Privacy Policy

1. The short version

• You don’t need an account to plan dinners. Without household sharing, your setup, plans, recipes and grocery lists are stored on your iPhone.
• If you use household sharing, you sign in, and your household’s plans, grocery lists, recipes and setup are stored on SupperScope’s service so everyone in the household sees the same thing.
• When you import a recipe from a link, or use features that read pasted text, recipe photos or dish photos, that content is sent to SupperScope’s servers and, for text and photos, to an AI service provider to be processed.
• Apple handles subscription payments. We never receive your payment card details. RevenueCat helps us check whether you have SupperScope Premium.
• Where retailer integrations are available and you choose to use one, the items you send, your store choice and your ZIP code go to SupperScope’s service and to that retailer.
• The app has no ads and no third-party analytics or advertising SDKs, and we don’t sell your personal information.

2. Information kept on your iPhone

To plan your week, the app keeps the following in its own storage on your iPhone:

• Your ZIP code, used to estimate regional grocery prices, show your city name and, if you use a retailer integration, find nearby stores;
• Your household setup: how many people you cook for and how many dinners you want each week;
• Food preferences you choose to set, such as allergens to avoid, foods you won’t eat, a diet style, a cooking-time limit or a budget;
• What you do in the app: weekly plans and changes to them, saved recipes, recipes in My Recipes and their photos, pantry items, grocery items you add, check-offs and display settings.

Planning, grocery lists, price estimates and city names work on the device, using recipe, price and place data bundled with the app. City names come from a bundled GeoNames dataset (geonames.org, CC BY 4.0), looked up on your iPhone from your ZIP code. SupperScope uses the ZIP code you enter. It doesn’t use your device’s location services or GPS.

Your iPhone’s own backups (for example iCloud Backup) may include app data. Apple manages those backups under your Apple Account settings.

3. What we collect

Account and household (only with household sharing)

• Email address, if you sign in with email (we send a one-time code; there are no passwords), or the email Apple provides with Sign in with Apple, which may be a private relay address.
• Display name: the name you choose, or the name Apple shares the first time you sign in with Apple. Without one, your household sees a shortened form of your email address.
• User ID: the account identifier our service (Supabase) assigns to you.
• Household membership and content: the household’s name, who belongs to it and their roles, invites, and everything the household shares (see section 7).
• Recipe feedback: if you answer “Would you make this again?” on a SupperScope recipe while signed in, your answer is kept with your account.

Planning data (only with household sharing)

Your household’s preferences and setup (including ZIP code), weekly plans and history, saved recipes, recipes in My Recipes, grocery lists, check-offs, pantry and other household-shared content.

Recipe content you provide

• Recipe links you import, pasted recipe text, photos of recipes you scan, photos of finished dishes you use to recreate a recipe, and any answers you give to follow-up questions. These are processed as described in section 5.
• Recipe cover photos you add. With household sharing, they’re uploaded to private household storage so household members can see them.

Subscription data

• Whether you have SupperScope Premium, which plan, and its renewal, trial and expiry status.
• Your RevenueCat App User ID (see Identifiers below).
• Purchase information Apple makes available through the App Store (StoreKit), such as transactions and their dates, which RevenueCat uses to confirm your subscription.

Identifiers

• Your user ID, if you sign in for household sharing.
• RevenueCat App User ID: an anonymous identifier created on your iPhone, or, once you sign in for household sharing, your SupperScope user ID. We never use your email address, name or household for it.
• Installation identifier: the first time the app uses a SupperScope server feature (such as importing a recipe, scanning or a retailer integration), it creates a random identifier and secret for your installation, stored in your iPhone’s Keychain. Our service keeps the identifier and a one-way hash of the secret. It isn’t linked to your name, email address or account.

Location

SupperScope doesn’t collect precise location. It uses the ZIP code you enter. The ZIP code is stored on your iPhone and, with household sharing, in your household’s setup on our service. If you use a retailer integration, it’s sent to that retailer to find stores near you.

