Privacy Policy

Last updated: October 9, 2026

1. Introduction

Grosure LLC ("we," "us," or "our") operates the Grosure mobile application and website (collectively, the "Service"). This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our Service.

By using Grosure, you agree to the collection and use of information in accordance with this policy. If you do not agree, please do not use our Service.

2. Information We Collect

Account Information

When you create an account, we collect:

• Email address, and whether it has been verified
• Display name (optional)
• Profile avatar (optional)
• Circle @handle (optional), and the handles you previously used

If you choose to sign in with Apple or Google, we receive the account details that provider shares with us with your permission (such as your name and email address).

Profile Preferences

To personalize your experience, we collect the preferences you enter in the app:

• Dietary restrictions and food allergies
• Cuisine preferences
• Measurement system preference (metric or imperial)
• Timezone
• Notification preferences

Region

Each time you open the app, we store your device's region setting as a two-letter country code (for example, "US"). It comes from your device's language and region settings, not from GPS or your IP address, and we use it to tailor seasonal and regional suggestions.

Learned Preferences

When you chat with Olive, our AI assistant, Grosure remembers details you mention so it does not have to ask again. These may include:

• Foods and cuisines you like or dislike
• Dietary needs and allergies you mention
• Kitchen equipment you have or lack, your cooking skill level, and your household size
• Cooking habits, such as spice tolerance, budget, how much time you have on weeknights, meal-prep style, busy days and cooking days, how often you shop, cooking goals, and food traditions
• Your first name, your preferred measurement system, and a general location (such as a city or region) if you tell Olive about them

Household Notes

If you tell Olive about the people you cook for, we store their role (for example, partner, child, or roommate) and a short note about their food needs (for example, "vegetarian" or "allergic to shellfish"). We do not ask for their names. Household notes can include allergy and dietary information, so please share only what you are comfortable with.

Kitchen Data

As part of the core functionality of Grosure, we collect and store:

• Pantry items (names, quantities, expiration dates, categories)
• Recipes (saved, favorited, imported, and AI-generated)
• Shopping lists and items
• Meal plans and schedules, including weekly planning settings such as your grocery day and reminder time

Chat Conversations

Your conversations with Olive are stored to provide personalized recommendations and maintain conversation context.

Photos

If you use our scanning features, photos you take or choose (such as grocery receipts, pantry photos, or recipe cards) are sent to OpenAI for analysis. We process photos in memory to extract the relevant data and do not store them on our servers after analysis.

Voice and Speech

If you use voice input, your speech is processed entirely on your device using your operating system's speech recognition framework (Apple's Speech Recognition on iOS, Google's speech services on Android). Only the recognized text is transmitted to our servers and to OpenAI for AI processing. We do not record, store, or transmit your voice audio.

Circle and Sharing

If you use Circle or share recipes, we collect:

• Your Circle connections and their status (invited, accepted, or blocked)
• Recipes you share, as a copy of the recipe at the time you shared it, together with your display name
• Email addresses you enter to share a recipe directly. These are shown only to you; if an address belongs to a Grosure account, that person receives the recipe in the app
• When a shared recipe is opened or saved, and the display names of people who save it, which are shown to you as the sender

Being in someone's Circle does not give them access to your pantry, recipes, meal plans, or other data. They only see what you choose to share with them.

Notifications and Devices

If you allow notifications, we store your device's push notification token, platform, app version, device model, language, and timezone so we can deliver notifications, along with an in-app history of the notifications we have sent you.

Purchases

If you subscribe to Grosure Pro, Apple or Google processes your payment. We receive your subscription status and purchase history through RevenueCat. We do not receive your card or other payment details.

Usage and Funnel Analytics

We automatically collect:

• Counts and dates of key actions in the app, such as completing sign-up, saving your first recipe, building your first meal plan, sharing a recipe, and opening the app
• Feature usage counts, such as how many chat messages, photo scans, and meal plans you have used, which also enforce plan limits
• Device information (device type, operating system, and app version)

This information is stored with your account on our own servers and is used to understand, in aggregate, how people use Grosure and where they get stuck.

[PLACEHOLDER: analytics vendor sentence, pending the analytics vendor decision. Do not publish until replaced.]

3. How We Use Your Information

We use the information we collect to:

• Provide, maintain, and improve the Service
• Personalize your experience, including AI-powered recommendations
• Generate meal plans, recipes, and shopping lists tailored to your preferences and household
• Let you share recipes and connect with people in your Circle
• Send you notifications about expiring pantry items, scheduled meal plans, and other relevant updates (with your consent)
• Send account emails, such as email verification and password reset messages
• Manage your subscription and plan limits
• Analyze usage patterns to improve app features and performance
• Respond to your inquiries and support requests

4. Third-Party Service Providers

We use the following service providers (processors) to operate Grosure. They process your information on our behalf to provide their service to us:

Supabase

Handles user authentication and identity management, including your email address, password sign-in, and sign-in with Apple or Google. See Supabase's Privacy Policy.

MongoDB Atlas, hosted on Amazon Web Services (AWS)

Provides cloud database hosting for your account, preferences, learned preferences, household notes, kitchen data, chat conversations, Circle and sharing data, notification data, and usage data. MongoDB Atlas runs on AWS infrastructure. See MongoDB's Privacy Policy.

Amazon Web Services (AWS)

Provides cloud infrastructure for hosting our backend services and this website. See AWS Privacy Notice.

