Privacy & cookies

What we store

• Your account: your display name and email address, received from the sign-in provider when you first log in. Email addresses are stored encrypted.
• What your household creates: events, chores, meals, recipes, shopping and to-do lists, and who they are for or by.
• Nothing we watch you with: there is no analytics, advertising, profiling or third-party tracking anywhere in Tribe.

A household set up in “on this device only” mode is never sent to any server at all — it lives solely in the app on that device.

Cookies

Tribe sets a single, strictly necessary cookie: the one that keeps you signed in after you log in. It holds no advertising or tracking identifiers and is not shared with anyone. Under the ePrivacy rules a strictly-necessary cookie needs no consent, which is why the banner informs you rather than asking you to opt in. We use no analytics or advertising cookies; if that ever changes, they will be off by default and asked for separately.

Your language and light/dark choice are remembered in your browser’s local storage, not in a cookie, and never leave your device.

Why we can hold it (legal basis)

We process your account and household data to provide the service you asked for (performance of a contract), and rely on the essential cookie under our legitimate interest in keeping the app secure and usable. We do not process special-category data.

How long we keep it

Your data is kept for as long as your account and household exist. When you delete your account it is removed (see below); a household kept in use by others remains theirs.

Your rights

Whatever data Tribe holds about you is yours to see, take, correct and remove:

• Access & portability: download everything Tribe holds about you as a readable file, from your account settings.
• Rectification: your name and profile are editable in the app; your email comes from your sign-in provider and is corrected there.
• Erasure: delete your account and the data tied to you, from Settings → Delete account — on the web after signing in, or in the mobile app on your personal device. What other people created stays theirs, and a household still in use is not deleted from under them. If you are the only adult in a household, hand it to someone else first, so it is not left with nobody able to manage it.

You also have the right to complain to your local data-protection authority. To exercise any of these, use the controls in the app or contact the operator above.

Who else is involved

• Sign-in provider: logging in is handled by the instance’s identity provider, which verifies who you are and supplies your name and email.
• Recipe suggestions (optional): if the operator enables AI recipe suggestions, the words you type as a prompt are sent to the model provider to generate a recipe. No account details or household data are sent with them.
• Hosting: the operator runs the server; data lives wherever they host it.

Changes

If this notice changes materially, the date above will change with it. Continuing to use Tribe after a change means the current version applies.