Privacy Policy
1. Introduction
Grosure LLC ("we," "us," or "our") operates the Grosure mobile application and website (collectively, the "Service"). This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our Service.
By using Grosure, you agree to the collection and use of information in accordance with this policy. If you do not agree, please do not use our Service.
2. Information We Collect
Account Information
When you create an account, we collect:
- Email address
- Display name (optional)
- Profile avatar (optional)
Profile Preferences
To personalize your experience, we may collect:
- Dietary restrictions and food allergies
- Cuisine preferences
- Measurement system preference (metric or imperial)
- Timezone
- Notification preferences
Kitchen Data
As part of the core functionality of Grosure, we collect and store:
- Pantry items (names, quantities, expiration dates, categories)
- Recipes (saved, favorited, and AI-generated)
- Shopping lists and items
- Meal plans and schedules
Chat Conversations
Your conversations with Olive, our AI assistant, are stored to provide personalized recommendations and maintain conversation context.
Images
If you use our image scanning feature, images you upload (such as grocery receipts, pantry photos, or recipe cards) are processed to extract relevant data and are not permanently stored after processing.
Voice and Speech
If you use voice input, your speech is processed entirely on your device using your operating system's speech recognition framework (Apple's Speech Recognition on iOS, Google's speech services on Android). Only the recognized text is transmitted to our servers and to OpenAI for AI processing. We do not record, store, or transmit your voice audio.
Usage Data
We automatically collect:
- App interaction data (features used, actions taken)
- Device information (device type, operating system version)
- App performance data
3. How We Use Your Information
We use the information we collect to:
- Provide, maintain, and improve the Service
- Personalize your experience, including AI-powered recommendations
- Generate meal plans, recipes, and shopping lists tailored to your preferences
- Send you notifications about expiring pantry items, scheduled meal plans, and other relevant updates (with your consent)
- Analyze usage patterns to improve app features and performance
- Respond to your inquiries and support requests
4. Third-Party Services
We use the following third-party services to operate Grosure:
OpenAI
Powers our AI features, including Olive chat, recipe generation, image analysis, and meal planning. Your chat messages and uploaded images are sent to OpenAI for processing. Per OpenAI's API data usage policies, data sent through the API is not used to train OpenAI's models. See OpenAI's Privacy Policy.
Supabase
Handles user authentication and identity management. See Supabase's Privacy Policy.
MongoDB Atlas
Provides cloud database hosting for your kitchen data. See MongoDB's Privacy Policy.
Amazon Web Services (AWS)
Provides cloud infrastructure for hosting our backend services. See AWS Privacy Notice.
5. Mobile App Permissions
The Grosure mobile app requests the following device permissions, only when needed for a specific feature:
- Camera: To scan and detect pantry items, recipes, and receipts from photos.
- Photo Library: To select existing images for analysis.
- Microphone: To capture voice input for hands-free interaction.
- Speech Recognition: To convert your voice input into text on-device.
- Notifications: To remind you about expiring items and scheduled meals (with your consent).
You can revoke any of these permissions at any time in your device settings.
6. Tracking and Advertising
Grosure does not track you across other companies' apps or websites. We do not use Apple's Advertising Identifier (IDFA) or any equivalent advertising identifier on Android. We do not display third-party advertisements within the app, and we do not share your personal information with advertising networks or data brokers.
7. Data Storage and Security
We take reasonable measures to protect your information:
- All data is transmitted using HTTPS encryption
- Your data is stored on secure, managed cloud infrastructure
- Access to user data is restricted to essential operations only
- We do not sell your personal information to third parties
While we strive to protect your data, no method of transmission over the internet is 100% secure. We cannot guarantee absolute security.
8. Your Rights
You have the right to:
- Access your data: View all data associated with your account within the app
- Delete your account: Request account deletion, which will remove your data within 60 days
- Export your data: Request a copy of your data by contacting us
- Opt out of marketing: Manage notification preferences in your app settings
Residents of the European Economic Area, United Kingdom, and Switzerland (GDPR)
If you are located in the EEA, UK, or Switzerland, you have additional rights under the General Data Protection Regulation, including the rights to: access your personal data; rectify inaccurate data; request erasure; restrict or object to processing; data portability; and to lodge a complaint with your local supervisory authority. The legal bases on which we process your data are performance of a contract (to provide the Service), your consent (for optional features such as notifications), and our legitimate interests (to maintain and improve the Service).
Residents of California (CCPA / CPRA)
If you are a California resident, you have the right to: know what personal information we collect, use, and disclose about you; request deletion of your personal information; correct inaccurate personal information; and opt out of any sale or sharing of your personal information. We do not sell or share your personal information for cross-context behavioral advertising. We do not offer financial incentives in exchange for personal information, and we will not discriminate against you for exercising any of your privacy rights.
To exercise any of these rights, contact us at support@grosure.cc. We will respond within the timeframes required by applicable law.
9. Data Retention
- Active accounts: Your data is retained for as long as your account is active
- Deleted accounts: Data is permanently deleted within 60 days of account deletion
- Legal obligations: Some data may be retained longer if required by law
10. Children's Privacy
Grosure is not intended for use by children under the age of 13. We do not knowingly collect personal information from children under 13. If we become aware that we have collected data from a child under 13, we will take steps to delete it promptly.
11. Changes to This Policy
We may update this Privacy Policy from time to time. We will notify you of significant changes by posting the updated policy on this page and updating the "Last updated" date. Your continued use of the Service after changes are posted constitutes acceptance of the revised policy.
12. Contact Us
If you have questions or concerns about this Privacy Policy, please contact us:
- Email: support@grosure.cc
- Website: www.grosure.cc/contact