The short version.
What we collect, what we don't, and what you can do about it. Written by a human, in fewer words than the average privacy policy.
We don't sell your data.
Not to advertisers, not to data brokers, not to anyone. The business is paid subscriptions, not surveillance.
No third-party trackers.
No Facebook pixel, no Google Analytics, no advertising SDKs. We use a single privacy-respecting analytics tool (Plausible) that doesn't use cookies.
Your search history is private.
It stays on your device. Even within a household, only saved recipes, plans, and lists are shared.
You can take everything with you.
Export your full library as a printable PDF cookbook or as JSON, any time, free of charge.
§1What we collect
The minimum needed to run the service:
- Account email and (optional) display name
- Recipes, plans, and shopping lists you create
- Basic device info (model, OS version) for crash reports
- Anonymous usage events (which screens are used) — opt-out in Settings
§2What we don't collect
- Your contacts, calendar, microphone, or photo library beyond what you actively share
- Location data — Grocerly does not use GPS
- Browsing history outside the app
- Identifiers used for cross-app advertising
§3How we store it
Data is encrypted in transit (TLS 1.3) and at rest (AES-256) on servers located in the European Union. Backups are kept for 30 days and then permanently deleted.
§4Who we share with
Only the small number of vendors required to operate the service: our cloud host (Firebase/Google), our email provider (Postmark for transactional emails only), and our crash reporter (Sentry, with personal identifiers stripped). We never share data for marketing.
§5Your rights
You can, at any time:
- Export your full data archive
- Correct any account information
- Delete your account permanently (Settings → Account, or our Account Deletion page)
- Request what we hold about you (write to privacy@getgrocerly.com)
§6Children
Grocerly is not directed at children under 13. Kid Mode is intended for use under a parent's account, with no separate sign-in or data collection.
§7Changes to this policy
If we change this policy, we'll show an in-app notice at least 14 days before the change takes effect. Material changes also go on this page with a clear redline.