Privacy Policy

Grocery List (Android app com.geoffzimmer.grocery) and its website
Effective November 5, 2026 · Updated November 6, 2026

Short version: there are no accounts, no ads, no analytics and no tracking. Your list stays on your phone. We never sell or share your information.

What stays on your phone

• Your shopping list, quantities, custom items and store checklists.
• Your ZIP code, if you enter one for deals.
• A random device code. It's used only if you connect a Kroger account.

Uninstalling the app deletes all of this.

What the app sends to our server

• Deals. When you open the Deals tab, the app sends your ZIP code and the names of the items on your list to our server. The server looks up weekly-ad prices from nearby stores and Kroger prices. Results are saved for up to 6 hours, so the same search isn't repeated. Kroger results are kept in memory for up to 15 minutes only. None of this is linked to you or your phone.
• Shared list links. When you share your list, the items are packed into the link itself, after the "#". Browsers never send that part to a server, so opening a shared link doesn't send your list to us.
• Updates. The app checks our server for a newer version and downloads it from there.
• Kroger cart (optional). You can connect your Kroger account to send your list to your Kroger cart. You log in on Kroger's own website, and the app never sees your Kroger password. Kroger gives our server an access key, which is stored under a scrambled form of your random device code and used only to add items to your Kroger cart when you ask. To delete it, use Disconnect Kroger account in the app menu.

Our server doesn't keep logs of who visits or what they request. No names, emails, phone numbers or locations are collected beyond the ZIP code you type in.

Other companies involved

• Weekly ad data: our server sends item names and your ZIP code to a weekly-ad data provider (Flipp) to find sale prices.
• Kroger: item searches, your ZIP code (to find your nearest store) and, if you connect, your cart requests go to the Kroger API.
• Store websites: when you tap a store or "Find", that store's own website opens (Meijer, ALDI, Walmart, Kroger and others). Anything you do there, like logging in or adding to a cart, falls under that store's privacy policy, not this one.
• Hosting: the website and server are reached through Tailscale, which carries the connection.

If links to a store's website ever earn us a referral commission, the store may record that you came from this app. That's standard for referral links, and we don't receive any personal information about you from it.

Children

The app is meant for adults doing their grocery shopping. It isn't directed to children under 13, and we don't knowingly collect information from them.

Your choices

• Don't enter a ZIP code, and the app sends nothing for deals.
• Use Disconnect Kroger account to delete your Kroger connection from our server.
• Uninstall the app to remove everything stored on your phone.

Changes

If this policy changes, the new version will be posted here with a new effective date.

Contact

Questions or requests: email Geoff Zimmer, the app's developer, at geoff24zimmer@gmail.com.