GroceryGuard Privacy Policy

1. Information We Collect

1.1 Account Information

• Phone number (for authentication via Firebase)
• Profile information (if provided)

1.2 Receipt Data

• Receipt images (stored securely)
• Store name, location, and purchase date
• Product names, quantities, and prices
• Total spending amounts

1.3 Barcode Scanning

• UPC/EAN barcodes scanned
• Product photos (if uploaded)
• Nutrition lookup history

1.4 Shopping Lists

• List names and items
• Check-off status and notes
• Shared list membership

1.5 Family Sharing

• Family group membership
• Invite codes and join history
• Shared shopping data within family

1.6 Recall Alerts (Premium)

• Recall match history
• User responses (confirm/dismiss)
• Notification preferences

1.7 Usage Analytics

• App usage patterns and features used
• Device type and OS version
• Crash reports and error logs

2. How We Use Your Information

Purpose	Data Used
Provide receipt scanning and storage	Receipt images, purchase data
Nutrition information lookup	Barcodes, product photos
Food recall monitoring	Purchase history, product names, UPCs
Shopping list management	List items, preferences
Family sharing	Family membership, shared data
Spending analytics	Purchase totals, store visits
Improve the app	Usage analytics, crash reports
Customer support	Account info, reported issues

3. Data Sharing and Disclosure

3.1 We DO NOT Sell Your Data

GroceryGuard does not sell, rent, or trade your personal information to third parties for marketing purposes.

3.2 Third-Party Services

We share limited data with:

• Firebase (Google): Authentication and user management
• OpenAI: Receipt parsing and text extraction (anonymized)
• Open Food Facts: Nutrition database queries (barcodes only)
• Apple App Store: Subscription management and payments

3.3 Family Sharing

When you join a family group, your shopping history and lists are visible to all family members.

3.4 Legal Requirements

We may disclose information if required by law, court order, or to protect our rights.

4. Data Security

• Encryption: Data is encrypted in transit (HTTPS) and at rest
• Authentication: Firebase phone authentication with secure tokens
• Access Control: Strict server-side authorization checks
• Secure Storage: Receipt images stored on secure cloud servers

5. Data Retention

• Free Users: 30-day receipt history
• Premium Users: Unlimited receipt history
• Shopping Lists: Retained until manually deleted
• Recall Alerts: Retained for 1 year or until dismissed

5.1 Account Deletion and Family-Shared Data

When you delete your account:

• Immediately Deleted: Your account, phone number, personal authentication data, subscriptions, recall matches, and location votes
• Personal Data Deleted: Shopping trips and lists that are NOT shared with a family
• Family-Shared Data Retained: Receipts and shopping lists that have been shared with your family group will remain accessible to family members. Your personal identifier will be removed from these items (anonymized).

To delete ALL data including family-shared items: Leave your family group first, then delete your account.

Legal Basis: This policy allows families to retain collaborative work product while respecting your right to deletion of personal information.

6. Your Privacy Rights

6.1 Access and Export

You can view all your data in the app. Contact us for a data export.

6.2 Correction

Edit receipt data, shopping lists, and profile information in the app.

6.3 Account Deletion

You can delete your account directly in the app under Family → Settings (gear icon) → Delete Account.

What Gets Deleted:

• Your account and login credentials
• Personal shopping trips (not shared with family)
• Personal shopping lists (not shared with family)
• Subscription information
• Recall matches and location votes

What Remains for Family Members:

• Shopping trips and lists that were shared with your family
• Your name/identity will be removed from these items
• Family members can still view and use this shared data

Complete Deletion: To delete all data including family-shared items, first leave your family group (Family tab → Leave Family), then delete your account.

Timeline: Personal data is deleted immediately. De-identified family data remains accessible to your family members indefinitely.

6.4 California Residents (CCPA)

California users have additional rights to know, delete, and opt-out of data sales (we don't sell data).

7. Children's Privacy

GroceryGuard is not intended for children under 13. We do not knowingly collect data from children.

8. International Users

GroceryGuard is operated in the United States. By using the app, you consent to the transfer of your data to the U.S.

9. Cookies and Tracking

• We use Firebase for analytics (device ID, usage patterns)
• No third-party advertising cookies
• You can disable analytics in device settings

10. Push Notifications

We send notifications for:

• Food recall alerts (if premium)
• Shopping list reminders (if enabled)
• You can disable notifications in device settings

11. Changes to This Policy

We may update this Privacy Policy periodically. Continued use after changes constitutes acceptance.

12. Third-Party Links

The app may contain links to external websites (e.g., recall sources). We are not responsible for their privacy practices.