Effective Date: August 27, 2026
Xpiry is developed and operated by CJ Interactive LLC ("we," "us," or "our"). This Privacy Policy explains how we collect, use, and protect your information when you use the Xpiry mobile application ("the App") on iOS and Android. We are committed to safeguarding your privacy and being transparent about how your data is handled.
The table below summarizes the categories of data we collect, aligned with Apple’s App Store privacy nutrition labels and Google Play’s Data Safety disclosures. We collect only what is necessary to track your groceries, estimate expiration dates, and suggest recipes.
| Category | Data Types | Collected | Linked to You |
|---|---|---|---|
| Contact Info | Email address, display name, and profile photo URL — only if you choose to sign in with Google or Apple | Yes | Yes |
| Identifiers | User ID (Firebase UID); advertising identifier (Apple IDFA or Android Advertising ID) used by our ad provider on the free tier | Yes | Yes |
| Purchases | Subscription tier and entitlement status | Yes | Yes |
| User Content | Grocery and homemade dish names, storage locations, expiration dates, store names from receipts, saved recipes, custom shelf-life adjustments, and photos of receipts you scan (processed but never stored — see Section 3) | Yes | Yes |
| Usage Data | Receipt scan count, recipe suggestion count, items marked used or thrown away, total items tracked, and ad interactions | Yes | Yes |
| Diagnostics | IP address, device type, and operating system version (collected automatically by server and advertising infrastructure) | Yes | No |
| Location | Timezone and app language (device-level settings, used to schedule reminders). Our ad provider may infer approximate location from your IP address. We never request or collect GPS or precise location. | Yes | No |
| Financial Info | None (payments handled by Apple, Google Play, and RevenueCat) | No | No |
| Sensitive Info | None | No | No |
| Health & Fitness | None. Recipe filters such as calorie range are cooking preferences, not health records, and are not stored as health data. | No | No |
| Browsing History | None | No | No |
| Search History | None | No | No |
| Contacts | None | No | No |
You can use Xpiry without giving us your name or email. The App signs you in anonymously by default, and an anonymous account works fully. Signing in with Google or Apple is optional and exists so you can recover your pantry on a new device.
Your grocery items, storage locations, and expiration dates are stored in your account so your pantry is available across your devices. Store names extracted from your receipts are saved so the App can group items and learn per-store patterns.
When you manually adjust an estimated expiration date, Xpiry records the difference between our estimate and your correction for that item at that store. Over time the App uses these adjustments to make better estimates for you. This learning happens only within your own account and is never pooled with other users or shared with third parties.
Your chosen reminder time, "expiring soon" threshold, timezone, and app language are used to schedule daily notifications. These notifications are scheduled and delivered entirely on your device — your pantry contents are never sent to a server in order to build a reminder.
Your Firebase UID is shared with RevenueCat to manage your subscription status and entitlements. We do not process or store payment card details — all payment processing is handled by Apple through the App Store and by Google through Google Play.
On the free tier, the App displays a banner ad and an interstitial ad after a completed receipt scan. Ads are served by Google AdMob. See Section 11 for details and your choices.
We use Firebase Authentication to create and manage your account. You may optionally link your account to Google or Apple sign-in for cross-device access and account recovery.
When you scan a grocery receipt, the App captures an image using your camera or a photo you select from your library. That image is encoded and sent over an encrypted connection to our Firebase Cloud Function, which passes it directly to Google’s Gemini API to read the item names.
Receipt images are never stored. The photo exists only in memory for the duration of the scan. We do not save it to our servers, we do not write it to any storage bucket, and we do not retain a copy after the scan completes. Only the extracted item names, categories, and the store name are saved to your account.
A receipt can contain more than groceries. Xpiry only extracts line items and the store name — it does not extract, store, or transmit payment card numbers, loyalty account numbers, or totals. We still recommend you avoid scanning receipts containing information you would not want processed.
When you scan a product barcode, the barcode number alone is sent to Open Food Facts, a free public food product database, to look up the product name and brand. No account information, device identifier, or other personal data is included in that lookup.
Camera access is used solely for scanning receipts and barcodes. Photo library access, if you grant it, is used solely to let you pick an existing receipt image. Neither permission is used for any other purpose, and you can decline both and still use the App by adding items manually.
