Effective July 13, 2026 · Last updated September 14, 2026
Robin Randel ("we", "us") operates the GalleyKeeper mobile application (the "App"). This policy explains what we collect, how we use it, and the choices you have.
We do not collect your location, contacts, or advertising identifiers, and we do not use any third-party advertising or behavioral-tracking SDKs. We do not track you across other apps or websites.
Where the App offers it, you can take a still photo of a fridge shelf, a pantry or a cupboard with the camera, or choose an existing photo from your library, so that the App can name the grocery items in it. Access is requested only at the moment you choose one of those actions, and iOS asks you to confirm it — you can decline, or change it later in Settings, and the rest of the App keeps working: you can always scan a barcode or add items by hand instead. The App takes still photos only: it does not record video, does not use the microphone, and does not read, scan, or index the rest of your library.
The photo itself is never stored. It is sent once, over an encrypted connection, to be looked at (see "AI feature content" above), and it is discarded as soon as the list of item names comes back. We keep no copy of it on our servers, the App keeps no copy on your device, there is no photo or media column in your account, and it is not included when your content syncs. Only the item names you review and choose to keep are saved to your account, where you can edit or delete them at any time.
If you use the optional barcode scanner, the App uses your camera only to read the barcode on a grocery item. Access is requested at the moment you open the scanner and your device asks you to confirm it — you can decline, or type the number by hand instead, and the rest of the App keeps working. The camera image is processed entirely on your device and is never stored, uploaded, or kept on our servers. Only the decoded barcode number is sent — to the Open Food Facts food database — to look up the product name; that lookup is anonymous and carries no information about you. You can always add or edit an item without scanning.
To provide and maintain the App, authenticate you, sync your content to your account, and respond to support requests. We do not use your content for advertising.
Your data is stored with our cloud backend (Supabase), isolated per user with row-level security so that only you can access your own data, and transmitted over encrypted connections (HTTPS/TLS). We share data only with the limited service providers needed to run the App — our cloud hosting and authentication provider, our AI processing provider, and Apple (for any purchases). To confirm whether a purchase is active we use RevenueCat, which receives an app user identifier (a random one before you sign in, and your account's internal ID after — never your name or email), the purchase details Apple provides, and basic device information such as platform, operating-system version, and country. We do not sell your personal information.
No method of storage or transmission is completely secure, so while we work to protect your information we cannot guarantee absolute security.
Our service providers may process and store information on servers in the United States or other countries, whose data-protection laws may differ from those where you live, under the terms of those providers.
We retain your data while your account is active. You can permanently delete your account and all associated data at any time from within the App (Settings → Delete Account). Deletion removes your account and content from our systems.
Records of purchases are kept by Apple, and subscription status by RevenueCat, under their own policies, because they are needed for billing, entitlement, and tax purposes. Deleting your account does not delete those records, and it does not cancel an active subscription — cancel that in your Apple ID settings.
The App is not directed to children under 13, and we do not knowingly collect personal information from them.
You can access, correct, export, or delete your data using the in-app controls, or by contacting us at robinrandel17@gmail.com.
Depending on where you live, you may have the right to access, correct, delete, or receive a copy of your personal information, to object to or restrict certain processing, and to complain to your local data-protection authority. Most of this you can do with the in-app controls; for anything else, email robinrandel17@gmail.com and we will respond as required by applicable law.
These Privacy, Terms, and Support pages are static: they set no cookies and load no analytics, advertising, or third-party scripts. Our hosting provider may keep standard request logs (such as IP address and browser type) to serve the pages securely and diagnose faults. If you email us, we keep your message and address only to reply and help you.
We may update this policy from time to time; material changes will be reflected by a new effective date above.
Questions? Email robinrandel17@gmail.com.