Privacy Policy

Effective October 28, 2026

Grocery Folks (“Grocery Folks,” “we,” “us”) makes a shared grocery list for families. This policy explains what information we collect when you use the Grocery Folks apps for iOS and Android and the Grocery Folks website (together, the “Service”), how we use it, who we share it with, and the choices you have.

We built Grocery Folks to keep your family’s list between your family. We do not sell your personal information, we do not show ads, and we do not track you across other companies’ apps or websites.

Information you give us

Account details: your email address, a password (stored only as a secure hash by our authentication provider), the display name you choose, and your birth month and year.
Family content: the families you create or join, list items, quantities, stores, notes, saved items, chat messages and reactions, and the history of changes to items.
Photos: product photos you take or choose for an item or a chat message. We re-encode photos on our servers, which removes embedded location and camera data.
Invitations: when you invite someone, we store a scrambled (hashed) form of the invitation code, its expiry, and whether it was used. We never store the code itself.
Messages to us: anything you send when you contact us.

Information collected automatically

Push notification tokens, if you turn on notifications on a phone, so we can deliver family alerts to that phone.
Crash and error diagnostics: the app version, device model, operating system version, and a technical description of the error. We configure our diagnostics provider not to collect message text, list contents, email addresses, screenshots, or session recordings.
Basic security logs kept by our hosting providers, such as IP addresses and request times, used to keep the Service secure and reliable.
A security check when you sign up, sign in, or reset your password: Cloudflare Turnstile uses technical information such as your IP address and browser or device characteristics to tell people from automated programs. It runs in the background and is used only for that check. Cloudflare’s Turnstile Privacy Addendum (https://www.cloudflare.com/turnstile-privacy-policy/) describes how Cloudflare handles this information.

We do not use advertising identifiers, analytics trackers, or cookies for advertising.

AI product images (optional)

AI product images are off unless you turn them on in Settings. When they are on, the item name and, if you add one, the product photo are sent to OpenAI to create or clean up a product picture or to suggest a name. OpenAI processes this information to provide the result to us. You can turn the feature off at any time; your original photos remain available.

How we use information

To provide the Service: create your account, keep your family’s list in sync across devices, deliver chat messages and notifications, and show photos to the members of your family.
To send service emails, such as account confirmation, password reset, and the family notices you choose in Account → Notifications. A family notice says what happened in your family, for example who wrote and their message, which item was added or picked up, or who asked to join.
To keep the Service safe: prevent abuse, enforce limits, investigate problems, and protect our users.
To apply age requirements: your birth month and year confirm you are old enough for an account and decide whether age-restricted features, such as AI product images (18 and older), are available to you.
To fix bugs and improve reliability using crash and error diagnostics.
To comply with law and respond to lawful requests.

Who can see your information

Members of a family can see that family’s list, item history, chat messages and reactions, photos, and each other’s display names and partially hidden email addresses. Family owners can see the email address of someone who asks to join. Nobody outside a family can see its content.

We share information with service providers who process it on our behalf and only to run the Service:

Supabase — database, authentication, file storage, and server functions (United States).
Resend — delivery of account and family emails.
Expo and Google Firebase Cloud Messaging, and Apple Push Notification service — delivery of push notifications.
Sentry — crash and error diagnostics.
Cloudflare — the sign-up and sign-in security check.
OpenAI — AI product images, only when you turn them on.

We may also disclose information if required by law, to protect the rights, safety, or property of our users or others, or as part of a merger, acquisition, or sale of assets, in which case this policy will continue to apply to your information.

We do not sell personal information and do not share it for cross-context behavioral advertising.

How long we keep information

Your account details: until you delete your account.
A family’s list, chat messages, and photos: for as long as the family exists. When an owner deletes a family, its list, messages, members, invitations, and photos are deleted.
Item change history: up to 365 days.
Records of individual list changes used to keep devices in sync: up to 30 days.
Sent notification records and expired or used invitations: up to 30 days.
AI usage records used to enforce daily limits: up to 35 days.
Push tokens: until you turn notifications off, sign out, or delete your account; tokens from phones that stop checking in are no longer used after 90 days.
Backups made by our hosting provider are overwritten on their regular schedule.

Deleting your account

You can delete your account in the app: Account → your profile → Delete account. Deleting your account removes your login, your family memberships, your notification settings, and your registered phones. If you own a family, you’ll first transfer ownership to another member or delete the family.

Messages, items, and photos you already shared remain with the family so their list stays intact, but they are no longer linked to your name; they appear as from “Deleted member.”

If you can’t use the app, email hello@groceryfolks.com from the address on your account and ask us to delete it. We will confirm and complete the request within 30 days. Instructions are also at https://groceryfolks.com/delete-account.

Signing out removes your family’s list, queued changes, and chat from that device.

Your choices and rights

You can view and edit your display name and family content in the app, turn AI product images and notifications on or off, leave a family, and delete your account at any time.

Depending on where you live, including California, Colorado, Connecticut, Virginia, and other U.S. states, you may have the right to know what personal information we hold about you, to get a copy, to correct it, and to delete it. To make a request, email hello@groceryfolks.com from the address on your account. We will verify your request by confirming it from that address, and we will not discriminate against you for exercising your rights. You may use an authorized agent, and if we decline a request you may appeal by replying to our decision.

Children and teens

You must be at least 13 years old to create an account. We do not knowingly collect personal information from children under 13. If we learn that we have, we delete the account and its information. If you believe a child under 13 has given us personal information, contact us at hello@groceryfolks.com and we will delete it.

If the app won’t let you create an account and you contact us, we may ask you to send a photo of an ID showing only your name and date of birth, with everything else covered. We use it only to check your age, don’t keep a copy, and delete your message once we’ve replied. If it shows you are under 13, we delete it and can’t create an account.

If you are between 13 and 17, you need a parent or guardian’s permission to use Grocery Folks. Teens get the same protections as everyone else: your family’s content is visible only to your family, and we never sell personal information or show ads. AI product images are available only to people 18 and older.

Security

We encrypt information in transit, keep photos in private storage that is only reachable through short-lived links, store invitation codes and passwords only in hashed form, and limit access to your family’s content to its members. No system is perfectly secure, so please use a strong, unique password and sign out of shared devices.

Where information is processed

Grocery Folks is operated from the United States, and our primary hosting is in the United States. Some service providers may process information in other countries with appropriate safeguards.

Changes to this policy

We will post any changes on this page and update the effective date. If a change materially affects how we use your information, we will tell you in the app or by email before it takes effect.

Contact us

Questions or requests: hello@groceryfolks.com.