Privacy Policy

Last updated: February 23, 2026

Overview

R. M. Burgess ("we," "our," or "us") operates multiple mobile and web applications, including LedgerCast and Shattered Prism. All apps share a single account system and backend infrastructure. This privacy policy applies to all R. M. Burgess apps and services.

Account & Authentication

All R. M. Burgess apps use a unified account system. You can sign in using any of the following methods:

  • Email OTP — passwordless sign-in via a one-time code sent to your email
  • Apple Sign-In
  • Google Sign-In
  • Facebook Login

Creating an account in one app gives you access to all R. M. Burgess apps with the same account.

Google User Data

When you sign in with Google, we receive your email address from Google solely for account authentication. Our use of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. We do not use Google user data for advertising, analytics, or any purpose beyond authenticating your account. We do not sell, share, or transfer Google user data to third parties except as necessary to operate the service (Supabase for secure storage, Resend for transactional email delivery).

Apple Sign-In Data

When you sign in with Apple, we receive your email address (or an Apple-provided private relay email) solely for account authentication. We do not use Apple Sign-In data for advertising, analytics, or any purpose beyond authenticating your account. We do not sell, share, or transfer Apple Sign-In data to third parties except as necessary to operate the service (Supabase for secure storage, Resend for transactional email delivery). If you choose to hide your email, Apple provides a private relay address — we treat this the same as any other email and use it only for authentication and transactional messages (e.g., sign-in codes).

Facebook Login Data

When you sign in with Facebook, we receive your email address solely for account authentication. We do not use Facebook Login data for advertising, analytics, or any purpose beyond authenticating your account. We do not sell, share, or transfer Facebook Login data to third parties except as necessary to operate the service (Supabase for secure storage, Resend for transactional email delivery). If you disconnect our app from Facebook or if Facebook disables our access, we will delete all data received from Facebook associated with your account upon request.

Information We Collect

Shared Across All Apps

  • Email address — used for authentication and account recovery
  • Authentication provider data — the method you use to sign in (e.g., Apple ID, Google account)
  • Theme preferences — stored locally on your device only

LedgerCast

  • Financial planning data: account balances, bills, paychecks, and one-time entries
  • Collaboration and sharing data when you share forecasts with other users

Shattered Prism

  • Game progress and state
  • Upgrade and inventory data
  • Leaderboard scores and display names

How We Use Your Information

  • To provide and maintain our apps and services
  • To authenticate your identity and manage your account
  • To sync your data across devices
  • To enable collaboration features (LedgerCast)
  • To maintain leaderboards (Shattered Prism)
  • To send transactional emails (e.g., sign-in codes)

Third-Party Services

We use the following third-party services:

  • Supabase — backend infrastructure, database, and authentication
  • Resend — transactional email delivery (sign-in codes)
  • Google AdMob — advertising on iOS apps; AdMob may collect device identifiers and usage data per Google's Privacy Policy

We do not sell, rent, or share your personal information with third parties for marketing purposes.

Data Storage & Security

Your data is stored securely on Supabase's infrastructure. We use row-level security policies to ensure that users can only access their own data. All data is transmitted over encrypted HTTPS connections.

Your Rights

Depending on your location, you may have the following rights regarding your personal data, including under the EU General Data Protection Regulation (GDPR) and similar laws:

  • Access — Request a copy of the personal data we hold about you
  • Rectification — Request correction of inaccurate data
  • Erasure — Request deletion of your data (you can also delete your account from the Settings screen of any R. M. Burgess app, which permanently removes all your data across every R. M. Burgess app and deletes your authentication record entirely — this action is irreversible)
  • Data portability — Request an export of your data in a portable format
  • Restrict processing — Request that we limit how we use your data
  • Object to processing — Object to our processing of your data
  • Withdraw consent — Where processing is based on consent, withdraw it at any time

To exercise any of these rights, contact us at [email protected]. We will respond within 30 days.

If you are in the European Economic Area and believe we have not adequately addressed your concerns, you have the right to lodge a complaint with your local data protection supervisory authority.

Children's Privacy

Our apps are not directed to children under 13. We do not knowingly collect personal information from children under 13. If you believe we have collected information from a child under 13, please contact us immediately.

International Users

Your data may be processed and stored in the United States. By using our apps, you consent to the transfer of your data to the United States.

Changes to This Policy

We may update this privacy policy from time to time. We will notify you of any changes by posting the new policy on this page and updating the "Last updated" date.

Contact Us

We can be reached through the following channels: