Last updated 15 September 2026
The short version. NutriShopper works without an account. Your shopping lists, pantry and settings stay on your phone. An account is optional and exists only to back up your saved dishes. We do not sell your data, and we do not track you across other apps or websites.
Unless you create an account, all of this stays on your device and is never sent to us:
Deleting the app deletes all of it.
Accounts are handled by Google Firebase Authentication. You can sign in with Apple, with Google, or with an email address and password. We store:
| What | Why |
|---|---|
| Email address | To identify your account and let you sign back in |
| Name, if Apple or Google provides one | To greet you in the app |
| A user ID | To connect your saved dishes to your account |
| Your saved favourite dishes | So they appear on any phone you sign in to |
Nothing else is stored with your account. Our security rules allow each signed-in person to read and write their own record and nothing else.
You can delete your account inside the app, under Profile → Account → Delete account. That erases the account and everything saved to it. If you signed in with Apple, we also tell Apple to revoke the app's access at the same time.
A family is up to six people who share NutriShopper Pro and one grocery list. It needs an account. Everyone in the family can see each other's first names and the shared list: each item, who added it, and who bought it. The family and its list are stored in Google Firebase and can only be read by the people in that family.
The organiser can remove people, and anyone can leave at any time. When the organiser deletes the family, the shared list is deleted with it. Your own shopping lists and food log are never shared with your family.
If you tap “Use my location”, your device's coordinates are used to find supermarkets near you. They are sent to OpenStreetMap and to the store price service to look up nearby shops, and are not stored on our servers or linked to you. You can type a ZIP code or city instead, and the app works fine with no location access at all.
The barcode scanner reads codes on your device. When you take a food photo, that single photo is sent to Google's Gemini service, through our server, to identify what is in it, estimate the portion and its macros, or read a product's label so we can look up where it is and what it costs. Photos are not stored by us and are not kept in our cache. If you never use those features, no image ever leaves your phone.
NutriShopper uses a small server of our own so that nobody has to supply their own keys. It passes requests to Google Gemini (for dishes and product questions) and to the Kroger price service. With those requests we send:
Answers about dishes and products are cached for up to 30 days so the same question is not paid for twice. Store prices are cached for 12 hours. Those caches hold questions and answers, never who asked.
Your first shopping list is free. Building more needs NutriShopper Pro, a subscription you buy through Apple's App Store or Google Play. They take the payment, so we never see your card or bank details. The app only learns whether your subscription is active, so it can unlock unlimited lists.
NutriShopper shows no ads, and it does not track you across other companies' apps or websites.
| Service | What it receives |
|---|---|
| Google Firebase | Your account details and saved dishes, and your family and its shared list, if you create an account or join a family |
| Google Gemini | Dish names, product questions, and photos you choose to scan |
| Apple and Google | Payment for NutriShopper Pro, through the App Store or Google Play |
| Kroger | Product searches, including products you photograph, and a store location, to return shelf prices and aisles |
| OpenStreetMap | A location or ZIP code, to find shops nearby |
| Open Food Facts | Barcodes you scan, to look up the product |
| Cloudflare | Hosts our server and this website |
We do not sell personal information, and we do not share it for advertising.
NutriShopper is not aimed at children under 13, and we do not knowingly collect their information.
You can delete your account and its data in the app at any time. You can also email us to ask what is held about you, to correct it, or to have it deleted. Depending on where you live, you may have further rights under laws such as the GDPR or the CCPA, and we will honour them.
If this policy changes in a way that matters, we will update the date at the top and, where the change is significant, say so in the app.
Questions about privacy: emcmazza@gmail.com
We do not sell or share personal information, and we do not use it for targeted advertising. There are no advertising networks, no analytics services, no tracking pixels and no data brokers involved in NutriShopper. There is nothing to opt out of because none of it happens.
Your dietary filters and health conditions — such as Celiac disease, IBS, diabetes or heart-healthy eating — are stored only on your device. They are used on the phone to filter and substitute ingredients. They are never sent to us, never stored on our servers and never shared with anyone. Deleting the app deletes them.
Nutrition for scanned products comes from Open Food Facts, used under the Open Database Licence. Shop locations come from OpenStreetMap, © OpenStreetMap contributors, used under the Open Database Licence. Shop and restaurant names are trademarks of their owners; NutriShopper is not affiliated with, endorsed by or sponsored by any of them.