Beyond Grocery – Privacy Policy

Last updated: December 2025

1. Introduction

Beyond Grocery ("Company", "we", "our", or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, store, and disclose information when you use the Beyond Grocery mobile application (the "App"). By accessing or using the App, you agree to the terms of this Privacy Policy.

Geographic Availability: The App is only available in Canada. The App is not available for use outside of Canada, including but not limited to the United States, European Union (EU), European Economic Area (EEA), United Kingdom, or Switzerland. If you are located outside of Canada, please do not download or use the App.

2. Information We Collect

The App collects data necessary for its core functionality, including price tracking, budget management, and app improvements. We do not collect personally identifiable information such as names, email addresses, or phone numbers.

2.1 Data You Provide

The data you provide through the App includes:

  • Grocery items: Item names, prices, categories, and quantities you scan or manually enter

  • Budget information: Budget amounts, spending goals, and period settings you configure

  • Store information: Store names if visible within scanned labels or entered by you

  • Grocery lists: Shopping list items and preferences

  • Barcodes: Product UPC/barcode numbers from scanned items

Camera Images: When you scan a price tag:

  1. The image is processed on-device using Apple's Vision Framework

  2. Text and prices are extracted locally

  3. The original photo is immediately discarded and never leaves your device

  4. Only the extracted text (item name, price, barcode) is saved

2.2 Automatically Collected Information

The App automatically collects the following information:

Device Identifier: We collect your device's unique identifier (identifierForVendor) to:

  • Link your shopping sessions together

  • Perform app version checks

  • Provide analytics for app improvements

  • This identifier resets if you uninstall the app and cannot be used to track you across other apps or websites

Location Data: When you add items to your cart, the App may collect your device's precise location to:

  • Associate grocery prices with store locations

  • Improve price accuracy recommendations for nearby stores

  • Provide location-based insights

Location access is optional and can be disabled in your device settings at any time.

App Usage Data:

  • Shopping session timestamps (start and end times)

  • App version and build number

  • Platform information (iOS version)

We do not collect:

  • Names, email addresses, phone numbers, or account credentials

  • Payment or credit card information

  • Contacts or address book data

  • Data from other apps on your device

3. How We Use Your Information

We use the collected data for the following purposes:

App Functionality:

  • Track your grocery budget and spending

  • Generate and manage grocery lists

  • Process scanned price labels using on-device text recognition

  • Associate scanned items with store locations

Analytics and Improvements:

  • Understand app usage patterns to improve features

  • Identify and fix bugs or technical issues

  • Analyze price data to provide better recommendations

  • Monitor app performance and stability

Version Management:

  • Check if your app version is up to date

  • Notify you of important updates

  • Ensure compatibility with our services

We do not use your data for:

  • Advertising or marketing purposes

  • User profiling or behavioral targeting

  • Selling or renting to third parties

  • Cross-app or cross-site tracking

4. Data Storage and Sharing

4.1 Local Storage

Most of your data is stored locally on your device using Apple's SwiftData framework:

  • Grocery items and detailed purchase history

  • Budget configurations and settings

  • Grocery list items

  • App preferences and onboarding state

4.2 Server Storage (Supabase)

We transmit certain data to our secure servers (hosted on Supabase) for the following purposes:

Shopping Session Data - Transmitted after each shopping session:

  • Item names, prices, categories, and barcodes

  • Shopping session timestamps and totals

  • Budget limit and remaining budget (if configured)

  • Device identifier (for session linking)

  • Location coordinates (if location services enabled)

  • Store name (if provided)

Version Check Data - Transmitted when app launches:

  • Device identifier

  • App version and build number

  • Platform (iOS)

  • Timestamp of check

Purpose of Server Storage:

  • Aggregate anonymous price data to improve recommendations

  • Analyze shopping trends across stores and regions

  • Improve app features based on usage patterns

  • Monitor app version adoption and compatibility

Data Security: All data transmitted to our servers is:

  • Sent over encrypted HTTPS connections

  • Stored securely on Supabase infrastructure

  • Not linked to your personal identity (no names, emails, etc.)

