Clear by design

Your privacy, in plain language.

This policy explains how Groceries for iPhone and this website handle information. ZIYØN SAS is responsible for the service. You can use the app’s private lists without an account.

Last updated: 1 October 2026

The short version

  • Private lists, products, prices, and icons are kept on your iPhone.
  • When you share a list, its list data and member details are stored with Google Firebase. Prices and private lists are not shared.
  • A price-tag correction report is sent only when you choose Send. We use no ads or cross-app tracking.
01

Who is responsible

ZIYØN SAS, 60 RUE FRANCOIS IER, 75008 Paris, France, operates Groceries and this website. Contact us at contact@ziyon.fr, or write to privacy@ziyon.fr about personal data.

02

What stays on your iPhone

The app stores your private lists, products, stores, price history, and product icons locally. Scanning reads price tags on the device; camera images are not uploaded by the scanner. Apple’s on-device tools can make product icons. Photos you choose for icons are kept in the app on your device.

03

Accounts and shared lists

You can use private lists without an account. Sign in with Apple or Google to share a list or send an optional correction report; Firebase Authentication processes the account identifier, name, and any email the provider supplies. A shared list’s name, items, changes, and member identifiers and names are stored in Cloud Firestore so invited people can use it together. When an item uses a custom category, its category name and symbol are included. Sharing is a Premium feature. Private lists, prices, and personal product photos are not uploaded as part of a shared list.

04

Invitations and notifications

Invitation records let people join a shared list. If notifications are enabled, we store a device messaging token and notification preferences so Firebase Cloud Messaging and Apple Push Notification service can tell you when someone joins. Item changes do not trigger these notifications.

05

Optional price-tag reports

If you tap Send on a correction report while signed in, we receive the recognized tag text, the app’s reading, your correction, store, currency, language, app version, and account ID. We use this to improve the price-tag reader. No photo is included. Reports remain until they are no longer needed for that purpose or you ask us to delete yours.

06

This website and support email

This site is hosted by Vercel. To deliver and protect it, Vercel may process request data such as IP addresses and technical logs. The website has no account, contact form, advertising tracker, or added analytics script. If you email support, your email provider and ours process the message so we can reply.

07

Providers and locations

Google provides Firebase Authentication, Cloud Firestore, and Cloud Messaging. The Groceries Firestore database is configured in the eur3 European multi-region. Firebase Authentication runs from US data centers, and messaging may use global infrastructure. Apple handles Sign in with Apple and push delivery. Vercel serves the website through its network. These providers may process data outside your country under their applicable data protection terms.

08

Why we use the data

We use account and shared-list information to provide the sharing service, notification details to deliver requested alerts, optional reports to improve scanning, and website request data to deliver and protect the site. We use support messages to respond to you. For people in the EEA, our legal grounds are the service contract for accounts and sharing, your consent when you choose Send for optional reports, and legitimate interests in responding to support requests and keeping the website secure. We do not sell personal data or track you across other apps or websites.

09

Keeping and deleting data

Local data stays until you remove it in the app or delete the app. Shared lists and account information are kept while the account or sharing relationship remains, subject to provider retention and legal requirements. Notification tokens are removed when you sign out or delete your account, where the server can be reached. Optional reports are retained as described above. Vercel and email providers apply their own operational retention periods.

  • Settings → Data & Privacy lets you export lists and prices as CSV, clear prices, or delete local data.
  • If signed in, Delete Account at the bottom of Settings leaves or removes shared lists and deletes the account. Your local lists remain private on the iPhone.
10

Your choices and rights

You can ask to access, correct, export, or delete personal data, or object to or restrict certain uses, by emailing privacy@ziyon.fr. You can also withdraw consent for an optional report and ask us to delete it there. We may need to verify your identity. You can contact a data protection authority, including the CNIL in France. Groceries is not designed for children. We will update this page and its date when our practices change materially.