Privacy Policy

Burolix ("we", "us") is committed to protecting your privacy. This policy explains what data we collect, how we use it, and your rights regarding your personal information. We believe in minimal data collection — we only gather what is necessary to personalize your experience.

When you use Burolix, we may collect the following information:

• Account data: Email address (when you create an account)
• Profile data: Your city, visa type, situation (student/worker/etc.), and status (arriving/living/leaving) — used solely to personalize your checklist and guides
• Progress data: Which checklist tasks you've completed
• Usage data: Basic analytics about how you interact with the app (pages visited, features used)

Your data is used exclusively to:

• Personalize your checklist and show city-specific guide content
• Save your progress so you can pick up where you left off
• Authenticate your account and secure your session
• Improve the product based on aggregate, anonymous usage patterns

When you use the AI chat feature, your messages are sent to Anthropic's API to generate responses. Important details:

• Chat conversations are not stored permanently — they exist only for the duration of your session
• Your profile context (city, visa type) is included in the AI request to provide personalized answers
• Anthropic does not use API inputs to train their models — see Anthropic's privacy policy

Burolix uses the following third-party services:

• Supabase — Authentication and database hosting. Your account and profile data is stored securely on Supabase's infrastructure (EU region).
• Anthropic — Powers the AI chat feature. Messages are processed in real time and not retained by Anthropic.
• Vercel — Hosts the web application. Standard web server logs may be collected.

Burolix uses minimal cookies, limited to what is technically necessary:

• Authentication session cookie — Keeps you signed in. Expires when you log out or after your session times out.
• Local storage — Your profile and checklist progress are stored locally in your browser for offline access.

We do not use advertising cookies, tracking pixels, or third-party analytics cookies.

If you are in the European Union, you have the following rights under the General Data Protection Regulation:

• Right to access — Request a copy of all personal data we hold about you
• Right to rectification — Request correction of inaccurate data
• Right to erasure — Request deletion of your account and all associated data
• Right to data portability — Request an export of your data in a machine-readable format
• Right to restrict processing — Request that we limit how we use your data

To exercise any of these rights, contact us at info@burolix.de. We will respond within 30 days.

We take reasonable technical and organizational measures to protect your data. All data is transmitted over HTTPS, passwords are hashed, and database access is restricted. However, no system is 100% secure — we encourage you to use a strong, unique password.

We may update this privacy policy from time to time. Material changes will be communicated via the app or email. Continued use of Burolix after changes constitutes acceptance of the updated policy.

For privacy-related questions or data requests, reach us at info@burolix.de or via our contact page.