asked us to take.
What we never do
- We don't show ads, and there are no advertising SDKs in the app.
- We don't sell your personal information, or share it for cross-context behavioural advertising.
- We don't track you across other companies' apps or websites. Burrow doesn't use the advertising identifier and never shows the App Tracking Transparency prompt.
- We don't combine Burrow's data with data from other sources or data brokers.
- We don't use your data to train AI models. We never receive what you write in the first place.
Who processes it
We use a few service providers. Each may use the data only to provide its service to us.
- PostHog Inc., product analytics, PostHog Cloud (United States). PostHog's privacy policy.
- RevenueCat, Inc., subscription management (United States). RevenueCat's privacy policy.
- Apple, for App Store payments and, if you use it, iCloud Drive. Apple acts under its own privacy policy.
- Cloudflare, Inc., which hosts this website.
- Our email provider, for messages you send to support@helloburrow.com.
We may also disclose information if the law requires it, or to a buyer if TooAvid Technologies LLC or Burrow is sold, in which case this policy continues to apply to it.
Where it's processed
PostHog and RevenueCat process data in the United States. When data from the EU, EEA, UK or Switzerland goes there, the transfer is protected by the European Commission's Standard Contractual Clauses (and the UK's equivalent) or by the provider's certification under the EU-US Data Privacy Framework, where it has one.
How long we keep it
- On your iPhone: until you delete it, or delete the app.
- iCloud Drive backups: the last 7 nights, in your own iCloud Drive, until you delete them.
- Usage statistics: no longer than 2 years, then deleted.
- Purchase records: while you have a subscription, and afterwards as long as tax and accounting law requires.
- Emails: up to 2 years after the conversation ends, unless you ask us to delete them sooner.
Your choices
- Turn off usage statistics: Settings › Privacy › Share usage data. The app stops sending them straight away and deletes any that were waiting to be sent. Purchases are still counted, under a separate anonymous ID.
- Hide activity names on the Lock Screen: Settings › Nudges › Hide names on Lock Screen.
- Turn nudges off: Settings › Nudges, or in iOS Settings › Notifications.
- Delete your data on your iPhone: delete the app (and Burrow's folder in iCloud Drive, in the Files app, if you used backup). To ask us to delete usage statistics already sent, write to support@helloburrow.com.
- Start fresh: deleting and reinstalling the app gives it a new random install ID, unconnected to the old one.
Your rights
Depending on where you live, including under the GDPR, the UK GDPR and Swiss law, you can ask us to give you a copy of your personal data, correct it, delete it, restrict or object to how we use it, or hand it over in a portable form. You can also complain to your data protection authority, such as the one in your EU country or the UK Information Commissioner's Office.
Because Burrow has no accounts, we cannot look up usage statistics by your name or email address. If you'd like us to find, show or delete what came from your iPhone, write to us. We'll explain which details help us find it (for example your country, iPhone model and roughly when you installed Burrow) and do our best. For your subscription, Apple and RevenueCat can identify it from your App Store purchase.
Write to support@helloburrow.com. We answer within one month, and tell you if we need longer.
California and other US states
If you live in California or another US state with a privacy law, you have the right to know what personal information we collect and why, to ask us to delete or correct it, and not to be treated differently for using these rights. In the last 12 months, Burrow collected:
- Identifiers: the random install ID and anonymous purchases ID, and IP addresses, which are discarded after the rough location is worked out;
- Commercial information: purchase history;
- Internet or other electronic activity: app usage events;
- Geolocation: rough location only (country, region, city). Never precise location.
It comes from your device and from Apple, and we use it for the purposes above. We disclose it only to the service providers listed above. We do not sell or share personal information, as those laws define the terms, and we don't use or disclose sensitive personal information. You can make a request yourself or through an authorized agent, by email.
Children
Burrow is a general-audience app and is not directed to children. We don't knowingly collect personal information from children under 13 (or the age set by your country's law). If you believe a child has sent us personal information, for example by email, contact us and we will delete it.
Security
Data on your iPhone is protected by iOS, including its encryption when your iPhone is locked with a passcode. Data the app sends travels over encrypted connections (HTTPS). Access to our analytics and subscription dashboards is limited to the people who build Burrow. No system is perfectly secure, but we keep what we hold small on purpose.
This website
helloburrow.com uses no cookies, analytics or trackers, and loads its fonts from our own server. Cloudflare, which hosts it, processes your IP address and request details to deliver the pages and protect the site from abuse.
Changes
If we change this policy, we'll update the date at the top. If a change is significant, for example if the app starts sending something new, we'll also say so in the app before it takes effect.
Contact
TooAvid Technologies LLC
support@helloburrow.com