Privacy Policy

What we collect

• Your account email and sign-in information, handled by Clerk (see below) - we never see or store your password.
• What you enter yourself: inventory items, recipes (including any dietary or allergy tags you add), grocery lists, meal plans, comments you post on public recipes, any comment or recipe you report and anyone you block, messages you send us from the Contact page, and any review of InventoryImp you write in the app (we only quote a review publicly if you say that's OK).
• If you use the Contact page without signing in, the email address you give us so we can reply, along with your message.
• If you use AI features, the content you submit for them (a pasted recipe, a recipe URL, a receipt photo, a photo of an item or its package and nutrition label, a photo of a shopping list, a photo of you or your pet to make your own imp, or an out-of-stock ingredient) - see "AI features" below for exactly where that goes.
• If you join or create a household, the other household members can see your email address and everything in your shared inventory, recipes, grocery list, and meal plan.
• Billing status (e.g. whether you have an active Home plan or trial), handled by Clerk Billing - we do not receive or store your card details.

AI features

Receipt scanning, recipe import, and ingredient substitute suggestions, and making your own imp, send the content involved - a receipt, product, shopping list or imp photo, pasted or fetched recipe text, or a list of what's in your kitchen - to OpenAI to generate a result. We don't control OpenAI's own retention of that data; see OpenAI's privacy policy for their practices. The photo you use to make your own imp is never kept by us. The imp picture made from it is kept only if you press "Save to My imps" (up to 5), only you can see it, and it's deleted when you delete it or your account. AI-generated results (including ingredient substitutes) are suggestions only and are not checked against your actual allergies or dietary restrictions - always verify a substitute is safe for you before using it, especially for a serious allergy.

If you connect InventoryImp to your own AI assistant (like Claude or ChatGPT - see the FAQ), that assistant can read your inventory, recipes, grocery lists and meal plan - and, when you ask it to, add to or check off your grocery list, mark something as used, or add a recipe to your meal plan. What it reads is then handled by that assistant's provider under their privacy policy, not ours. Nothing is shared until you connect it yourself, and you can disconnect it at any time from the assistant's settings.

Who else sees your data

We use a small number of service providers to run InventoryImp, each only for what they need to do their job:

• Clerk - authentication and billing.
• OpenAI - AI-powered features (see above).
• Our database and hosting providers (Neon and Vercel) store your data on our behalf and don't use it for anything else.
• Product lookups (USDA FoodData Central, Open Food Facts, UPCItemDB) receive only a barcode or product name you search for - never your account or personal information.
• Recipe services receive only ingredient names - never your account or personal information: spoonacular (recipe search, using the names of items you have in stock) and USDA FoodData Central (nutrition estimates for your recipes).
• Brave Search - receives only the words you type into "Search the web for recipes" and the names of any items you pick from your inventory there - never your account or personal information.
• Kroger - if you pick a Kroger store for grocery list prices, it receives that store and the names or barcodes of the items on your list, never your account or personal information.
• Cloudflare Turnstile - checks that you're a person when you send a message from the Contact page. Cloudflare receives technical information about your browser and device for that check - not your message or account.
• Resend - sends the notification emails you turn on in Account settings (expiring food, low stock, missing meal plan ingredients). It receives your email address and what's in that email. They're off unless you turn them on, and every one has a link to turn them off.
• Apple - delivers the phone notifications you turn on in the iPhone app. Apple receives your phone's notification address and the notification's text (like which foods are about to expire), not your account details.
• Your browser's speech recognition - if you turn on Hands-free in cooking mode, your browser listens for commands like "next" and may send what the microphone hears to its maker to turn it into words (Google for Chrome, Apple for Safari, Microsoft for Edge), under their privacy policies. InventoryImp never receives or stores the audio or the words - they stay in your browser. Listening stops when you turn Hands-free off or leave cooking mode.
• Your calendar app - if you turn on the meal plan calendar link on your Account page, the calendar you add it to (like Google Calendar, Apple Calendar or Outlook) fetches your planned meals' names and dates through that private link. Nothing is sent until you add it, and turning the link off or resetting it stops it.
• Sentry - receives an error report when something in InventoryImp breaks, so we can find and fix it. A report has technical details like the page, the error, and your browser and device, and may include your IP address - not your inventory, recipes, or lists, and never a recording of your screen.
• Google AdSense - serves ads to free-tier accounts (see "Cookies & tracking" below).

We do not sell your data, and we do not share it with anyone else for their own marketing.

How long we keep it

We keep your data for as long as your account is active. You can delete individual items yourself throughout the app, export everything, or delete your account entirely from your Account page.

Your rights

Wherever you are, you can access, export, or delete your personal data yourself from your Account page, or email privacy@inventoryimp.com for anything that page doesn't cover. If you're in the EU/EEA or UK, this reflects your rights under GDPR; if you're a California resident, this reflects your rights under the CCPA to the extent it applies to us. We aim to respond to any request within 30 days.

Our basis for processing your data under GDPR is performing our contract with you (running the account and features you use) and, for things like fraud prevention and keeping the service secure, our legitimate interest in doing so. Our service providers (see "Who else sees your data" below) may process data outside the EU/EEA/UK, including in the US; where that's the case, we rely on their own safeguards (such as Standard Contractual Clauses) for that transfer.

Deleting your data

Go to your Account page and choose "Delete my account." This permanently deletes your account and everything in it and cannot be undone.

Cookies & tracking

We use the cookies required to keep you signed in (handled by Clerk). Free-tier accounts (not on the Home plan) may also see ads served through Google AdSense on the website (never in the Google Play or iPhone apps). Google and its partners, as third-party vendors, may place and read cookies on your browser, or use web beacons and your IP address, to serve and measure ads and, where you've consented to it, to personalize them based on your visits to this and other sites. If you're in the EU/EEA, UK, or Switzerland, you'll be shown a consent choice letting you allow or decline ad personalization, which you can update at any time; you can also manage Google's ad personalization directly at Google Ads Settings. See how Google uses cookies for advertising for their practices.

We also use Vercel Analytics to see how many people visit the site - it's cookieless and doesn't track you individually across sites.

Some grocery list items and some of our guides include links to Amazon, as part of the Amazon Associates program - as an Amazon Associate we may earn a commission on qualifying purchases made after clicking one. Clicking one takes you to Amazon's own site, where Amazon's own cookies and tracking apply, not ours - see Amazon's privacy notice for their practices.

Children

InventoryImp is not directed at children under 13, and we don't knowingly collect data from them.

Changes to this policy

We'll update this page as InventoryImp changes, and update the "last updated" date above when we do.

Contact

Questions about this policy, or a data request: email privacy@inventoryimp.com.