When you contact us

If you email support@supperscope.com, we receive your email address and whatever you include. We use it to reply and to improve SupperScope, and we don’t add you to marketing lists.

4. How we use information

• To provide weekly plans, recipes and grocery lists.
• To sync household data between household members’ iPhones.
• To import recipes from links you provide.
• To create recipes from text and images you provide.
• To manage access to SupperScope Premium, including restoring purchases and Apple Family Sharing.
• To send grocery items to a supported retailer when you choose to.
• To answer support requests, keep the service secure, prevent abuse and fix problems.

5. Recipe imports, scans and dish photos

• Import from link: the link you enter is sent to SupperScope’s servers, which fetch that web page and read the recipe from it.
• Pasted recipe text: the app can read pasted text on your iPhone. With SupperScope Premium, the text may instead be sent to SupperScope’s servers and our AI service provider, Anthropic, for a more accurate reading.
• Scan a recipe and Recreate from dish photo: the photo you choose (and any answers to follow-up questions) is sent to SupperScope’s servers and to Anthropic, which reads the recipe or suggests one.

The result comes back to your iPhone for you to review before saving. SupperScope’s servers don’t store these photos, texts or pages after processing, and our server logs record only error types, not the content. Anthropic processes this content as our service provider, subject to its applicable commercial terms and privacy practices, which govern how long it may retain inputs and outputs. If you save the recipe, it’s kept like your other recipes (and shared with your household if you use household sharing). A dish photo you keep as the recipe’s cover photo is stored like other cover photos.

6. Subscriptions and purchases

• Apple handles payment for SupperScope Premium through the App Store.
• SupperScope doesn’t receive your credit card or other payment card details.
• RevenueCat, our subscription service provider, receives the subscription and purchase information it needs to determine whether you have Premium, along with your RevenueCat App User ID and basic app and device information needed to validate purchases.
• Apple controls its own subscription and billing records, under Apple’s terms and privacy policy.

7. Household sharing

Household sharing is optional. When you use it, everyone in your household can see what the household shares:

• weekly plans and history;
• the grocery list, check-offs, pantry and items people add;
• saved recipes and recipes added to the household, including recipes imported from links, read from text or photos, or recreated from dish photos, and their cover photos;
• household information: its name, setup (including ZIP code and food preferences), and members’ display names.

Our service checks membership on every request, so people outside the household can’t read or change it. You invite someone by sending a link; each link works once and expires after 7 days. Your own recipe feedback answers stay with your account and aren’t shown to your household. A copy of household data is kept on each member’s iPhone so the app works offline.

8. Retailer integrations

Where retailer integrations are available, you can choose to send your grocery list to a supported retailer. SupperScope currently supports Kroger and its family of stores in the United States. If you use it:

• The items and quantities you choose, the store you select and your ZIP code (to find nearby stores) are sent to SupperScope’s service and to that retailer.
• You sign in on the retailer’s own page (OAuth authorization). SupperScope never sees your retailer password.
• The access the retailer grants is stored on SupperScope’s service, encrypted, and linked to your installation identifier. It isn’t stored in the app. It’s used only to search products, find stores and add items to your cart at your request.
• Your cart, order, payment, pickup or delivery are handled by the retailer under its own terms and privacy policy. SupperScope doesn’t process payments or place orders.

Nothing is sent to a retailer unless you start it. Delete all my data, Remove SupperScope data from this iPhone and Delete my account also delete your installation identifier and the retailer connection stored with it, once your iPhone can reach SupperScope’s service. Deleting the app alone doesn’t: if you’ve already deleted it, reinstall SupperScope on the same iPhone and choose Delete all my data, or email support@supperscope.com.

9. Service providers

We use these providers to run SupperScope. Each receives only what it needs for its role, and handles it under its own privacy policy.

