Privacy Policy

1. Introduction

Welcome to Replenish ("we", "our", or "us"). We respect your privacy and are committed to protecting your data. This Privacy Policy explains how information is collected, used, and safeguarded when you use the Replenish mobile application. By using Replenish, you agree to the practices described in this policy.

2. Data We Collect & How We Use It

Replenish is designed as a local-first application. Most of your data remains on your device. However, some information may be processed to enable core features.

• Local Device Storage: Your shopping lists, custom categories, loyalty cards, and most habit data are stored locally on your device using AsyncStorage.
• Habit Data Sync: If enabled, anonymized habit data may be stored in Firebase so you can restore your habits when switching devices.
• Shared Lists: If you generate a “Live Sync Link”, the selected list is uploaded to Firebase using a randomly generated anonymous identifier so others can collaborate with you. This will be stored on Firebase for 2 weeks before being deleted.
• Crowdsourced Store & Price Data: When users verify supermarket layouts or item prices, this information may be aggregated anonymously to improve the Replenish database.
• Device & Usage Data: Basic diagnostic data such as crash logs, device type, and app performance metrics may be collected via Firebase Crashlytics and Firebase Analytics to help maintain and improve the app.

We do not require users to create accounts or provide personal identifiers such as name, email address, or phone number to use Replenish.

3. Camera & Photo Library Access

Replenish may request access to your device camera or photo library for the following features:

• Magic Paste (AI Extraction): When scanning a recipe or shopping list, the image is temporarily sent to our backend where AI services (Google Gemini / Vertex AI) extract text. Images are not stored and are discarded after processing.
• Loyalty Cards: Images of loyalty barcodes are stored locally on your device so they can be scanned at checkout. These images are never uploaded to our servers.

4. Third-Party Services

Replenish uses trusted third-party services to provide functionality. These providers may process limited data according to their own privacy policies.

• Google AdMob: Used to display advertisements in the free version of the app. Replenish requests non-personalized ads where possible, meaning ads are not targeted based on your personal behavior.
• Google Gemini / Vertex AI: Used to process text or images submitted for AI-powered features such as Magic Paste and automatic categorization.
• Firebase (Google): Used for real-time syncing, anonymous data storage, crash reporting, and basic analytics.
• RevenueCat / Apple / Google: If you purchase Premium features or make a support payment, transactions are processed by Apple App Store or Google Play. We never receive or store payment details.

5. Data Retention & Deletion

Because most data is stored locally on your device, you maintain control over your information. You can delete all app data at any time by navigating to Settings > Wipe App Data.

Aggregated and anonymized community data (such as store layouts or price data) cannot be linked back to individual users and therefore cannot be individually removed.

6. Legal Basis for Processing

Where applicable under UK GDPR or GDPR, we process limited data under the following legal bases:

• Legitimate Interests: Maintaining app functionality, analytics, and performance improvements.
• User Consent: When you grant camera access or choose to use optional features such as Magic Paste or shared lists.

7. International Data Transfers

Some services used by Replenish (such as Google Firebase or Google AI services) may process data on servers located outside the United Kingdom or European Economic Area. These providers operate under appropriate safeguards and contractual protections to comply with applicable data protection regulations.

8. Your Privacy Rights

Depending on your location, you may have rights under data protection laws including the right to:

• Request access to data associated with you
• Request correction or deletion of personal data
• Object to certain processing activities
• Withdraw consent where processing relies on consent

Since Replenish does not require accounts or collect direct personal identifiers, most user data is stored only on your device and can be deleted at any time via the app settings.

9. Children's Privacy

Replenish is not directed toward children under the age of 13. We do not knowingly collect personal information from children. If a parent or guardian believes their child has provided personal data through the app, please contact us so we can address the issue.

10. Changes to This Privacy Policy

We may update this Privacy Policy periodically. When changes occur, the updated policy will be posted on this page and the “Last Updated” date will be revised.

11. Contact

If you have any questions regarding this Privacy Policy, please contact: