Privacy Policy

GroceryList is provided by Kramer Concepts, LLC. This policy explains how information is handled in GroceryList for iPhone, iPad, Mac, and Apple Watch, its Safari import extensions, and the related website at getgrocerylist.com. It covers the existing app and the features introduced in version 4.0; availability depends on your app version and platform. No separate GroceryList account is required.

Information on your device

GroceryList stores the information you create or import, including shopping lists, groceries, amounts, units, categories, Favorites, shopping history, aisle orders, saved recipes, recipe ingredients and instructions, source links, photos, settings, and unfinished recipe drafts. The app uses this information to organize lists, scale ingredients, suggest usual items from your shopping history, and provide its other features. History-based suggestions are calculated from your saved shopping data on your device.

The app and its extensions use shared storage on your device so, for example, a recipe saved from Safari can appear in your recipe library. Widgets can read or update relevant list information through Apple’s app services. The Watch companion exchanges list information and pending shopping changes with your paired iPhone. Information displayed in widgets, notifications, or on your Watch may be visible to people who can see or use those surfaces; you control their visibility through Apple’s device settings.

Personal iCloud sync and backup

When you are signed in to an Apple Account and iCloud is available, GroceryList uses Apple CloudKit for personal library synchronization and backup/restore. This can include lists, saved recipes and recipe details, Favorites, shopping history, aisle orders, categories and related settings, and attached recipe or product photos. Older app versions may offer backup and restore rather than automatic synchronization. Offline changes are stored locally and may sync when connectivity returns.

This information is associated with your Apple Account in Apple’s private iCloud storage for the app. Personal sync does not automatically publish your library on the web or share it with your household. Kramer Concepts does not receive your Apple Account password. Apple provides the underlying account, storage, and transfer services.

Household shopping-list sharing

If you invite someone to a shopping list through Apple’s iCloud sharing controls, the selected list, its items and amounts, shopping changes, and any attached product photos are shared with participants who have access. Apple’s sharing service also manages participant identities and permissions. Participants can view the shared information and, when permitted, edit it. Household update summaries are derived from changes to that shared list.

Sharing a list does not share your separate saved-recipe library, Favorites, shopping history, or other lists. A list owner can manage participants and stop sharing using the app’s iCloud sharing controls. Revoking access cannot remove screenshots, exports, or other independent copies that participants already made.

Recipe websites and Safari imports

When you import a recipe link, GroceryList requests the selected webpage and may download its recipe image from the website or image host. Those services receive normal network request information, such as your IP address, and process requests under their own policies. Opening an original recipe link also takes you to the source website.

The Safari extension receives the page information you choose to share, such as its link and supported recipe details. GroceryList extracts available structured recipe information and presents ingredients for review before saving. The selected recipe is stored in your library and may sync through your personal iCloud account. Importing a recipe does not by itself publish it to getgrocerylist.com.

Photos and camera access

You may choose a recipe or product photo through Apple’s photo picker or file-selection controls. On supported iPhone and iPad screens, you may also choose to take a product photo; camera permission is requested when you use that option. Photos selected for the app are converted to resized JPEG copies without retaining the original location and capture metadata.

Photos are stored locally and may be transferred through iCloud with the library or shared list they belong to. The current app does not upload recipe photos to our website. Removing a photo from an item or recipe removes its association there; cached image copies or backups may remain. You can manage camera permission and photo access in your device’s settings.

Website and earlier test links

The current app does not publish recipes or recipe PDFs, and the website no longer accepts new recipe publications. Earlier test versions could upload a selected recipe snapshot, generated PDF, and optional photo. Those unlisted links expire 3 days after creation, after which the hosted recipe and files are no longer accessible through the link. Recipients may retain independent copies they already saved. Removing the original recipe or app does not remove those copies.

Cloudflare hosts the website and any retained test-link records and files. It processes normal network request information, including IP addresses, to deliver and protect the service. Earlier publishing requests also used temporary daily hashes of network addresses for spam quotas. No advertising trackers or Firebase analytics are embedded in these website pages. External recipe websites and the App Store handle visits under their own policies.

Community catalog contributions

GroceryList can improve its shared grocery catalog using category corrections contributed by users. When contribution is enabled and you correct or save an eligible grocery item, its name, category, and unit may be submitted to the app’s public CloudKit database. A one-way hash based on your iCloud user record and the normalized item name helps avoid duplicate votes. CloudKit also associates contributions with an app-specific account identifier, which the app uses to count distinct contributors. These are not your Apple Account email address or password. Other users may receive an item name, category, and unit after enough distinct accounts contribute and a category has sufficient support. Product photos are excluded from these contributions.

Do not include personal or sensitive information in item names you contribute. You can turn off sharing of category corrections in GroceryList’s settings. Doing so clears pending contributions on that device but may not remove contributions already submitted. Contact support to request review of an existing contribution.

