Privacy policy

Updated 21 October 2026 · app version 1.0; website campaign measurement added

Together Grocery is operated by Dmytro Husiev. For support or privacy requests, contact dmytro.gusev@gmail.com.

Your lists and sharing

Guest lists and products are stored on your device. Signing in does not automatically upload guest lists. Choosing Save to account or Invite someone uploads that list’s title, products, quantities, notes and purchase status to Firebase. Joined lists are also stored there and cached on your device. A list’s participants can see and edit its contents and see participant names and roles. Participants do not see each other’s email addresses through the app.

Anyone with a valid invitation code can sign in and join the list until the code expires or its owner revokes it. Only share codes with intended participants. Avoid placing sensitive information in shopping notes. Archived cloud lists remain in your account until deleted.

Account and technical data

Google or Apple handles sign-in. Firebase Authentication processes your account identifier and the profile information provided by the sign-in service, such as your name and email address. The sign-in providers may also process phone information already associated with their accounts under their own settings. The app does not receive your Google or Apple password. Firebase stores account identifiers, memberships, invitations and changes to control access and synchronise lists.

The Firebase Authentication and Google Sign-In components also process technical information for operation, security and their own diagnostics and usage measurement. Depending on the component, this includes app and device identifiers, device and software details, sign-in interactions, other usage and diagnostic data, and IP addresses that can indicate an approximate location. Some provider information is associated with your account. The app does not request your phone number, contacts or GPS location. Provider data practices are described in Firebase privacy information and Google’s privacy policy. Apple sign-in is subject to Apple’s privacy policy.

Our shopping database and application functions are hosted in Europe in the Firebase project together-grocery-20261009. Authentication, diagnostics and other provider infrastructure may process information in other countries under the providers’ applicable safeguards.

Dictation and local recognition

The app’s item splitting and department grouping run on your device. Keyboard dictation is an iOS feature governed by your Apple settings; Together Grocery receives its text, does not record audio, and does not send it to an AI service. Text becomes cloud list content only when added to an account list.

Purposes and choices

We use account and shopping information to provide the service you request. We use access and technical records to maintain reliability and prevent misuse. Where applicable, these activities rely on performance of our service agreement and our legitimate interests in operating and protecting the service. We do not sell personal information or use it for advertising or tracking across other companies’ apps and websites. This version has no subscriptions, payment processing or separate advertising or product-analytics integration; the sign-in components’ technical processing described above still applies.

Website campaign measurement

Our promotional website counts campaign page loads and clicks on the App Store button using our existing Google Cloud infrastructure. Custom events contain only pre-defined campaign labels, such as publisher, language, creative, placement and event stage, together with the server event time. We do not add cookies, local storage, personal visitor or device IDs, fingerprinting, full referrers or IP-address hashes for this measurement. We do not join website events to shopping accounts, lists or individual installations. We respect browser Do Not Track and Global Privacy Control signals for these custom events.

Google Cloud also processes normal technical request metadata, which can include IP addresses, for website delivery, security and operational logs. Custom campaign events are retained for 30 days in the current Cloud Logging bucket and may be exported as aggregate totals for longer-term campaign comparison. Publicity results do not identify unique people and can be affected by bots, repeat visits and blocked events. Apple may provide separate, aggregated campaign download reports under its own privacy protections; a website click is not proof of installation. No advertising or attribution SDK has been added to the app.

Retention and deletion

Cloud information is kept while you use the account, until you delete the relevant content or request account deletion. In Settings → Delete account, confirm your identity to request deletion. Access is blocked while a background task removes your authentication record, memberships, invitations, owned lists and associated records. Owned lists, including shared lists, are deleted for everyone. Contributions in other people’s lists remain with author identifiers removed. Cleanup normally completes within minutes; failed tasks are retried.

Account data on the requesting device is removed. Other offline devices clear the account cache after reconnecting and detecting deletion. Guest lists stay on their devices. Service providers may retain operational, security or backup records according to their retention policies and legal obligations. We do not promise immediate deletion from provider backups. Removing the app alone does not delete a cloud account.

If Apple access cannot be revoked automatically, the app explains how to stop using Apple ID for Together Grocery in iPhone Settings. Contact support if you cannot access the account or deletion does not complete.

Your rights

You can use guest mode, copy your visible lists with Settings → Export all data, leave a shared list, delete owned lists, or request account deletion. Export copies information to your clipboard, so use care when pasting it elsewhere. Owners can remove participants and revoke invitations; this cannot recall copies another person has already exported.

Depending on your location, you may have rights to access, correct, erase, restrict or object to processing, and receive a portable copy. Contact the address above; we may need to verify account ownership. You may complain to your local data protection authority. Manage provider-specific privacy choices directly with Apple or Google.

Support and children

If you email support, we use your email and message to answer and resolve the request. Please do not send passwords or invitation codes. The service is intended for general shopping use and is not directed to children under 13. If you believe a child has provided personal information, contact us.

Changes

We will update this page when processing changes and provide an appropriate notice for material changes. The latest policy is linked in the app.