Privacy Policy

Last updated: January 7, 2026

This Privacy Policy describes how Shoppy List App ("we", "our", or "us") collects, uses, and protects your personal information when you use our mobile and web application (the "App").

1. Information We Collect

1.1 Account Information

When you create an account, we collect:

• Email address (used for authentication)
• Password (hashed and stored securely)
• User ID (automatically generated)

1.2 Shopping Data

When you use the App, we collect and store:

• Shopping lists (names, dates created)
• Shopping items (names, categories, quantities, prices, notes, purchase status)
• Item categories and organization preferences
• Purchase dates and shelf life information
• List sharing information (if you share lists with other users)

1.3 Automatically Collected Information

The App may collect certain information automatically:

• Device information (device type, operating system)
• App usage data (features used, interaction patterns)
• Local storage data (cached product information, preferences)

1.4 Product Lookup Information

When you use the product auto-fill feature, we may:

• Send product names to our AI service (Groq) to estimate prices, categories, and shelf life
• Store product lookup results locally on your device for faster access
• Store price history locally on your device

2. How We Use Your Information

We use the information we collect to:

• Provide and maintain the App's functionality
• Authenticate your account and manage your profile
• Store and sync your shopping lists across your devices
• Enable list sharing with other users (when you choose to share)
• Provide product information and auto-fill features
• Improve our services and develop new features
• Respond to your support requests

3. Data Storage and Security

3.1 Data Storage

Your data is stored securely using:

• Supabase: Cloud database service that stores your account information and shopping data
• Vercel: Hosting service for the web application
• Local Storage: Some data (product cache, preferences) is stored locally on your device

3.2 Security Measures

We implement appropriate technical and organizational measures to protect your personal information, including:

• Encryption of data in transit (HTTPS)
• Secure password hashing
• Access controls and authentication
• Regular security assessments

However, no method of transmission over the internet or electronic storage is 100% secure. While we strive to protect your information, we cannot guarantee absolute security.

4. Third-Party Services

We use the following third-party services that may collect or process your information:

• Supabase: Database and authentication service. See their privacy policy at https://supabase.com/privacy
• Vercel: Web hosting service. See their privacy policy at https://vercel.com/legal/privacy-policy
• Groq AI: AI service used for product information lookup. See their privacy policy at https://groq.com/privacy

5. Data Sharing

We do not sell your personal information to third parties. We may share your information only in the following circumstances:

• With Your Consent: When you explicitly share a shopping list with another user
• Service Providers: With third-party services necessary to operate the App (Supabase, Vercel, Groq AI)
• Legal Requirements: When required by law or to protect our rights and safety

6. Your Rights

You have the following rights regarding your personal information:

• Access: Request a copy of your personal data
• Correction: Update or correct inaccurate information
• Deletion: Request deletion of your account and associated data
• Data Portability: Request your data in a structured format
• Opt-Out: Disable AI product lookup features in app settings

To exercise these rights, please contact us using the information provided below.

7. Children's Privacy

Our App is not intended for children under 13 years of age. We do not knowingly collect personal information from children under 13. If you believe we have collected information from a child under 13, please contact us immediately.

8. Data Retention

We retain your personal information for as long as your account is active or as needed to provide you services. If you delete your account, we will delete or anonymize your personal information, except where we are required to retain it for legal purposes.

9. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. We will notify you of any changes by posting the new Privacy Policy on this page and updating the "Last updated" date. You are advised to review this Privacy Policy periodically for any changes.

10. Contact Us

11. Your Consent

By using our App, you consent to our Privacy Policy and agree to its terms.