Effective date: September 20, 2026
Who we are
Grocerish is an Android shopping-list app provided by Creative Pixels in Canada. This policy applies to the app and its optional household-sharing and subscription features. Contact us at creative.pixelsjp@gmail.com for privacy questions or requests.
Information on your phone
Grocerish stores your shopping items, quantities, categories, favourites, notes, preferences, and a copy of your connected household’s list on your phone. Changes waiting to sync are also stored there so a lost connection does not discard them. Personal lists are kept separate from household lists. The app stores a session credential to reconnect your device securely and a cached subscription status to support temporary offline use.
New versions disable Android app backup and device-transfer backup for this data. Your device manufacturer or a backup you made separately may have its own behaviour. Clearing app storage or uninstalling removes the app’s local copy, but does not delete information already shared with the cloud.
Optional household sharing
When you create or join a household, Grocerish uses Supabase to create a pseudonymous account identifier and store your household name, display name, membership, invite code, shared shopping items, quantities, categories, favourites, notes, and selected reference photos. You do not need to provide an email address or password for this device account. This identifier can still be associated with the information you enter; it does not make that information fully anonymous.
Other members of the household can view and change shared information. Anyone who receives a valid invite code may be able to join, so share codes only with people you trust. Connecting to a household does not automatically publish your separate personal list. Disconnecting a phone stops its current connection but does not delete the household or revoke its existing server membership.
Our service also keeps change identifiers and deletion records to prevent duplicate uploads and deleted items reappearing. These records are used to operate the shared list, not for advertising.
Voice, photos, and QR codes
Voice entry uses your device’s speech-recognition service, which may process audio on the device or send it to its provider under that provider’s terms and settings. Grocerish receives the recognised text; it does not itself record or store audio. External assistant features depend on your device and assistant provider and may not be available on every phone or while locked.
You choose photos through Android’s picker. When attached to a shared item, a resized copy is uploaded to private household storage. Household members can access it; it is not intentionally made publicly browsable. QR invitations are handled using Google’s code-scanning service. You can decline these optional features and enter list items or invite codes manually.
Subscriptions
Google Play handles subscription checkout, payment details, renewals, and cancellation. Creative Pixels does not receive your full payment-card details. Grocerish uses purchase identifiers or tokens, product details, and subscription status to verify and restore access to Pro features. Where server verification is enabled, these details are processed by our backend and Google Play for that purpose. A household connection does not by itself grant another Google account a paid subscription.
Deleting app data or requesting account deletion does not cancel a Google Play subscription. Manage or cancel it in Google Play subscriptions.
Why information is used and who receives it
We use information to save and sync lists, connect household members, display reference photos, provide paid features, respond to support and deletion requests, and protect the service against errors and misuse. Supabase supplies cloud database, authentication, and file storage. Google supplies Play billing and, where selected, Android speech recognition, scanning, and assistant services. Hosting and network providers may process technical connection data, including IP addresses, request timestamps, and diagnostic logs.
Grocerish does not currently include third-party advertising or behavioural analytics SDKs. We do not sell personal information or use your list contents to target advertising. We may disclose information where reasonably necessary to comply with a legal obligation or protect users and the service. Service providers may process information outside your province or Canada, where different privacy laws may apply.
Security and retention
Connections to the cloud use HTTPS. Database and photo access rules restrict shared information to authorised household members. No system can guarantee absolute security; avoid storing passwords, financial details, or sensitive medical information in a shopping list.
Shared content remains until it is deleted or a verified deletion request is completed. A photo may remain while another favourite or item still uses it; unused uploaded files may remain until cleanup or a deletion request. Sync and deletion records may remain while a household exists to preserve consistent syncing. Technical logs and provider backups follow their operational retention schedules and may not disappear immediately after active data is removed. Information required for fraud prevention or legal obligations may be retained as necessary.
Your choices, access, and deletion
You can edit or remove items in the app and control optional device features through Android settings. To request deletion of your Grocerish device account and associated information, use Settings → Privacy & your data → Request account/data deletion, or follow the Grocerish account and data deletion instructions. You can also contact us to request access to or correction of information we hold.
We may need to verify that a request belongs to you and clarify whether it concerns your device account, particular content, or a whole household. We will not erase other household members’ information solely because one member asks to disconnect. Shared records may require removal of identifying details or an agreed household-deletion process. We aim to respond to verified requests within 30 days and will explain any necessary retention or delay.
Children
Grocerish is intended for adults managing household shopping and is not directed at children under 13. We do not knowingly seek personal information from children. If you believe a child has provided personal information through the app, contact us so we can review and address it.
Policy changes and contact
We may update this policy as the app changes. The effective date above identifies the current version. Material changes will be communicated through the app or another appropriate notice. For questions, access, correction, or deletion requests, email creative.pixelsjp@gmail.com.