OpenAI

Powers our AI features, including Olive chat, recipe generation, photo analysis, and meal planning. Your chat messages and the photos you scan are sent to OpenAI for processing, together with the context needed to answer you, such as your preferences, learned preferences, household notes, region, and relevant pantry and recipe data. Per OpenAI's API data usage policies, data sent through the API is not used to train OpenAI's models. See OpenAI's Privacy Policy.

RevenueCat

Manages in-app subscriptions purchased through the Apple App Store or Google Play. RevenueCat receives your Grosure account identifier and your purchase and subscription history. See RevenueCat's Privacy Policy.

Firebase Cloud Messaging (Google)

Delivers push notifications to your device. Firebase Cloud Messaging receives your device's push notification token and the content of each notification we send you. See Firebase Privacy and Security.

Unsplash

Provides stock photos for recipes that do not have their own image. Our servers send the recipe title to Unsplash as a search term. Your device then loads the photo directly from Unsplash, so Unsplash receives your IP address and standard browser or device information. See Unsplash's Privacy Policy.

Resend

Delivers account emails, such as email verification and password reset messages. Resend receives your email address and the content of those emails. See Resend's Privacy Policy.

Apple and Google Sign-In

If you choose to sign in with Apple or Google, that provider authenticates you and shares your account details with us as described above. Their own privacy policies apply to that sign-in. See Apple's Privacy Policy and Google's Privacy Policy.

5. Mobile App Permissions

The Grosure mobile app requests the following device permissions, only when needed for a specific feature:

• Camera: To scan and detect pantry items, recipes, and receipts from photos.
• Photo Library: To select existing images for analysis.
• Microphone: To capture voice input for hands-free interaction.
• Speech Recognition: To convert your voice input into text on-device.
• Notifications: To remind you about expiring items and scheduled meals (with your consent).

You can revoke any of these permissions at any time in your device settings.

6. Tracking and Advertising

Grosure does not track you across other companies' apps or websites. We do not use Apple's Advertising Identifier (IDFA) or any equivalent advertising identifier on Android. We do not display third-party advertisements within the app, and we do not share your personal information with advertising networks or data brokers.

7. Data Storage and Security

We take reasonable measures to protect your information:

• All data is transmitted using HTTPS encryption
• Your data is stored on secure, managed cloud infrastructure
• Access to user data is restricted to essential operations only
• We do not sell your personal information to third parties

While we strive to protect your data, no method of transmission over the internet is 100% secure. We cannot guarantee absolute security.

8. Your Rights

You have the right to:

• Access your data: View the data associated with your account within the app
• Delete your account: Delete your account at any time in the app under Settings. Your account and its core data are deleted immediately (see Data Retention below for exactly what is removed)
• Export your data: Request a copy of your data by contacting us
• Opt out of marketing: Manage notification preferences in your app settings

Residents of the European Economic Area, United Kingdom, and Switzerland (GDPR)

If you are located in the EEA, UK, or Switzerland, you have additional rights under the General Data Protection Regulation, including the rights to: access your personal data; rectify inaccurate data; request erasure; restrict or object to processing; data portability; and to lodge a complaint with your local supervisory authority. The legal bases on which we process your data are performance of a contract (to provide the Service), your consent (for optional features such as notifications), and our legitimate interests (to maintain and improve the Service).

Residents of California (CCPA / CPRA)

If you are a California resident, you have the right to: know what personal information we collect, use, and disclose about you; request deletion of your personal information; correct inaccurate personal information; and opt out of any sale or sharing of your personal information. We do not sell or share your personal information for cross-context behavioral advertising. We do not offer financial incentives in exchange for personal information, and we will not discriminate against you for exercising any of your privacy rights.

To exercise any of these rights, contact us at support@grosure.cc. We will respond within the timeframes required by applicable law.

9. Data Retention

• Active accounts: Your data is retained for as long as your account is active
• Deleted accounts: When you delete your account in the app, we immediately delete your sign-in account and your profile, preferences, learned preferences, household notes, pantry, recipes, shopping lists, meal plans, chat conversations, and usage records from our live systems. Copies held in our backups are deleted within [PLACEHOLDER: N] days
• Data not yet removed automatically: Account deletion does not currently remove the following, which you can ask us to delete by contacting support@grosure.cc:
  • Recipe share links you created, including the email addresses you shared them with. Links can still be opened until they expire, up to 30 days after you shared them
  • Your display name on recipes you saved from other people's shares, which remains visible to the person who shared
  • Your Circle connections
  • Your in-app notification history and device push notification tokens
  • Your subscription record held by RevenueCat
• Shared recipes: Copies of recipes that other people saved from your shares are part of their accounts and are not removed when you delete yours
• Photos: Photos you scan are not stored on our servers after analysis
• Legal obligations: Some data may be retained longer if required by law

10. Children's Privacy

Grosure is not intended for use by children under the age of 13. We do not knowingly collect personal information from children under 13. If we become aware that we have collected data from a child under 13, we will take steps to delete it promptly.

11. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of significant changes by posting the updated policy on this page and updating the "Last updated" date. Your continued use of the Service after changes are posted constitutes acceptance of the revised policy.

12. Contact Us

If you have questions or concerns about this Privacy Policy, please contact us:

• Email: support@grosure.cc
• Website: www.grosure.cc/contact