Privacy policy

Last updated: 11 November 2026

GroceryLoop is run by [company legal name], [address], United Arab Emirates ("we"). This policy explains what we do with personal data under the UAE Personal Data Protection Law (Federal Decree-Law No. 45 of 2021). Questions: hello@groceryloop.app.

What we collect

• The waiting list: the email address you leave to be invited, and when we invited you. It is also added to our newsletter list at Mailchimp, which you can leave at any time.
• Your account: your name, your email addresses and which households you belong to.
• What your household sends us: supermarket invoices and receipt photos, forwarded emails (sender, subject, body and attachments), and what we read from them: dates, shops, products, quantities and prices.
• Products you help us file: when we ask for your help with an invoice, the category, brand and labels you choose for a product.
• Your preferences: in your household, who receives invoice updates and how often; for you, how you want to receive them.
• How the site is used: which pages are opened (as page types, never with your household or invoice numbers), the referring site, device type and browser. We store no IP address and set no tracking cookie; a visitor is counted with a code that changes every day and cannot identify you. We also note events such as sign-ups, sign-ins and invoices confirmed, with counts and kinds only.
• Payments: if you subscribe, Stripe collects your card details; we only see the plan and payment status.

Why we use it

• To run the service you asked for: read your invoices, have our staff check them and file their products, show your spending and prices, and tell you when your invoices are ready (performing our contract with you).
• To keep it secure and working, and to improve it from usage statistics (our legitimate interest).
• To bill subscriptions and keep the records the law requires.

Who else handles it

We use these service providers, which process data on our behalf and only for these purposes:

• Render (hosting, Frankfurt, Germany) and Cloudflare R2 (storage of your documents, Europe).
• Anthropic and OpenAI (reading invoices and suggesting how to file products, when our own rules can't). They receive the document or its text, or product names, through their business APIs, which do not use it to train their models.
• Mailgun (sending our emails and receiving the invoices you forward, EU region).
• Stripe (payments) and Sentry (error reports, with personal data removed).

Some of these providers are outside the UAE. We rely on [the transfer basis to confirm: adequacy decision, contractual safeguards or your consent].

Who can see your household's data

• The members of your household see everything your household sends.
• GroceryLoop staff check every invoice before it counts in your figures, so that you don't have to. They see the invoice: the shop, the date, the products and prices, and the original document, so they can correct what was read and file the products. The pages they work in don't show which household or person sent it. The original document can still show your name or delivery address if the supermarket prints them.
• Support: only to answer a request from you, and only when needed, a staff member can see GroceryLoop as you see it. Each time is recorded with who, when and why.
• The shared catalog: when our staff file a product, or accept one you filed, its description (name, category, brand, labels and pack) joins the catalog that recognises products for every household. It never includes your invoices, your prices or who bought it.

Our staff are bound by confidentiality, and we don't sell or share your data with anyone for their own purposes.

How long we keep it

• Invoices and documents: until you discard them, or until your household is deleted. A discarded document and its invoice are deleted at once.
• Your account: until you delete it. Billing records: as long as the law requires.
• Usage statistics: kept, as they identify no one.
• The record of staff checks and of support access: as long as your account exists, so that we can answer for them.

Emails we send you

Account emails (sign-in codes, password changes, security notices) are part of the service. Invoice updates go to the people your household chooses; you can stop them for yourself in your profile at any time. Newsletters only reach you if you joined our mailing list, and every one has a link to leave.

Your rights

You can ask to access, correct or delete your personal data, to receive a copy, to restrict or object to its use, and you can withdraw consent where we rely on it. Write to hello@groceryloop.app; we answer within [30] days. You can also complain to the UAE Data Office.

Changes

We will tell you in the app before an important change to this policy takes effect.