Privacy Policy

Last updated: November 11, 2026

This policy covers supply-run.com and the Supply Run app for iPhone and Android (together, "Supply Run"), provided by Bravarb Technology LLC ("we", "us"). Your Supply Run account also works on schoolsupplylist.org, which has its own policy.

The short version: we keep what we need to run Supply Run, we don't sell your information, and we don't use it for advertising.

What we keep

• Without an account (guest): your lists, recipes and plans stay on your phone. The app uses an anonymous ID to talk to our servers; it isn't linked to your name or email address. If you later create an account on the same phone, what you made as a guest moves into it.
• With an account: your email address and sign-in details (email and password, an emailed sign-in link, Google, or Apple in the app), and what you make in Supply Run, so it's backed up, on your other devices and shared with the people you choose.
• Shopping lists you share: anyone with a list's link or code can open it, add it to their own app and change it. Share it only with people you trust.
• Wish lists: the wishes on them and the notes you add. Anyone with a wish list's link or code can see it. When someone says they'll get a wish, we keep their first name and what they're getting; in surprise mode the list's owner doesn't see this. A wish list you open from someone else is saved to your app until you remove it.
• Classroom wish lists: a teacher's classroom lists made on schoolsupplylist.org can be opened in the app too. Anyone with the link sees the list and the first names of the families sending each item.
• Notifications: if you allow them, a device token so we can send you notifications, such as a shared list changing. You can turn them off in your phone's settings.
• What you send us: school lists, photos, files and reports you add for other families. Once approved, lists are public, without your name.
• Technical data: addresses and request logs, used to keep Supply Run running, keep it secure and limit automated copying.

Gift exchanges (Secret Santa)

• Members: each person's name, the email address they were invited at, and the children a parent adds (a first name only; the parent manages their list).
• Wishes and answers: each member's wish list and their answers to the short questions (such as sizes and likes). The person who draws them sees these.
• Shipping address: only if you add one. Only the person who draws you sees it, and we delete it 60 days after the exchange date.
• Who drew whom: each person sees only who they're buying for. Not even the organizer sees anyone's match until the reveal.
• Anonymous messages: messages between a Secret Santa and their person are kept so both can read them. We don't show the Santa's name with them, so please don't put it in a message.
• Emails: we send invitations, reminders, draw and reveal notices from no-reply@supply-run.com, only for exchanges you're part of.
• After the exchange: an exchange is archived 30 days after the reveal.

Recipes and meal plans (app)

To suggest recipes, the app sends us your food preferences, favorites and recently planned recipes. We use them to choose suggestions and don't keep them with that request. Your meal plans, favorites and preferences stay on your phone, and are saved to your account if you have one.

Gift ideas

To choose gift ideas, the app sends us the grade and school year of each school list you've added (nothing else about your children) and, when you ask, what you type and the budget you pick; the website's gift finder works the same way with what you enter. When you tap Buy, we record which product it was, with a code that doesn't reveal who you are, so we can count clicks and match the commissions stores pay us.

How we use it

Only to provide Supply Run: keeping your lists in step and shared with the people you choose, running gift exchanges, suggesting recipes and gifts, reviewing what people add, sending the emails and notifications described here, and answering you when you write to us.

Who helps us

• Google Firebase: sign-in and notifications.
• Amazon Web Services: our servers and storage, in the United States, and our emails.
• OpenAI: to read items from what you say or type, from photos and files you choose to import, and to understand gift-idea requests. We don't keep the photos.
• Google Cloud Translation: school list text only, when you ask for another language.

Voice is turned into text by your phone's own speech recognition.

Shopping at stores

When you shop from Supply Run, the store's website or app opens. Your sign-in and purchases are between you and that store, under its own privacy policy, and we don't see what you buy. If you use one-tap shopping, the names and amounts of the items on your list are sent to Instacart to build your list there. As an Amazon Associate we earn from qualifying purchases. We may also earn a commission from Walmart and other stores' purchases made through our links.

Deleting your data

In the app, go to Settings to delete your account or, as a guest, the lists on your phone. On the website, use your account page. Deleting your account deletes it and what you own: your lists, wish lists and your place in gift exchanges. School lists you added for other families stay, with no account behind them. For anything else, write to info@supply-run.com.

Children

Supply Run is meant for adults: parents, families, teachers and friends. It isn't meant for children under 13, and we don't knowingly collect their information. A parent may add a child to a gift exchange by first name, and manages that child's list.

Changes

If this policy changes, we'll update this page and its date.

Contact

Bravarb Technology LLC, info@supply-run.com.