Privacy Policy

Effective date: June 11, 2026

GroceryOS ("we," "our," or "the app") is built around a simple idea: your grocery data belongs to you, on your device. This policy explains what information the app handles, where it lives, and the choices you have.

The short version

• GroceryOS stores your data locally on your iPhone. We do not operate servers that receive, store, or process your personal data.
• We do not collect analytics, use advertising SDKs, sell data, or track you across apps and websites.
• The only time data leaves your device is when you turn on an optional feature that requires it (described below).

Information the app stores on your device

• Receipts and purchases: store names, items, prices, dates, and optional receipt photos you scan or import.
• Pantry and lists: pantry items, expiration estimates, shopping lists, meal plans, and consumption history.
• Profile basics: the display name you enter (or your name from Sign in with Apple, if you choose to use it) and your household name.
• Preferences: budgets, notification settings, diet preferences, and app settings.

All of this is stored in the app's private storage on your device. If you delete the app, this data is deleted with it.

Sign in with Apple

Creating an account is optional — you can use GroceryOS without one. If you choose Sign in with Apple, we receive only the identifier Apple provides (and your name/email if you elect to share them). This is stored on your device and is used solely to recognize you when you return. We never see your Apple ID password.

Camera and photo library

GroceryOS uses your camera and photo library only to scan receipt images. Text recognition (OCR) runs entirely on your device using Apple's Vision framework. Receipt images are not transmitted anywhere.

Optional features that send data off your device

• AI meal suggestions (optional): if you add your own OpenAI API key in Settings, the app sends a summary of your pantry items (item names and expiration windows — never your name, email, or receipt images) to OpenAI to generate recipe ideas. This happens only when you use the feature. OpenAI's handling of that data is governed by OpenAI's privacy policy. If you don't add a key, recipe suggestions are generated entirely on-device.
• Email receipt import (where available): if you connect an email account, the app fetches grocery receipts directly from your provider over an encrypted connection and parses them on your device. Login uses the provider's official OAuth flow; we never see or store your email password, and tokens are kept in the iOS Keychain.

Purchases and subscriptions

GroceryOS Pro subscriptions are processed by Apple through the App Store. We do not receive or store your payment details. Apple's handling of your purchase information is described in Apple's privacy policy.

Notifications

Expiration reminders and price alerts are scheduled locally on your device. We do not operate push-notification servers.

Data retention and deletion

Your data stays on your device until you delete it. You can:

• delete individual items, receipts, or lists at any time;
• use Settings → Delete account & data to permanently erase everything the app has stored — receipts, pantry, lists, preferences, sign-in state, and any stored tokens or keys. This is immediate and irreversible;
• or simply delete the app, which removes its data.

Children

GroceryOS is not directed at children under 13, and we do not knowingly collect personal information from children.

Security

Secrets (such as OAuth tokens and API keys you provide) are stored in the iOS Keychain. App data is protected by iOS's built-in encryption and sandboxing.

Your rights

Because your data lives on your device and we don't maintain copies, you exercise your rights (access, correction, deletion, portability) directly in the app. If you have questions about this policy or your data, contact us and we'll help.

Changes to this policy

If we change this policy, we'll update the effective date above and, for material changes, note it in the app's release notes. Continued use of the app after a change means you accept the updated policy.

Contact

Questions or concerns: [email protected]