Analytics and diagnostics

We use Google Analytics for Firebase to understand usage and improve GroceryList on iPhone, iPad, and Mac. Information may include app opens and sessions, screen and feature interactions, action outcomes, whether Plus is available, aggregate counts such as saved recipes or lists, app version, platform, operating system, device model, language, approximate geographic region, and an app-instance identifier. These measurements help us understand feature adoption and reliability. Safari import actions may be recorded locally and reported when you next open the main app.

Our custom feature events exclude grocery and recipe names, list names, recipe URLs and instructions, photos, and other private library content. Aggregate counts describe how features are used without sending the contents of your lists or recipes. Purchase information is handled separately as described below.

We also use Firebase Crashlytics in supported app builds for crash reports and diagnostics. Reports may include app, device, and operating-system information, crash details, and technical identifiers needed to diagnose a failure. Analytics and crash information is processed by Google. See Firebase’s privacy and security information and Google’s privacy policy.

GroceryList Plus, earlier Remove Ads purchases, and purchase reporting

GroceryList Plus is an optional one-time, non-consumable purchase through Apple’s App Store. It unlocks additional features and removes advertising from the iPhone and iPad app. Eligible owners of the earlier Remove Ads purchase receive the expanded Plus entitlement. Restore Purchases uses the eligible purchase associated with the same Apple Account.

Apple processes payment and your billing information. GroceryList uses StoreKit transaction and entitlement information to check ownership, restore access, and respond to refunds or revocations. It stores purchase-access status and identifiers needed to avoid duplicate purchase reporting. Kramer Concepts does not receive your payment-card details.

For purchase analytics, the app records purchase, restore, cancellation, failure, and revocation outcomes. Eligible verified production purchases are also reported to Firebase using StoreKit transaction information for revenue measurement; this may include product and transaction identifiers, purchase timing, price, and currency. Restoring an existing purchase is not intentionally reported by our custom reporting as a new sale. Apple separately provides sales, refund, and financial reports to the developer.

Purchasing Plus or Remove Ads does not turn off Firebase analytics or diagnostics, iCloud features, community contributions, or retained records from earlier test links, and does not erase information previously processed by service providers.

Advertising and tracking choices

The free iPhone and iPad app may display ads through AppLovin MAX and participating services, including Google. Ads can appear as banners or, in older versions, native inline placements. The native Mac app does not display these advertising placements.

Depending on your location, consent choices, and Apple tracking permission, ad providers may process device and app information, IP address and approximate location derived from it, advertising or device identifiers, ad views and clicks, interactions, and technical diagnostics such as crashes or performance information. Providers use this information to deliver, measure, secure, and improve advertising. Where permitted by your choices and applicable requirements, they may combine it with information from other companies’ apps or websites for personalized advertising or measurement.

Where required, GroceryList presents advertising privacy choices and may request permission to track activity across other companies’ apps and websites. You can decline or change tracking permission in device settings and review available advertising privacy choices in the app. Declining tracking does not necessarily remove contextual ads or all ad measurement. These choices do not turn off Firebase Analytics or Crashlytics. See AppLovin’s privacy policy and Google’s advertising privacy information.

Retention, deletion, and your choices

App data is retained locally to provide the features you use. You can edit or delete lists, recipes, photos, Favorites, and other supported content in the app. Synced changes depend on connectivity and iCloud availability. Removing the app does not necessarily remove information already stored in iCloud, backups, shared lists, earlier test-link records, or independent recipient copies. Manage app data and backups through Apple’s settings, and manage household invitations through iCloud sharing. Earlier test links become inaccessible 3 days after creation.

Hosted recipe links provide access for 3 days after creation. Expired or disabled links may retain stored content and limited security metadata, but their recipe content and downloads are no longer publicly accessible. Analytics, diagnostics, advertising records, and provider backups may be retained according to the relevant service’s settings, purposes, and policies; deleting local app content does not automatically erase those records.

You can contact us to request access, correction, or deletion of information we control, or help with an earlier test link. Identify the information or link involved, but do not send your Apple password or link-management secret. We may need to verify that a request concerns your information. We cannot directly retrieve your personal iCloud library through your Apple Account; Apple provides controls for that storage.

Other service providers and sale of information

We use Apple for App Store purchases, iCloud, device backups, Watch connectivity, widgets, and system sharing services; Google for the analytics and diagnostics described above; Cloudflare for website and retained test-link hosting; and advertising providers where ads are displayed. These providers may process information on infrastructure outside your country. Apple’s services are governed by Apple’s privacy policy, and Cloudflare describes its processing in Cloudflare’s privacy policy.

Kramer Concepts does not sell your private grocery lists or saved recipes. Advertising providers may process information as described in the advertising section under their own policies.

Support and children’s privacy

If you email us, we receive your email address and the information you include. We use it to respond and provide support, and retain it as needed for those purposes or legal obligations. You may request deletion of support correspondence.

GroceryList is not directed to children under 13. If you believe a child has provided personal information through support, a public contribution, or an earlier test recipe link, contact us so we can review and address it.

Changes and contact

We may update this policy as GroceryList’s features or privacy practices change. Updates will appear here with a revised effective date. For privacy questions or requests, email jason@kramerconceptsllc.com or visit GroceryList support.