Burrow Privacy Policy
The short version: scanning, risk classification, and explanations happen on your Mac. Burrow does not upload file contents or scan facts to a third-party analysis service. Cleanup always requires your explicit confirmation.
1. Information processed on your Mac
To analyze storage and prepare a cleanup plan, Burrow processes filesystem facts such as file and directory paths, sizes, basic metadata, scan issues, selected scan locations, deterministic risk classifications, and the cleanup actions you review.
Burrow stores app settings locally. It may also store local cleanup history, workflow audit records, and rules for items you chose to keep. These records help make cleanup reviewable and auditable.
2. Read-only scanning and cleanup
Scanning is read-only. Burrow does not send file contents to Burrow-operated servers for scanning or classification. A cleanup action is prepared only after local classification and your selection. Burrow moves confirmed eligible files to the macOS Trash, or runs an explicitly listed allowlisted action, only after final confirmation. Buying Burrow Pro never starts cleanup.
3. Local explanations
Paths, sizes, categories, risk labels, evidence, and explanations stay on your Mac and are not sent to a third-party analysis service. Explanations are generated from local deterministic rules and measured facts.
4. Purchases
Burrow Pro is a one-time in-app purchase handled by Apple through the App Store and StoreKit. Apple processes payment information. Burrow receives product and entitlement information needed to unlock Pro; it does not receive your full payment-card details.
5. Permissions
The Mac App Store version runs in the App Sandbox. You choose a Home or other folder through the macOS file picker before Burrow can inspect that scope. Burrow stores this authorization as a security-scoped bookmark so it can restore access on later launches. Full Disk Access is a separate optional macOS privacy permission and does not replace App Sandbox folder selection. Missing access is shown as incomplete coverage; it is never bypassed.
6. Analytics, advertising, and tracking
The Burrow app contains no advertising SDK and no third-party analytics or cross-app tracking SDK. The app does not sell personal information.
7. Website hosting
This website is hosted on Cloudflare Pages. When you visit it, Cloudflare may process ordinary request information such as IP address, browser details, and security logs to deliver and protect the site under Cloudflare’s own privacy policy.
8. Retention and your choices
Local settings, security-scoped folder bookmarks, and records remain on your Mac until you remove them or uninstall the app and its data. You can remove an authorized folder in Settings. Files moved to Trash remain subject to your macOS Trash settings. You can decline Full Disk Access and cancel any cleanup before final confirmation.
9. Children
Burrow is a developer utility and is not directed to children. We do not knowingly use the app to collect personal information from children.
10. Changes and contact
We may update this policy when Burrow’s features or legal obligations change. The effective date above identifies the current version. For privacy questions, email tardislabs@gmail.com.