• Supabase: sign-in, the database for household sharing, private storage for household recipe photos, and the server functions behind recipe imports, recipe processing and retailer integrations (privacy policy).
• Anthropic: processing recipe text and photos you submit for scanning, reading or recreating a recipe (privacy policy).
• RevenueCat: managing SupperScope Premium subscription status and entitlements (privacy policy).
• Apple: the App Store, StoreKit and subscription billing, Apple Family Sharing, and Sign in with Apple if you use it (privacy policy).
• Kroger: store search, product search and cart features, only when you choose to use them (privacy notice).
• Cloudflare: hosting this website (privacy policy).

10. No ads, no tracking, no selling

• SupperScope doesn’t sell personal information.
• SupperScope doesn’t use third-party advertising SDKs or show ads.
• SupperScope doesn’t use your data for cross-app advertising or tracking, and the app doesn’t include third-party analytics.

11. Retention and deletion

• Information on your iPhone stays there until you delete it in the app or delete the app.
• Household and account information is kept while your account and household exist.
• Invite links expire after 7 days.
• Your installation identifier and any retailer connection stored with it are kept until you delete them in the app (section 8).
• Delete your account (Settings → Household sharing → Delete my account): this deletes your account, your profile and your recipe feedback, and removes you from your household. If you created the household and you’re the only member, the household and everything it stored, including recipe cover photos, are deleted too. If others are in it, remove them first. Things you added to a household that continues stay with that household, without your name. If you use Sign in with Apple, we also ask Apple to end SupperScope’s access.
• Delete a household: the person who created it can delete it once no one else is in it. This permanently deletes its plans, grocery lists, pantry, recipes and cover photos.
• Leave a household or remove a member: access ends right away; the household keeps its information.
• Deleted information is removed from our active service. Our infrastructure provider’s backups are replaced on its regular schedule.
• Deleting your SupperScope data or account doesn’t cancel an App Store subscription. Cancel it in your Apple Account settings.
• Apple and RevenueCat may keep transaction records independently for billing, tax, fraud-prevention and legal purposes.

12. Your choices and rights

• Delete all my data: in Settings, without household sharing, this removes your SupperScope information from your iPhone. With household sharing, the button reads “Remove SupperScope data from this iPhone”. It signs you out and clears this iPhone, and your household keeps its information.
• Correct information: you can change your setup, preferences, display name and recipes in the app at any time.
• Requests: to ask for a copy of your information, a correction, or deletion of information you can’t delete in the app, email support@supperscope.com. We may need to confirm the request comes from you. Information linked only to an installation identifier (such as a retailer connection) isn’t linked to your name or email, so we may not be able to find it from an email request; deleting it in the app (section 8) always works.

Depending on where you live, you may have additional privacy rights, such as the right to access, correct, delete or object to the use of your information. Email us to make a request, and we’ll respond as required by applicable law.

13. International processing

Service providers may process information in the United States and other countries where they operate.

14. Security

We use safeguards designed to protect your information, including encryption in transit (HTTPS), access controls that limit household data to household members, and encryption of retailer access credentials stored on our service. On your iPhone, sign-in and installation secrets are kept in the Keychain. No method of storage or transmission is completely secure, so we can’t guarantee absolute security.

15. This website

supperscope.com is a simple informational website hosted by Cloudflare. It doesn’t use cookies, analytics, advertising or tracking scripts, and its fonts and images are served from the site itself. Like most websites, our hosting provider may automatically record basic technical information, such as IP addresses, browser type and the pages requested, to operate and secure the site.

16. Children

SupperScope is meant for adults planning meals for their household. It isn’t directed to children under 13, and we don’t knowingly collect personal information from children. If you believe a child has given us personal information, email us and we’ll delete it.

17. Changes to this policy

We’ll update this policy when SupperScope changes how it handles information. We’ll change the “Last updated” date above, and for significant changes we’ll let you know in the app or on this website.

18. Contact

SupperScope (Thomas Saunders, operating SupperScope)
support@supperscope.com