Privacy Policy

Privacy Policy

Grocer stores your lists in your account so you can sync them across devices, share them with family, and use Smart Scan. The app does not use advertising SDKs or cross-app tracking.

Summary

Grocer keeps your lists in a personal cloud account. Smart Scan sends a photo to our processing service to extract items. We use product analytics and diagnostics to improve reliability, but we do not sell your data or track you across other apps.

What Grocer Accesses

Photos and camera

Grocer can access your camera or photo library when you use Smart Scan to import items from an image. The photo is sent to our Smart Scan processing service to extract grocery items, then discarded after the request completes. Images are not used to train models or kept beyond what's needed to return your results.

Account and cloud sync

Grocer uses Supabase to host your account and store your lists so they sync across your devices and any collaborators you invite. You sign in with Apple, Google, or email. We store your account identifier, email address when provided, and display name when provided by your sign-in provider.

Data Handling

List data Your grocery lists, items, sharing membership, invites, and related timestamps are stored in your Grocer account so they sync across your devices and collaborators. A local copy is cached on each device for offline use.
Account data Grocer accounts are created through Sign in with Apple, Google, or email. We store the identifier returned by the sign-in provider, your email address when provided, and your display name when provided so we can authenticate you and label shared lists.
Smart Scan Photos sent through Smart Scan are processed by our backend and a third-party AI provider (Google Gemini) to extract grocery items. Images are not retained after processing and are not used to train models.
Purchases Grocer uses RevenueCat to manage subscription status, restore purchases, validate receipts, and understand subscription performance. Purchase history is linked to your Grocer account so paid features work across devices.
Analytics and diagnostics Grocer uses PostHog product analytics and Sentry diagnostics to understand feature usage, crashes, performance, and reliability. Analytics events avoid user-entered grocery item names, OCR text, raw photos, and list contents. Diagnostics may include app state, truncated identifiers, and error details needed to debug issues.
Device identifiers Grocer stores Apple push notification device tokens when notifications are enabled so shared-list alerts can reach your device. Analytics services may also use app-generated identifiers to keep product metrics reliable. These identifiers are not used for advertising or cross-app tracking.
Retention Your data stays in your account until you delete a list or delete your account from Settings. Removing the app or signing out does not delete cloud-stored data on its own.

Your Choices

Optional permissions

  • Camera access is only needed if you want to capture a list with Smart Scan.
  • Photo library access is only needed if you import an existing image.
  • Notifications are optional and only used for shared-list updates if you enable them.
  • Subscriptions can be managed or restored from the app's Settings screen.

Delete data

  • You can delete lists and items inside the app at any time.
  • You can sign out from the Settings screen, which clears the local cache on that device.
  • You can delete your account from Settings. This deletes your account, owned lists, list items, invites, memberships, Smart Scan usage records, push tokens, and subscription entitlement records. Items that remain in another person's shared list are no longer linked to your profile.