Privacy policy

Who we are

Grocelio is operated by ZENDEV (EURL, RCS Nanterre 988 431 151, 4B, 38 rue de Silly, 92100 Boulogne-Billancourt, France), which is the data controller. Contact: nbelin89@gmail.com.

Data we collect

• Account: email address, name, password (stored hashed only) and language preference.
• Household: the households you create or join, and their members.
• Receipts: photos you take or upload, and the shop, date, items and prices extracted from them.
• Shopping list: items you and your household add.
• Knuspr (optional): if you connect a Knuspr account, its email and password (encrypted) to import your orders.
• Technical: a session cookie (website) or sign-in token (app) to keep you signed in, and server logs kept for security.

We do not use advertising, analytics or tracking, and we never sell your data.

Why we use it

Only to provide the service you signed up for (performance of a contract): signing you in, reading your receipts, showing spending and price history, sharing data within your household, and sending emails you request (password reset, household invitations).

Service providers

• Hetzner Online GmbH (Germany): hosting, database and receipt photo storage, within the EU.
• Anthropic (USA): receipt photos and item names are sent to its AI model to extract and categorise items. Anthropic does not use this data to train its models. Transfers rely on the EU Standard Contractual Clauses.
• Resend (USA): sends transactional emails to your address, under the EU Standard Contractual Clauses.
• Knuspr: only if you connect your account.

Sharing within a household

Receipts, expenses and the shopping list of a household are visible to all its members, together with each member's name and email address.

Retention and deletion

We keep your data as long as your account exists. You can delete your account at any time in the app (Profile → Delete account) or in the website settings. This permanently deletes your account and every household you are the only member of, including its receipts and photos. Households shared with others remain available to their other members. Backups are overwritten within 30 days.

Your rights

Under the GDPR you can access, correct, export or delete your data, and object to or restrict its processing. Write to nbelin89@gmail.com; we answer within one month. You can also lodge a complaint with the CNIL (www.cnil.fr).

Children

Grocelio is not intended for children under 15.

Changes

If this policy changes, we update this page and its date. Significant changes are announced by email.