Xpiry uses artificial intelligence (Google Gemini) for two features: reading your grocery receipts, and suggesting recipes based on what is in your pantry. The following data is sent to Google’s Gemini API via our secure server-side Cloud Functions:
This data is sent from our servers to Google’s Gemini API — it is never transmitted directly from your device to any AI provider. Our use of the Gemini API is governed by Google’s Gemini API Terms of Service, which state that data sent through the paid API is not used to train Google’s models. Your name, email address, and account identifier are not included in these requests.
Recipes you choose to save are stored in your account so you can revisit them. You can delete a saved recipe at any time, and all of them are removed when you delete your account.
AI output is an estimate, not a guarantee. Expiration dates and recipe suggestions produced by Xpiry are informational only and are not food-safety advice. Always use your own judgment before consuming food. See our Disclaimer for details.
We do not sell your personal information. We share data only with the following service providers, strictly for the purposes described:
We may also disclose your information if required by law, regulation, or legal process, or to protect the rights, safety, or property of our users or the public.
In the event of a merger, acquisition, or sale of all or a portion of our assets, your personal information may be transferred to the acquiring entity. We will notify you via the App or email before your data is transferred and becomes subject to a different privacy policy.
The App and this Privacy Policy may contain links to third-party websites or services (such as Firebase, Google, Open Food Facts, RevenueCat, and Apple). Recipe results may also link to external cooking websites. We are not responsible for the privacy practices of these third parties. We encourage you to read the privacy policies of any third-party services you interact with. Clicking on a third-party link or enabling a third-party integration is subject to that third party’s own terms and privacy policy.
We retain your data for as long as your account is active and you continue to use the App.
If you ask us to delete your account by email instead of using the App, we will verify your request and complete the deletion within 30 days.
We take reasonable measures to protect your information:
While no method of transmission or storage is 100% secure, we strive to use commercially acceptable means to protect your personal information.
If you are located in the EEA, the UK, or Switzerland, you have the right to access, correct, erase, restrict, or object to our processing of your personal data, and the right to data portability. Our legal bases for processing are: performance of a contract (providing the App’s core features), consent (advertising identifiers, camera access, and notifications), and legitimate interests (securing the service and preventing abuse). You may withdraw consent at any time, and you have the right to lodge a complaint with your local supervisory authority.
If you reside in a US state with comprehensive privacy legislation — including California (CCPA/CPRA), Virginia (VCDPA), Colorado (CPA), Connecticut (CTDPA), Utah (UCPA), Texas (TDPSA), Oregon (OCPA), Montana (MCDPA), and other states with similar laws — you may have additional rights, including:
If you are located in South Korea, you have the rights granted under the Personal Information Protection Act (PIPA), including the right to access, correct, delete, and suspend the processing of your personal information. Because our servers and service providers are located outside Korea, your personal information is transferred overseas as described in Section 5. A Korean-language version of this policy is available at 개인정보 처리방침.
To exercise any of these rights, contact us at justin@cjinteractivellc.com. We will respond to verified requests within the timeframe required by your applicable law. If we deny your request, you may have the right to appeal by contacting us at the same email address.
Xpiry is restricted to users aged 14 and over, and the App asks you to confirm your age before you can use it. It is not directed at children, and we do not knowingly collect personal information from anyone under 14.
In line with the Children’s Online Privacy Protection Act (COPPA), we do not knowingly collect personal information from children under 13. If you believe someone under 14 has provided us with personal information, please contact us at justin@cjinteractivellc.com and we will promptly delete it.
Xpiry displays ads on the free tier through Google AdMob. To serve those ads, AdMob may access your device’s advertising identifier (Apple’s IDFA on iOS, the Android Advertising ID on Android), your IP address, and information about how you interact with ads. This may be used to show you personalized advertising, which can involve tracking across other companies’ apps and websites.
We do not share your pantry contents, receipt data, recipes, or account information with advertisers or data brokers. Ad targeting is handled entirely by Google AdMob and does not use any data from your Xpiry account.
We do not respond to Do Not Track (DNT) browser signals, as the App does not operate in a web browser context.
We may update this Privacy Policy from time to time. When we make changes, we will update the “Effective Date” at the top of this page. For significant changes, we will notify you through the App or by other appropriate means.
We encourage you to review this policy periodically. Your continued use of the App after changes are posted constitutes your acceptance of the updated policy.
If you have questions about this Privacy Policy or wish to exercise your privacy rights, please contact us:
CJ Interactive LLC
2108 N St, Suite #15814
Sacramento, CA 95816-5712
United States
Email: justin@cjinteractivellc.com