Privacy
Grocr compares grocery prices in Bermuda. This page says exactly what we collect, why, how long we keep it, and who else sees it. Where something might surprise you, it is called out rather than buried.
Who is responsible for your data
To complete before launch: the legal entity operating Grocr, its registered address, and a named contact for data protection. This is a required disclosure and cannot be filled in from the code.
In the meantime you can reach us at hello@grocr.fyi.
What we collect
- Your email address. If you create an account, we use it to send your one-tap sign-in link and any price alerts you ask for. We also collect it if you join the waitlist, send us feedback, submit a receipt and give us an address, or request a Grocr Intelligence demo. Those are separate from having an account, but deleting an account removes your address from all of them too.
- Your lists, saved baskets, alerts and preferences. So they sync across your devices when you are signed in. Signed out, these stay only in your browser.
- Receipt photographs, if you send one. See the section below, because this is the most sensitive thing we handle and it deserves its own explanation.
- Your IP address and browser when you submit a receipt, join the waitlist or request a demo. We keep these for 30 days to stop abuse of those forms, then delete them.
- Anonymous usage stats. Which pages and searches are popular, so we know what to improve and which products to add. Self-hosted and cookieless (Umami) on our own infrastructure. No advertising cookies, no tracking across other sites, not shared with anyone.
Receipts
You can send us a photograph of a till receipt to help us check prices. This is optional and you never have to do it.
- What happens to the photograph. It is sent to an external artificial intelligence provider to be read: Anthropic, OpenAI or Microsoft Azure, depending on which reader we have configured. That means the image leaves Bermuda and is processed on servers outside it. We do not control those providers' infrastructure.
- What we keep. The prices and product names read from the receipt, so we can check them against what the shops publish. The photograph itself is deleted after 180 days, automatically, by a job that runs daily. The prices read from it stay, because they are the reason for collecting it.
- The whole submission is deleted after 24 months.
- Who can see it. Grocr operators reviewing submissions, and the AI provider that reads it. Not other shoppers, and not advertisers.
- Removing one. Email hello@grocr.fyi with the reference shown after you upload, and we will delete it.
Please avoid photographing anything you would not want read: receipts sometimes show the last digits of a card, or a loyalty number. We do not want those and do not use them.
How long we keep things
These are enforced by a job that runs every day, not by intention. It records what it deleted so we can tell it is still working.
| What | Kept for |
|---|---|
| Receipt photographs | 180 days |
| Receipt submissions, including the prices read from them | 24 months |
| IP address and browser from a receipt, waitlist or demo form | 30 days |
| Sign-in links | Deleted once used, or 24 hours after they expire |
| Sessions | Deleted when they expire |
| In-app notifications | 12 months |
| Raw analytics events | 90 days. Totals are kept. |
| Your account, lists, baskets, alerts and preferences | Until you delete your account |
| Database backups | Copies may persist until backups rotate out |
Who else sees your data
Three companies, and only for the jobs listed. The typefaces on this site are served from our own servers, so loading a page tells nobody but us.
- Resend sends our email. They see your address and the message.
- Anthropic, OpenAI or Microsoft Azure read receipt photographs, as above. Which one depends on our configuration at the time.
- Open Food Facts supplies product information. We send them barcodes, never anything about you.
We do not sell or rent your data. Grocr Intelligence, our paid product for retailers and brands, sells price observations collected from shops' own published prices. It contains nothing about you, and no customer of it ever receives personal data.
What we don't do
- We don't sell or rent your data to anyone.
- We don't run advertising networks or cross-site tracking.
- We don't store passwords. Sign-in is by emailed link.
Cookies and what is stored in your browser
All of these are essential or functional. None is used for advertising.
| Name | What it does |
|---|---|
session | Keeps you signed in. Secure, HTTP-only. |
grocr_next | Short-lived. Remembers the page you were heading to when you signed in. |
grocr_branches | Which shop branches you picked, so prices match your area. |
grocr_basket_v1, grocr_alerts_v1, grocr_profile_v1 | Stored in your browser, not sent to us, so your lists and alerts work signed out. |
Our analytics does not use cookies.
Sign-in links and account notices are how the service works. They are not marketing and cannot be turned off while you have an account.
Price alerts and digests are optional. You can turn them off in your account settings, and every one of them carries an unsubscribe link and a one-click unsubscribe control in your mail app. Turning email off does not stop the alert: you will still see it in the app when you sign in.
Your rights
- See what we hold. Ask, and we will send it to you.
- Correct it. Most of it you can edit yourself; ask us for the rest.
- Delete it. Delete your account from the Account page. That permanently removes your profile and sign-in details, your lists, baskets and favourites, your price and basket alerts, your notifications, your receipts and the photographs you sent us, and your trips and preferences. It also removes your email address from everywhere else we hold it: the waitlist, a demo request, an invitation to a Grocr Intelligence account, any unsubscribe link we had issued you, and the feedback you sent us.
- Object or complain. Email us first. You can also complain to Bermuda's Privacy Commissioner.
Two things stay when you delete your account. Price corrections and feedback you sent us stay, with your name and your address taken off them, because other shoppers rely on them. And if you had unsubscribed from an email, we keep that address on a do-not-email list, because deleting that record is how a service ends up emailing you again the next time your address reaches it from somewhere else. Ask us and we will remove that too. Copies of anything may remain in our database backups until those rotate out.
Contact
Questions about your data? Email hello@grocr.fyi or use the contact form.