  • Used only in aggregate for analytics and improvements

4.3 Data Retention

Local Data: Stored on your device indefinitely until you:

  • Delete individual items manually

  • Clear app data through device settings

  • Uninstall the App

Server Data:

  • Shopping session data: Retained indefinitely for price analytics

  • Version check logs: Retained for 90 days

  • Device identifier resets when you uninstall the app

Data Deletion: To delete all data:

  • Local: Uninstall the app or use in-app deletion features

  • Server: Contact support@beyondgrocery.ca to request deletion of server-stored data associated with your device

5. Third-Party Services

The App interacts with the following third-party services:

Our Backend Services

Supabase (https://supabase.com):

  • Hosts our backend database and APIs

  • Receives shopping session data, version check data

  • Subject to Supabase Privacy Policy: https://supabase.com/privacy

  • Data Location: Supabase servers may be located in various regions globally

Product Information Lookup APIs

When you scan a product barcode, the UPC code may be sent to external product databases to retrieve product information (name, brand, category):

These services:

  • Receive only the UPC barcode number (no personal information)

  • Have their own privacy policies governing data handling

  • Do not receive your location, device ID, or other personal data

Privacy policies:

Device-Level Services

The App uses Apple's built-in frameworks that operate entirely on your device:

  • Camera API: For capturing images of price labels

  • Vision Framework: For on-device text recognition (OCR)

  • Core Location: For optional location services

These Apple frameworks process data locally on your device and are governed by Apple's privacy policies.

6. Children's Privacy

The App is not intended for children under the age of 13. We do not knowingly collect personal information from children under 13. If we become aware that a child under 13 has provided data to us, we will delete it promptly. Parents or guardians who believe their child has provided information should contact us at support@beyondgrocery.ca.

7. Your Privacy Rights

Depending on your location, you may have the following rights regarding your data:

Access: Request information about what data is stored:

Deletion: Delete your data by:

  • Using in-app deletion features to remove individual items

  • Clearing all app data through device settings

  • Uninstalling the App (deletes local data)

  • Contacting support@beyondgrocery.ca to request deletion of server data

Correction: Edit or update grocery items, budgets, prices, and lists at any time through the App's interface

Portability: Request a copy of your server-stored data in a portable format by contacting support@beyondgrocery.ca

Opt-Out of Location: Disable location services for the App at any time through your device settings (Settings > Privacy > Location Services > Beyond Grocery)

Opt-Out of Server Sync: Currently, server synchronization occurs automatically after shopping sessions. To opt out, you must use the app offline (disable internet connection during shopping sessions).

To exercise these rights, contact us at support@beyondgrocery.ca. We will respond within 30 days.

8. Data Storage and Transfers

The App is only available in Canada. The App is not available outside of Canada.

Your data is stored as follows:

  • Local Device Storage: All data remains stored locally on your device in Canada

  • Supabase Servers: Shopping session data and version check data are transmitted to our backend servers hosted on Supabase infrastructure, which may be located in the United States or other regions

While the App is only available in Canada, data transmitted to Supabase servers may be stored and processed outside of Canada. We ensure appropriate safeguards are in place to protect your information in accordance with Canadian data protection laws and applicable privacy legislation.

9. Data Security

We implement reasonable technical and organizational measures to protect your data:

In Transit:

  • All data transmitted to our servers uses HTTPS encryption (TLS 1.2+)

  • No unencrypted transmission of sensitive data

At Rest:

  • Local data encrypted using iOS device encryption

  • Server data protected by Supabase security measures

  • Access controls limit who can access server data

Access Controls:

  • Only authorized personnel can access server data

  • Access is logged and monitored

  • Principle of least privilege applied

However, no method of transmission or storage is 100% secure. While we strive to protect your data, we cannot guarantee absolute security.

10. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. When material changes are made:

  • The updated version will be posted in the App and at https://beyondgrocery.ca

  • The "Last updated" date will be revised

  • For significant changes, we may provide in-app notifications

  • Continued use of the App after changes constitutes acceptance of the updated policy

We encourage you to review this Privacy Policy periodically at https://beyondgrocery.ca/privacy.

11. Geographic Availability

The App is only available in Canada. The App is not directed to, nor does it intentionally target or serve, individuals located outside of Canada.

If you are located outside of Canada:

  • You should not download, install, or use the App

  • The App is not designed or intended for use in your region

  • We do not knowingly collect or process data from individuals outside of Canada

  • International privacy regulations (such as GDPR, CCPA, etc.) do not apply to your use of the App, as the App is not offered in your region

If you have accessed the App from outside Canada, please uninstall it immediately and contact support@beyondgrocery.ca to request deletion of any data that may have been collected.

12. Governing Law

This Privacy Policy is governed by the laws of the Province of Ontario and the federal laws of Canada applicable therein, without regard to conflict of law principles.

13. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or your privacy rights, please contact us at:

Email: support@beyondgrocery.ca Website: https://beyondgrocery.ca

We will respond to all legitimate privacy inquiries within 30 days.

Last Reviewed: December 2025 Version: 1.1 (Updated to reflect server data collection)