01Who we are
GroceryX is an app that reads your paper grocery receipts line by line and builds a price history for each product across stores and over time. This policy explains what personal data the app and this website handle, why, and what control you have.
The controller of this data is CodedInn Intl OÜ, an Estonian private limited company (registry code 14391257), Paepargi tn 47-9, Lasnamäe district, Tallinn, Harju county, 11417, Estonia. You can reach us through the contact form on the Support page.
02What we collect
Account data: your email address, name, a hashed password (if you use one), and the identifiers Google or Apple give us when you sign in with them. We also store your language, country and time zone.
Receipt data: the photograph of each receipt you scan, the text read from it (store name and address, date, every line with its price, discount and total), and the corrections you make while verifying it.
Apple Pay payments (iOS, optional): if you set up the Shortcuts automation, we receive the amount, merchant name, card label and time of a payment.
Support messages: the text you send and your account email.
Today GroceryX shows no advertising, does not sell personal data, and does not track you across other apps or websites. If this changes, for example if we add advertising or analytics tools, we will update this policy beforehand and ask for your consent where the law requires it.
03Receipt photos and AI processing
A receipt photograph is the most sensitive thing the app holds, as it can show a card fragment, a loyalty number or a name. We use it only to read the receipt and to let you check the result.
The app uploads the photo to our server, and our server sends it to an AI service to read the lines. The model is provided by Google; the request goes through OpenRouter, a gateway that handles it on the way and passes it to the model. The app itself never sends your photo to either of them.
The app asks for camera access only to photograph receipts. Photos are not added to your phone’s library by the app.
04Who receives what
The table shows who receives your data when a receipt is read.
| Recipient | What it receives | Why |
|---|---|---|
| GroceryX (our server) | Your account data, receipt photos, the text read from them, your corrections, Apple Pay payments (if enabled) and support messages. | To run the app, show your receipts and price history, and handle support. |
| OpenRouter (gateway) | The receipt photo when a receipt is read. | To pass the request to the AI model and return its answer. |
| Google (model provider) | The same data that OpenRouter passes on: the receipt photo. | To read the receipt and to match its lines to products. |
05Your consent to AI processing
Before your first scan the app asks once for your consent to AI processing of receipt photos. Without it the photo is not uploaded and not sent to anyone, and the camera stays closed. The consent is saved on your account, so the app does not ask again after you sign in again or on another device.
To withdraw your consent, use the contact form on the Support page. After that we stop sending your receipt photos to the AI service; scanning new receipts needs your consent again.
06What exactly is sent
The AI service gets a receipt photo from our server. Who receives it is in Who receives what; this table lists what request contains. The app never sends anything to the AI service itself.
“Not sent” refers to your account and device. The photo itself shows whatever is printed on the receipt, so we cannot promise it contains no personal details.
| Request | What the AI service receives | What it does not receive |
|---|---|---|
| Reading a receipt | The receipt photo exactly as the app uploaded it, and a fixed instruction to read it and return the lines. Everything printed on the receipt is in the photo: prices, totals, the store address, and sometimes a card fragment, a loyalty number or a name. | Your account data: email, name, user ID, interface language, country and time zone. Your other receipts. |
07Provider commitments
OpenRouter states in its privacy policy that it does not use the inputs and outputs of requests for model training, and that it does not keep image files longer than needed to route the request, except for abuse detection, security, billing or legal reasons.
09Location
The app reads your device location only when you open Deals near you, and only while the app is in use. We use it once to find stores within about 15 km, and we do not store it or write it to logs. If you decline, the same block is built from the stores on your own receipts. Location is never read at launch or in the background.
10International transfers
OpenRouter and Google may process data outside the European Union and the European Economic Area. Where this happens, we rely on the safeguards the law requires for such transfers.
11How long we keep data
Receipts: until you delete them. Deleting a receipt in the app is permanent and also removes its photographs from our storage.
Receipt photographs: we keep them on our server until you delete the receipt or your account. GroceryX is not local-first: the photo is stored with us after it is read, so that you can view and re-check the receipt. We do not control how long OpenRouter or Google keep what we send them.
Account: when you delete your account, it is disabled at once and kept for 30 days so it can be restored through support. After 30 days your account, receipts, photographs, price history, Apple Pay payments and support messages are erased permanently.
What remains: the log of corrections you made to receipt lines is kept without any link to you, to help us measure how well receipts are read. Product names in our shared catalogue do not belong to any user and are kept. Abandoned receipts that never got a purchase date are deleted automatically.
If you signed in with Apple, we ask Apple to unlink GroceryX from your Apple ID when you delete your account.
12Your rights
You can see and correct your data in the app, delete receipts, switch off price sharing and delete your account. For anything else, such as a copy of your data, objecting to processing, or restricting it, use the contact form on the Support page.
Where the GDPR or a similar law applies, you also have the right to access, rectify, erase and port your data, to object to processing, and to complain to a data protection authority. Ours is the Estonian Data Protection Inspectorate (Andmekaitse Inspektsioon, www.aki.ee); you may also complain in the EU country where you live. We process your data to provide the app you asked for, on the basis of your consent where required (for example location, and AI processing of your receipt photos), and on our legitimate interest in keeping the service secure and improving how receipts are read.
13Security and storage
Data is sent over encrypted connections and stored on our servers. Access is limited to people who need it to run the service. No system is perfectly secure, and we cannot promise absolute security.
14Children
GroceryX is not meant for children under 16. We do not knowingly collect their data. If you think a child has given us data, contact us and we will delete it.
15Changes to this policy
If we change how we handle data, we will update this page and the date above. For a material change we will also tell you in the app.
16Contact
Questions about this policy or your data: use the contact form on the Support page. To delete your account, see the Delete account page.