Privacy policy

Last updated: 4 September 2026

1. Controller

Jean-Sébastien Lefèvre, sole trader (entrepreneur individuel), SIREN 534 599 121, Brévonnes. Contact: hello@brunt.care.

2. Data we collect

• Account data.
• Google data if you choose to sign in with Google.
• Family and food information you enter.
• Generated menus and grocery lists.
• Payment via Lemon Squeezy (we do not receive your card).
• Technical data and logs.
• Meal photos are not enabled at large scale.

3. Legal bases

• Contract: account and menu generation.
• Explicit, distinct consent if health-like information is involved, before the first AI generation.
• Payment: processed by Lemon Squeezy.
• Legitimate interest: logs and backups.
• The session is necessary for the service to work.

4. OpenRouter / Claude

AI generations go through OpenRouter to Claude. We send only the information needed. Separate agreement is requested before the first generation. Minimisation: no emails, no children's names, no photos. A data-processing agreement (DPA) with this provider remains to be contracted; it is not presented here as already in place.

5. Processors

Fly.io, Cloudflare R2, OpenRouter, Lemon Squeezy, OVH (email), and Google if you use OAuth sign-in. No resale to advertisers. Plausible is not enabled.

6. Transfers

Primary hosting is in the European Union (fra region). Transfers outside the EEA remain possible, with standard contractual clauses (SCCs).

7. Retention

• Account: while it is active.
• After deletion: a few days.
• Logs: about 14 days.
• Backups: about 14 days.
• Accounting records: as required by law.

8. Your rights

GDPR rights (access, rectification, erasure, objection, portability, restriction): write to hello@brunt.care. Response within 30 days. You may also contact the CNIL. There is not yet one-click in-app deletion.

9. Children

Brunt is for adult household organisers only.

10. Cookies

A session cookie is necessary for the service. No ads, no non-essential analytics. Google and Lemon Squeezy may set their own cookies on their flows (Google sign-in, payment).

11. Family invitations

Inviting someone who accepts shares household access with that person.

12. Changes

Updates to this policy are identified by the date at the top of this page.