Your data at a glance
The short version of our privacy policy. The full policy has the details.
In short
- No ads. No ad trackers, and no advertising ID.
- Usage statistics are off unless you switch them on.
- Your location is used only while a feature that needs it is open, never in the background. Our server gets only the area you are in, about 1 km across, never your exact position.
- Captions you import and photos of labels and recipe lists are read on your phone. The photos are never uploaded.
- Photos you publish are saved as new pictures, without their location or camera details.
- Your sign-in is kept in your phone's secure storage.
- The app and our website talk to our servers only over encrypted connections (HTTPS).
- You can delete your account in the app or on our website. Prices you scanned and products you added stay, but are no longer linked to you.
- You can download a copy of what our servers hold about you.
What we collect
| What | Why | Who else gets it | How long | Your control |
|---|---|---|---|---|
| Email and password | To sign you in and send you codes | Supabase (our host) and Resend (sends the codes). Have I Been Pwned gets 5 characters of a scrambled password, to check it has not leaked | Until you delete your account | Reset your password, or delete your account |
| Apple or Google sign-in: a user ID, your email, and from Google your name and photo address | To sign you in without a password | Supabase (our host). Apple or Google confirm it's you | Until you delete your account | Delete your account, or remove KleptoCook in your Apple or Google account |
| Your profile: username, bio, photo, streak, points | To show who posted, and for the leaderboards | Other signed-in users | Until you delete your account | Edit it, or leave the leaderboards in Settings |
| Recipes you publish, comments and ratings | To share them | Other signed-in users | Until you remove them. Recipe text stays, taken down, if you delete your account | Unpublish, delete comments, clear ratings |
| Prices and stock you scan, with the shop and time | Shared prices, and KleptoPoints | Other users see typical prices per shop, never who added them | Kept, no longer linked to you once you delete your account | Delete your account |
| Products and prices you save with Browse items | To price shopping lists nobody has scanned yet | Other users see the price, never who added it. The shop's own website sees your visit | Prices: until you delete your account. Products stay, no longer linked to you | Delete your account |
| Your location | To find shops and prices near you | Our server, only the area you are in, about 1 km across. Apple or Google draw the map | Not kept with your account | Your phone's location setting |
| Captions and text you share or paste to import | To read the recipe | Nobody: read on your phone. Our server gets a scrambled form to count your imports | The scrambled form, until the next night | Don't import |
| The recipe and label readers | To read recipes and nutrition labels on your phone | Hugging Face, which sees your phone's IP address | We keep nothing. The files stay on your phone | Delete the app |
| Usage statistics, if you switch them on | To learn which parts of the app are used | PostHog, in the EU | At PostHog for at least a year, unless you ask us to delete them | The switch in Settings, off at first |
| Notification token | To send you notifications | Expo, then Apple or Google | Until you sign out or delete your account | Your phone's notification setting |
| Scrambled device and network IDs | To stop points being farmed | Nobody | 30 days after they were last seen | |
| Website sign-ups | The emails you asked for | Resend, and Google Play for Android testers | Until you leave the list | The link in every email |
| Server logs: IP address and request times | To run and protect the service | Supabase | Up to 7 days |