Privacy Policy
The short version
Grupiter stores the household information you put into it, and nothing more. There is no advertising, no analytics tracking, and your data is never sold or shared for marketing. The only outside companies that touch it are the ones needed to run the service: Microsoft for sign-in and hosting, Anthropic when you use an AI feature, and Brevo to deliver invitation emails. You can delete your account and its contents at any time.
1. Who is responsible
Grupiter is built and operated by Mark Gilleland as an individual. If operation later transfers to a company, this page will be updated to name it.
For any privacy question or request, contact msg2000.privacy@outlook.com.
2. What is collected
Account and identity
Signing in is handled by Microsoft Entra External ID. Grupiter never sees or stores your password. From sign-in it receives your email address, your name, and a unique account identifier.
Profile details you choose to add
Your profile can hold a first, last and nickname, date of birth, postal addresses, phone numbers, significant dates such as birthdays and anniversaries, and a profile picture. All of it is optional; leave it blank and the app works.
Household content you create
The things the product exists to hold: groups and their membership, shared lists, calendar events, inventory items, messages you send to your group, and expense records including any receipt images you upload.
Technical data
A sign-in session cookie, a push-notification subscription if you enable notifications, and server logs and diagnostics used to keep the service running and to investigate errors. Logs are written so as not to include the contents of your household data.
3. Why it is used
To operate the features you are using, and nothing else: showing your household its calendar, lists, inventory and expenses; delivering invitations and notifications you asked for; keeping accounts secure; and diagnosing faults. Your content is not used to build advertising profiles, and it is not sold.
4. Who else processes your data
Grupiter relies on the following providers. Each receives only what its job requires, and each is bound by its own terms.
| Provider | Purpose | What it receives |
|---|---|---|
| Microsoft Entra External ID | Sign-in and account security | Email address, name, sign-in activity |
| Microsoft Azure (United States) | Hosting, database and file storage | All application data, including uploaded images |
| Anthropic | Reading receipts and running the AI assistant | Receipt images you submit for analysis, and the messages plus related item details involved in an assistant request |
| Brevo | Sending invitation emails | The invited person's email address and the group name |
| Browser and device push services | Delivering push notifications you enabled | The notification content and a device subscription identifier |
Grupiter is hosted in the United States. If you use it from elsewhere, your data is processed there.
5. AI features
Two features send data to Anthropic: receipt analysis, which uploads the receipt image you chose to analyse, and the in-app assistant, which sends your messages together with the household details needed to answer them. Both run only when you invoke them. If you would rather no data reach an AI provider, do not use those two features; the rest of the product is unaffected.
What Anthropic may do with data submitted through its API is governed by Anthropic's own terms.
6. Cookies
Grupiter sets one cookie, which keeps you signed in. There are no advertising cookies, no analytics cookies, and no third-party trackers. Because the only cookie is strictly necessary to provide a service you asked for, there is no consent banner to click through.
7. How long data is kept
Household content is kept while your account exists, because that is the point of the product. Deleting an expense deletes its receipt image. Deleting your account removes your profile and personal data.
Content you contributed to a shared group may remain visible to that group where removing it would damage records other members rely on, such as a shared expense history. Ask at the address above if you need something specific removed.
Backups and server logs persist for a short period after deletion before ageing out.
8. Your choices
- See your data. Most of it is visible in the app; ask if you want a full copy.
- Correct it. Profile and household content are editable in the app.
- Delete it. Delete individual items, or your whole account.
- Turn off notifications. Push notifications are opt-in and can be revoked at any time, in the app or in your browser or device settings.
Depending on where you live you may have additional rights over your personal data. Write to msg2000.privacy@outlook.com and your request will be honoured.
9. Children
Grupiter is not intended for children under 13, and accounts may not be created for them. If you believe a child under 13 has an account, contact msg2000.privacy@outlook.com and it will be removed.
10. Security
Traffic is encrypted in transit. Sign-in is delegated to Microsoft, so no passwords are held here. Areas holding the most sensitive information - expenses, messages, profile and group administration - require you to have signed in recently, not merely to hold a valid session.
No service can promise perfect security, and this one is built and run by one person. Please weigh that when deciding what to store here.
11. Changes
If this policy changes, the date at the top changes with it. Material changes will be flagged in the app rather than made quietly.