Privacy Policy

Introduction

Flocery ("we," "our," or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, and share information about you when you use our grocery shopping application.

Information We Collect

Account Information

When you create an account, we collect your email address and name to personalize your experience and enable household sharing features. You may sign in with an email + password, with Google, or with Sign in with Apple.

If you use Sign in with Apple, Apple sends us your name and email address on your first sign-in only. Apple gives you the option to share your real email or hide it behind a private-relay proxy (a @privaterelay.appleid.com address). If you choose the relay option, we only ever see the proxy address, and Apple forwards our transactional messages to your real inbox. You can change or revoke this at any time from your Apple ID settings.

Shopping Data

We store your shopping lists, frequently purchased items, and store preferences to provide personalized recommendations and improve your shopping experience.

Scanned Content

When you use our scanning features, images are sent to our AI vision processor to extract relevant information:

• Recipe and aisle-sign / store-directory scans: the source image is used only to extract text and structure, then discarded from our storage. The extracted data (aisles, ingredients) is what we keep.
• Receipt scans: the source image is retained alongside the extracted receipt data so you can re-open the receipt from your history and so we can re-parse if the extraction was imperfect. You can delete a receipt (and its image) at any time from the receipt detail screen.

How We Use Your Information

• Provide and improve our grocery shopping services
• Organize your shopping lists by store aisle
• Match your items to weekly deals and sales
• Enable household sharing and collaboration
• Send notifications about deals on items you frequently buy
• Analyze usage patterns to improve the app

Data Sharing

We do not sell your personal information. We may share data with:

• Service providers: Companies that help us operate our services (hosting, analytics, payment processing)
• Household members: Users you invite to share lists
• Legal requirements: When required by law or to protect our rights

Data Security

We use industry-standard security measures to protect your data, including encryption in transit and at rest. Your account is protected by secure authentication through trusted providers.

Sub-Processors

We use the following third-party services (“sub-processors”) to operate Flocery. Each handles a specific slice of your data under their own privacy and security commitments.

• Vercel— web and API hosting, CDN, logs. Processes request data including IP addresses.
• Neon— managed PostgreSQL hosting our primary database. Stores your account, lists, items, and household data.
• Stripe— payment processing for Pro subscriptions on the web. Stores billing information; we never see your full card number.
• Apple— in-app subscription processing for iOS via StoreKit, Sign in with Apple (including private-relay email forwarding when you choose to hide your address), and push notifications via Apple Push Notification service (APNs).
• Resend— transactional email delivery. Receives your email address and the contents of messages we send you: address verification, password resets, and household invitations. It is not used for marketing, and we do not send it your lists or shopping data.
• RevenueCat— subscription and entitlement management for iOS in-app purchases. Receives your Flocery account identifier and the purchase and renewal status Apple reports for your subscription. It does not receive your name, email address, lists, or any other content.
• Anthropic— AI vision and text understanding (item name resolution, recipe parsing, aisle and directory scans). Item text, recipe text, and scan images may be sent for processing; we do not send your account identifiers.
• Google— OAuth sign-in (for users who choose that path) and Places API (nearby-store search and address resolution).
• Expo (EAS)— mobile-app build service and push-notification delivery infrastructure for the iOS and web app.
• Discord— internal error-reporting and admin-alert webhooks. Non-fatal error traces from the app and account signup notifications may be sent to a private Discord channel visible only to Flocery operations. No third-party access.
• Upstash— rate-limiting state, used to protect public endpoints from abuse. Stores hashed IPs with short TTLs only.

We do not sell your data, and we do not share it with sub-processors beyond what is necessary to provide the feature you are using.

Data Retention

• Account data (your user row, household membership, lists, items, recipes): retained while your account is active. Deleted on account deletion viaDELETE /api/user/deleteor by emailing support@flocery.com.
• Completed shopping lists: auto-archive 48 hours after every item is checked off. You can still access archived lists; nothing is auto-deleted on your behalf.
• Public share activity (view counts, hashed IPs of share viewers): retained for 90 days, then purged.
• Billing records: retained for the period required by tax and financial regulation, typically 7 years, via Stripe.
• Operational logs(request logs at Vercel, error traces, rate-limit counters): retained per Vercel and Upstash defaults — generally less than 30 days.

Your Rights

You have the right to:

• Accessyour personal data — download a JSON export via GET /api/user/export while signed in, or from the Privacy section of Settings on mobile.
• Correctinaccurate data — from Settings on either web or mobile.
• Delete your account and associated data via DELETE /api/user/delete or by emailing support@flocery.com.
• Export your shopping data in the same JSON bundle as access.
• Opt out of marketing communications.
• Revoke third-party sign-in— if you signed in with Apple, you can revoke Flocery's access at any time from Apple ID Settings → Sign in with Apple → Flocery. Revoking your Apple sign-in does not delete your Flocery account; use the deletion path above for that.

Contact Us

If you have questions about this Privacy Policy, please contact us at support@flocery.com