Privacy Policy
Last updated 28 August 2026
This policy covers the grocery.ai iPhone app and this website. It is written to be read rather than to be survived, so it says specifically what is collected and what happens to it.
The short version
- There is no analytics SDK, no advertising SDK, and no tracking across other apps or websites.
- Barcodes you scan are looked up, not logged against you.
- Anything you write about your diet or health can be deleted on its own, without deleting your account.
- Deleting your account deletes the data, from inside the app, immediately.
What is collected
Account.If you sign in with Apple or Google we receive an email address and, on the first sign-in only, a display name. If you use Apple's Hide My Email, we only ever hold the @privaterelay.appleid.com forwarding address — we never see your real one. You can use the app without an account; a device identifier stands in for one, and it identifies a device, not a person.
Your food profile. Goals, allergens, medical conditions and things you will not eat — plus, if you write one, a free-text description of your diet in your own words. This is what makes the score yours rather than generic. See below.
Your pantry. The products you have asked us to watch, and an email address to notify if you asked for email alerts, plus whether you opted in to occasional product news (off by default, and separate from alerts).
Notifications. A push token per device, so we can tell you a price dropped. It identifies a device, not you.
Not collected. No payment details of any kind — the app is free and has no purchases. No location, no contacts, no photo library, no advertising identifier, no behavioural analytics, and no history of the barcodes you scan. The camera is used to read a barcode on the device; images are not uploaded or stored.
Health and dietary information
Anything you tell us about allergies, conditions or your diet is sensitive information under the Privacy Act 1988 (Cth), and it is treated as such. It is collected only with your consent, used only to personalise your scores and warnings, and never used for advertising or sold to anyone.
It leaves our systems in one place, and you should know where.When you write a description of your diet in prose, that text is sent to Anthropic's Claude API to be turned into structured rules — so that “no pork or gelatin” can match an ingredient list that says “isinglass”. Only the description itself is sent: not your name, not your email, not your account identifier. Anthropic processes it to return a result and does not use it to train models. If you would rather this not happen, use the checklists instead of the free-text box — the app works either way.
You can erase the profile on its own, keeping your account and pantry, from Settings in the app.
Who else processes it
These are service providers acting on our instructions, not parties we sell data to:
- Supabase — the database and sign-in.
- Anthropic — the dietary free-text only, as described above.
- Apple and Google — sign-in, if you choose it.
- Resend — sending email price alerts.
- Vercel — hosting this website and the API.
Several of these operate in the United States, so your information may be stored or processed overseas. We do not sell personal information, and we do not disclose it to anyone else except where the law requires it.
Cookies
This website sets a cookie to keep you signed in. That is its only purpose. There are no advertising or analytics cookies.
How long it is kept
For as long as you have an account, and then no longer. Pantry rows created without an account are tied to a device identifier and are removed once they stop being used. Email suppression records — kept so that someone who unsubscribed is not emailed again — are retained deliberately, because deleting them would undo the unsubscribe.
Your rights
You can access, correct, or delete your information. The fastest route for all three is the app itself:
- Delete the food profile — Settings, and your account stays.
- Delete the account — Settings, which removes your profile, pantry, push tokens, and the login itself.
- Stop email alerts — the unsubscribe link at the bottom of any alert.
Or email hello@groceryai.thesahilraj.com and we will do it. If you are unhappy with how we have handled your information you can complain to the Office of the Australian Information Commissioner at oaic.gov.au.
Security
Data is encrypted in transit. On your phone, session tokens and anything derived from your health information are held in the iOS keychain rather than in ordinary storage. No system is perfect, and we will tell you if something happens that affects you.
Children
grocery.ai is not directed at children under 13, and we do not knowingly collect their information. If you believe a child has given us information, email us and it will be removed.
Changes
If this policy changes in a way that affects what we do with information we already hold, we will tell you in the app before it takes effect. The date at the top is always the date of the current version.