Privacy policy

Effective October 28, 2026

afforshop is a grocery list app for iPhone and Android, and this website. It is made by PeenDev Productions (“we”). This policy says what leaves your phone, why, who handles it for us, and how long it is kept.

The short version

Your lists, your settings and the prices your trips read stay on your phone, unless you share a list, move it to a family, or share prices.
Allergies, ingredients you avoid and brand preferences never leave your phone.
No ads, no analytics and no tracking. We don’t sell or rent your information.
You can use afforshop without an account. If you make one, you can delete it in the app.

What stays on your phone

Your lists and their items, unless you share one or move it to a family.
Your settings: your stores, your home area (rounded to about a kilometre, for drive estimates), allergies, ingredients you avoid, preferred and blocked brands.
What your trips read from store websites: prices, and aisles where a site prints them. Search pages are kept for a day, aisles for 90 days, and afforshop AI’s answers about products for 30 days, so a repeat trip is faster.
Receipt photos, which are read on your phone.

Deleting the app deletes all of this.

When you start a shopping trip

afforshop opens your chosen stores’ websites in its own browser, much as if you visited them yourself. Those stores receive what any visit sends them, such as your IP address, browser details and their own cookies, and their privacy policies apply to it. afforshop reads the prices on those pages on your phone. It doesn’t send us what it reads unless you choose to share prices.

What we receive, and why

Finding stores near you: A point rounded to about a kilometre, or the place you type, to look up stores near it. We don’t store it.
Ingredient lists: Product barcodes, and nothing else, so we can look the products up at Open Food Facts.
Your account (optional): If you sign in with email, your email address; our email provider sends you a sign-in code. If you sign in with Apple or Google, the account identifier they give us and the email address they share. We keep a record of your signed-in sessions.
Purchases: Which plans you own: afforshop Plus and afforshop AI. Apple or Google takes the payment; we never see your card. RevenueCat, our purchase service, tells us what you own, using your account ID.
Family lists: The lists and items in your family, and each change to them, so everyone’s phone stays in sync. Family members see the family’s lists and each other’s sign-in email address.
Share links: A copy of the list’s name and its items as typed, never prices, stores or check marks. Anyone with the link can see it, for 30 days or until you revoke it.
Prices you share (optional): Only after you review them: each price’s product title and number, size, store, aisle and time. They are stored without your account, and other shoppers with afforshop Plus see them.
afforshop AI (optional): To match products, product titles, sizes and brands from your trip, never prices. To write a list, the sentence you type. To read a receipt better, the photo, only when you tap “Read it better”. These go to AI models: some we run on our own servers, others through OpenRouter, with providers that don’t keep what they are sent. We log each AI request against your account, with its size and cost but never its text, to apply daily limits. We also keep answers to questions like “is this product the item?” (the item’s words and the product’s title, with no account) to answer the same question faster next time.
Server logs: Our servers record errors and requests (time, address requested and IP address) to keep the service secure and working. These logs are kept for a short time.

Who handles it for us

We run afforshop’s servers ourselves. These companies handle data for us, only to provide afforshop:

Cloudflare, which carries traffic to afforshop.com and our API.
Resend, which sends sign-in emails.
Apple and Google, for sign-in and payments.
RevenueCat, which keeps track of purchases.
OpenRouter and the AI providers it sends requests to, for afforshop AI.
Open Food Facts, which our server asks about barcodes. It receives no personal information.

How long we keep it

Your account, purchases and family membership: until you delete your account.
Share links: 30 days, or until you revoke them. Family invites: 7 days.
AI request logs: 180 days. Saved AI answers: 180 days after they were last used.
Apple, Google and RevenueCat keep their own purchase records under their own policies. We keep a note of each purchase event they send us, by their ID, so it is never applied twice.

Deleting your account

In the app, open Settings → Account and purchases → Delete account. It takes effect at once, and deletes your account, sign-ins, sessions, plans and share links, and takes you out of your family. If you were its last member, the family and its lists are deleted too; otherwise its lists stay with the others. AI request logs lose the link to you and are deleted when they reach 180 days.

Deleting your account doesn’t cancel a subscription: cancel afforshop AI in the App Store or Google Play. Without the app, see how to delete your account.

Children

afforshop is not meant for children under 13, and we don’t knowingly collect information from them. If you think a child has made an account, write to us and we will delete it.

Your rights

You can ask us for a copy of what we hold about you, ask us to correct it, or ask us to delete it, by writing to the address below. Depending on where you live (California, for example), the law gives you these rights; we give them to everyone. We don’t sell personal information or share it for advertising.

Changes

If this policy changes, we will update it here and change the date at the top. For a change that affects what we collect, we will also say so in the app.

Contact

[email protected]