← Back to grosch.app

Privacy Policy

Last updated: May 2025

Introduction

Grosch ("we", "our", or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, store, and protect your data when you use our recipe management application.

Information We Collect

1. Authentication Data

We collect the following information when you sign in:

With Google:

  • Email address
  • Name (given name and family name)
  • Google profile picture URL
  • Google ID token
  • Authentication tokens

With Apple (iOS only):

  • Email address (which may be a private relay email address if you choose Apple's "Hide My Email" option)
  • Name (if provided)
  • Apple ID token
  • Authentication tokens

For all users, we generate and store a unique Support ID that we may ask you for if you request support through other channels (email, social media, etc.) to help identify your account.

2. Recipe Data

We collect and store:

  • Titles, ingredients, and tags for saved recipes
  • Recipe source URLs and domain info
  • Recipe images and image URLs
  • Creation timestamps
  • User association (who the recipe belongs to)

3. My List & Grocery Lists

We collect and store:

  • Your My List items and ingredient details
  • Grocery lists created from recipes (organized by recipe or by aisle)
  • Ingredient aisle categorizations
  • Any custom categorization overrides
  • Checked or unchecked status of list items
  • Recipes selected for generating a list

4. Preferences

We store:

  • Onboarding responses to help tailor recommendations
  • Custom ingredient categorizations

5. Technical Data

We automatically collect:

  • App interaction logs and events
  • Error logs through Sentry.io
  • Device and platform information
  • App version info
  • Device ID for syncing and support

How We Use Your Information

🛠️ Essential Operations

To make Grosch work as intended, we securely store and manage the following data:

  • Your saved recipes, ingredients, and grocery lists
  • Your preferences and categorizations (like how you group ingredients)
  • Your My List items and selected recipes
  • Your login status and account details (via Firebase)
  • A device ID to sync data across devices
  • Cached data to help the app function offline
  • URLs you’ve imported, so we can pull in the correct recipe

🍳 App Features

These features depend on the data we collect:

  • Save and organize recipes (with images, tags, and more)
  • Generate grocery lists grouped by aisle or by recipe
  • Customize ingredient categories and list items
  • Check off ingredients as you shop
  • Get recipe suggestions that match your saved preferences

🔧 Service Improvement

We may use technical and app usage data to:

  • Analyze performance and fix bugs
  • Improve ingredient parsing and recipe accuracy
  • Enhance overall user experience based on patterns and feedback

Data Storage and Security

Cloud Storage

We use:

  • Firebase Authentication for user management
  • Firebase Cloud Storage for recipe images
  • PostgreSQL database for structured data
  • Sentry.io for error tracking

Security Measures

  • Encrypted data transmission using HTTPS
  • Secure authentication token handling
  • Database access controls
  • Regular security updates
  • Monitoring and logging

Third-Party Services

Firebase Services

  • Firebase Authentication
  • Firebase Cloud Storage
  • Firebase Analytics
  • Firebase Cloud Functions

Other Services

  • Google Sign-In
  • Apple Sign-In (iOS only)
  • Google Cloud Platform
  • Sentry.io for error monitoring
  • App Store and Play Store services

Your Rights and Controls

You have the right to:

  • Access your personal data
  • Correct inaccurate data
  • Delete your account and data
  • Control app permissions
  • Opt-out of optional features

Data Deletion

You can delete your account and associated data through either of these methods:

  1. In-App Deletion:

    • Go to the Account menu
    • Select "Delete Account"
    • Confirm deletion when prompted

  2. Email Request:

    • Email privacy@grosch.app from the email account associated with your Grosch account
    • For Apple Sign-In users who use "Hide My Email": if you're using a private relay email (ending with @privaterelay.appleid.com), please include your Apple ID or other identifying information so we can verify your account ownership
    • Upon verification of your account ownership, we will process your deletion request

When your account is deleted, we will:

  • Delete your user profile
  • Remove your recipes and preferences
  • Delete associated images
  • Remove authentication data
  • Clear device associations

Children's Privacy

Our app is not intended for children under 13. We do not knowingly collect information from children under 13. If you believe a child has provided us with personal information, please contact us.

Updates to This Policy

We may update this Privacy Policy periodically. For material changes that affect your rights or how we use your data, we will:

  • Notify you via email
  • Show an in-app notification
  • Request renewed consent if required

Minor updates (like adding contact methods or clarifying existing practices) may be made without notification. The latest version will be available at https://grosch.app/privacy.

Continued use of the app after changes constitutes acceptance of the updated policy.

Data Retention

We retain your data for as long as your account is active or as needed to provide services. Data from deleted accounts is removed from our active systems but may remain in backups for up to 30 days.

Contact Us

For privacy-related inquiries:

  • For account deletion requests or data privacy concerns: privacy@grosch.app
  • For general questions and support:
    • Use the "Get Support" button in the Account menu
    • When contacting us through other channels (email, social media, etc.), we may ask for your Support ID to identify your account
    • Contact @grosch.app on Instagram

California Privacy Rights

Under the California Consumer Privacy Act (CCPA), California residents have specific rights regarding their personal information:

  1. Right to know what personal information is collected
  2. Right to know if personal information is disclosed or sold
  3. Right to say no to the sale of personal information
  4. Right to access their personal information
  5. Right to delete their personal information
  6. Right to equal service and price, even if they exercise their privacy rights

International Data Transfers

Your information may be transferred to and processed in Canada and the United States, where our servers and cloud services are located. By using Grosch, you consent to these transfers.

Compliance

This App complies with:

  • App Store Privacy Guidelines
  • Google Play Store Data Safety Requirements
  • California Consumer Privacy Act (CCPA)
  • General Data Protection Regulation (GDPR) principles