Privacy Policy

What we collect

• Identifiers (name/email/Apple/Google ID as provided), timezone, avatar, onboarding answers.
• Household metadata, memberships, facilitator notes, gifting references.
• Card titles, MSCs, owners, dormant states, check-in transcripts, unicorn tracking.
• Brain Dump audio/text payloads when you submit them; transcripts may hit cloud speech or Claude when Apple Speech cannot run locally.
• Universal invite tokens, facilitator codes, telemetry you opt into (crash + product analytics toggles).

How Brain Dump AI works

When iOS Speech is unavailable, uploads may travel to supervised AI endpoints tagged as non-training per vendor agreements.

Suggested cards remain drafts until explicitly approved.

FairShare minimizes PII in prompts (no bank data, calendars stay separate until sync opt-in).

Hosting & invites

• Supabase Postgres with row-level security, encryption at rest/transit.
• JWT-backed sessions; invite redemption hits `accept_invite` mutations.
• `https://culi.app/apps/fairshare/join?token=` links documented for partners + ATS rules in marketing FAQ.

Payments & gifting

• Fair Share+ billed via Apple/RevenueCat; household plans cover seats per subscription terms.
• Gifting surfaces minimal purchaser metadata.
• Refund requests funnel through Apple or help@culi.app triage per policy deadlines.

Exports, deletion, minors

• Export JSON + CSV bundles from Settings ▸ Privacy ▸ Export.
• Deletion begins a documented grace window before irrevocable wipes.
• Adult-only flows in v1.0 — guardian flows ship case-by-case.

Third parties

• Apple Sign-In/Google OAuth, Firebase/Crash diagnostics (toggleable).
• Claude/Anthropic for Brain Dump structuring when opted in implicitly by sending content.
• No sale of household rows to data brokers — marketing pixels stay off-sensitive screens.

Changes

We post notices in-app Settings and refresh this structured policy when flows change materially.