Privacy policy
GrocerAid is a camera that sits at your pantry door. This policy explains what it records, what we keep and for how long, who can see it, and how to delete it.
Who we are
GrocerAid is made by [Company legal name], [mailing address] ("we" or "us"). Questions about this policy go to support@groceraid.com.
What we collect
Your account
Your name, email address and password. We store your password only as a scrypt hash, a scrambled form that can't be turned back into the password.
Your household
The items you track, your pantry log, how much GrocerAid estimates is left of each item and what you tell it about that, your shopping list, and the people you invite.
From the camera
- Recordings. When someone reaches into the pantry, the camera records a few seconds (at most about 12) and sends them to our servers to be read.
- Hand crops. From each reach, small square crops (112 pixels) of the hand and what it holds, and where the hand was in the frame.
- Entry pictures. A picture of each reach, shown with its entry in the app so you can check it.
- The camera's view. The first frame of its latest recording, taken before anyone reached in, used to calibrate and aim the camera.
- Camera status. Its software version, Wi‑Fi signal strength, battery level, whether it's on battery or plugged in, how often it woke up and for how long, and when it last checked in.
When you use the app or this site
Your IP address and your sign-in attempts, which we use to stop password guessing, and your session key, which we store only in scrambled form.
This website sets no cookies and runs no analytics. Its fonts come from Google Fonts, so Google sees your IP address when a page loads.
When you buy
Your name, email, shipping address and order details. Payments are processed by Stripe, which handles your card under its own privacy policy, including to prevent fraud. We never see or store your full card number.
When you contact us
What you write to us, and our replies.
How we use it
- To run GrocerAid: read each reach, log it, and show it to your household.
- To recognize your items better. The crops from your reaches, and your corrections, train the model for your household only. We don't use your recordings or crops to train models for other households.
- To measure accuracy. When you delete an entry, we keep a short note of what it said and when, without its picture, so we can count the camera's mistakes.
- To keep accounts secure, fill orders, answer support requests, and meet legal obligations.
Images of hands
Hand crops and entry pictures show part of the hand of whoever reaches into the pantry, and entry pictures may show more of them. We use these images only to recognize items. We don't use them to identify anyone, and we don't make face or hand geometry templates from them.
How long we keep it
| What | How long |
|---|---|
| Recordings | Deleted as soon as they're read. A new camera keeps them for up to 30 days while it learns its view. |
| Entry pictures | 7 days |
| Hand crops of reaches nobody taught or corrected | 7 days |
| Hand crops of reaches you taught or corrected | While your account is open |
| The camera's view | Replaced by each new recording |
| Notes about deleted entries | While your account is open |
| Your account and household | Until you delete your account |
| Orders | As long as tax and accounting law requires |
Links to stores
When you open your shopping list at an online store from GrocerAid, you go to that store's own site or app, under its own privacy policy.
Some of these links may be affiliate links. The store, or the affiliate network it works with, may set cookies or use similar technology to recognize that you came from GrocerAid, and we may earn a commission on what you buy, at no extra cost to you. We don't get access to your store account, and we don't collect your store account details.
Security
Data travels encrypted (HTTPS) between the camera, our servers and the app. Each household can see only its own pantry. Passwords and session keys are stored only in scrambled form, and sign-in stops after repeated wrong passwords.
Your choices and rights
- Delete any entry in the app. Its picture and recording are deleted with it.
- Delete your account in the app, under Profile › Account › Delete Account. If you're the last person in your household, the household and everything in it are deleted too, including the models trained on its recordings.
- Ask for a copy of your data, or ask us to correct it, by emailing support@groceraid.com from your account's address.
- Switch the camera off at any time. It records nothing while it's off.
Depending on where you live, laws such as the California Consumer Privacy Act may give you more rights. We honor these requests for everyone, and we won't treat you differently for making one.
People in your home
GrocerAid records whoever reaches into the pantry, guests included. Please let the people in your home know it's there.
Children
GrocerAid accounts are for adults. We don't knowingly collect information from children under 13. A child's hand can appear in a recording when they reach into the pantry, and it's handled like anyone else's.
Changes
When we change this policy, we update the date at the top. For important changes, we tell you in the app or by email before they take effect.
Contact
[Company legal name], [mailing address]. Email support@groceraid.com.