Hosted at home
The database, your photos and your receipts live on one machine in my home. No cloud provider holds them.
Your data, at home
Everything stays at home. Forever.
Bouff'app runs on a server in my home, not in a cloud. What you record here is never sold, never shared with a company, and never used to show you ads. This is a promise, not a setting.
Never sold
Not to advertisers, not to data brokers, not to anyone. There is nothing to buy.
Never shared
No partners, no analytics, no trackers. Only you, and the people you choose to share a list with.
What is stored
Only what the app needs to work:
- Your account: email, nickname, and your password as a one-way hash (it cannot be read back). Passkeys store only a public key.
- Your shopping trips: what you scanned, quantities, prices and the store.
- Receipts you add: the photo and the lines read from it.
- Your shopping lists and pantry, visible only to people you invited with your full sharing code.
- Your profile picture, your budget and your app preferences.
- Products you add or edit go to the shared catalog: every user sees them, with your nickname as author.
How receipts and labels are read
Photos of receipts and product labels are read on the home server, or directly in your browser. They are never sent to a cloud service to be read.
Outside requests
When a product is new to the catalog, the server looks up its barcode on Open Food Facts, a free and open food database, to fill in its name, size, photo and Nutri-Score. Only the barcode number is sent, by the server: never your name, your account, your purchases or your address.
When you send a bug report or an idea, its title, details, your nickname and the page you were on are stored securely for the administrator to process. Your email is never included. For a bug, you can attach a replay of the last minute of the page (form fields are masked): it is kept on my own storage and only the administrator can view it. It is only sent if you tick the box.
What never happens
- No ads, and no profile built about you.
- No analytics, no tracking pixels, no third-party cookies. The only cookies keep you logged in.
- No outside scripts or fonts: your browser only talks to this server.
- No cloud OCR, AI or storage service ever receives your photos.
You stay in control
You can change your nickname, change or remove your picture, and delete your shopping trips and lists at any time. From your profile page you can download all your data as a file, and delete your whole account, receipts included: everything is erased at once. Bug reports you sent stay as tickets, and they never include your email.