Privacy

Grox is built so your pantry stays on your phone. This page says what the app stores, where it goes when it leaves your phone, and why.

Effective November 7, 2026

No account neededTracking works without signing in.

No ads, no trackingGrox has no advertising or analytics SDKs.

Sharing is opt-inOnly a household you create or join is stored online.

What stays on your phone

Your items, expiry dates, quantities, places (fridge, freezer, pantry), history of what you used or tossed, saved barcodes, remembered shelf lives and your settings are stored in a database on your device. Backups you make are files you save and share yourself; Grox doesn't upload them.

Reminders and the home screen widget are produced on the device.

Camera and photos

The camera is used to scan barcodes and to photograph expiry dates and labels. Barcodes and dates are read on the device. Grox doesn't save these photos to your gallery or upload them, except to the AI label reader below if you turn it on.

Product lookups

When you scan a barcode Grox hasn't seen before, it sends only the barcode number to Open Food Facts, a free public food database, to look up the product name. No personal information is sent with it.

The optional AI label reader

If you turn on the AI label reader and add your own key for a service (Claude by Anthropic, Gemini by Google, OpenAI or OCR.space), Grox sends the photo of the label to that service when the on-device reader can't find a date or name. The service's own privacy policy applies to that photo. Your key is kept in your phone's secure storage and is only sent to the service it belongs to.

It's off unless you set it up.

Grox Household (sharing)

If you create or join a household, you sign in with Google through Firebase Authentication. Grox then receives your Google account's name, email address and profile photo, and a user ID.

The household's items, history, saved barcodes and remembered shelf lives are stored in Google Cloud Firestore (Singapore region) so every member's phone can sync.
Other members of your household can see your name, email address and profile photo, and everything in the shared pantry.
Only household members can read a household's data.
When you leave a household, or are removed, your membership is deleted and your phone keeps its own copy of the pantry. When the owner deletes the household, its online data is deleted for everyone.

Crash reports

When Grox crashes, it sends a crash report to Firebase Crashlytics (Google) so the problem can be fixed. A report contains the error and where it happened in the app, your phone model, Android version and app version, and a random installation ID. It doesn't contain your pantry, your name or your email.

Purchases

Grox Household is a premium feature. Purchases are handled by Google Play, and Grox uses RevenueCat to check whether you have the premium entitlement. Grox never sees your payment details.

Children

Grox is not directed at children under 13 and doesn't knowingly collect their personal information.

Your choices

Delete any item, or clear remembered shelf lives in Settings.
Leave a household, or delete it if you own it, from Settings → Share your pantry.
Uninstalling Grox removes everything stored on your phone.

Changes

If this policy changes, the new version will be posted here with a new effective date.

Contact

Questions about privacy or your data: support@grox-tracker.app.