Privacy Policy

Who we are

Baggy is made by Atremo Studios. This policy covers the Baggy iPhone app, trybaggy.com, and grocery list links shared from the app. It explains what Baggy collects, why, who else handles it, how long it is kept, and how to delete it.

For privacy questions or requests, email support@trybaggy.com.

Your account

• Email and password. Your name, email address and a hashed password. If you forget your password, we email you a reset code through Resend.
• Phone number. If you sign in with your phone, we store your number and send verification codes by text message through Twilio.
• Sign in with Apple. Apple gives us an account identifier. The first time you sign in, it can also share your name and email. If you choose Hide My Email, we receive a private relay address instead of your real one.
• Google sign-in. Google gives us your name, email address, profile picture and account identifier. See Google sign-in below.

Supabase runs Apple, Google and phone sign-in. Baggy never receives your Apple or Google password. We keep a sign-in session for each device you use, so you can sign out everywhere from Settings.

Households and lists

Baggy stores what you put into it: grocery lists and items, quantities, prices, item notes, budgets, the store you shop at, pantry items and dates, purchase history, meal plans, recipes you add, notification settings, and the answers you give during setup.

Everyone in a household can see and change its shared lists, pantry and meal plans, and can see each member’s name and role. Items you add stay on the list if you leave the house or delete your account. Anyone with your house code can join as a roommate, so share it only with people you live or shop with.

Grocery list links

When you share a list and copy its link, Baggy publishes a copy of that list at trybaggy.com. Anyone with the link can see the item names, photos, quantities, prices, categories, store and aisle details, recipe names, and your display name. They can also check items off, and those check-offs sync back to your list.

Links never include your email address, phone number, other members, item notes, budgets or pantry. A link stops working after seven days, or sooner if the list is deleted, you leave the household, or you delete your account. Someone who opened the page may still have a screenshot or copy.

Camera, photos and scans

When you scan a receipt, shopping list or barcode, Apple’s on-device text and image recognition reads the photo on your iPhone, and the photo is not uploaded.

When you photograph a single product and Baggy’s AI is on, the app shrinks the photo, removes its metadata, including any location stored in it, and sends it through our server to OpenRouter, which passes it to Google’s Gemini 3.1 Flash Lite model to name the item. We tell OpenRouter to use only providers that don’t keep request data or train on it. Our server does not store the photo. If the AI is off or can’t answer, the photo is read on your iPhone instead. Baggy then searches the store catalog with the product name, and only the items you review and save are kept.

Photos you attach in Ask Baggy are sent to the AI coach, as described below. Before upload, the app shrinks the photo and removes its metadata. Baggy sees only the photos you take or pick, not the rest of your photo library.

Location and store finder

If you tap Use my location, your iPhone uses its location, to within about 100 meters, to search Apple Maps for nearby grocery stores. That search happens between your iPhone and Apple. Baggy’s servers do not receive your coordinates. You can search by ZIP code instead.

The store you pick, including its name and address, is saved with your household so prices and aisles match that store.

If you turn on Tell the house when I get here, your iPhone watches for the store you picked, even when Baggy is closed, which needs location access set to Always. Your iPhone tells our server the store’s name when you arrive and that you left when you leave. Our server never receives your coordinates or any other place you go. A few minutes after you arrive, the other members of your household get a notification that you are at that store. This is off until you turn it on, and you can turn it off under the store you picked, in Settings under Notifications, or in iPhone Settings.

Dictation

When you tap the microphone to say what you need, Apple’s speech recognition turns your voice into text. On iPhones that support it, this happens entirely on the device. On other devices, Apple processes the audio to transcribe it, under Apple’s privacy policy. Baggy does not record or keep the audio. Only the resulting text is added to your list.

Baggy’s AI

Baggy has two AI features: Ask Baggy, the coach, and recognizing a product you photograph. When you create an account, or continue with Apple, Google or your phone number, you agree to the Terms and this Privacy Policy, and that turns both features on. You can turn either off at any time in Settings. Accounts created before October 22, 2026 keep both off until you allow them. Ask Baggy asks before your first chat, and scan recognition can be turned on in Settings. Scanning is described above.

When you send a message, our server forwards your question, up to 13 recent messages from the conversation, and any attached photo to OpenRouter, which passes it to OpenAI’s GPT-4.1 mini model. We tell OpenRouter to skip providers that may store request data or train on it. OpenRouter’s and OpenAI’s own privacy terms still apply.

If you turn on Use groceries, every item on your active list is included, including checked items. Member names, addresses, email addresses and item notes are left out. If you have the teen role, the coach is told to keep its answers suitable for teens.

Your conversation and up to 12 recent photos are saved only on your iPhone. They are excluded from device backups and are removed when you start a new chat or delete your account. Our server does not keep your messages or photos. It keeps each answer for about 24 hours so a dropped connection can retry, and a usage record tied to a scrambled account identifier for 40 days to enforce limits. Other household members cannot read your chat.

Baggy also uses the same model to turn recipe ingredient lines into grocery names. Only the ingredient text is sent. AI answers can be wrong and are not medical, nutrition or allergy advice.

Subscriptions and purchases

The Household subscription is sold through the App Store. Apple handles payment, and Baggy never sees your card or bank details. We use RevenueCat to confirm purchases and tell the app which households have an active subscription. RevenueCat receives an app user identifier, your purchase and renewal history from Apple, and basic device and App Store country information. Restoring purchases sends the same information.

Products, prices and aisles

To show products, prices and aisle locations, our server searches retailer websites and product data services, including Kroger, Target, Walmart, Safeway, Trader Joe’s and Lunardi’s, and services that fetch public store pages for us. These requests contain search terms, such as “milk”, and the selected store’s identifier, ZIP code or address. They do not include your name, email address, phone number or account details.

If you send your list to Instacart, the item names are sent to Instacart to build a cart there. Instacart’s privacy policy then applies.

Notifications

If you allow notifications, Apple gives your iPhone a push token. We store it with your sign-in session and use Apple Push Notification service to send the household alerts you choose, such as meal reminders, a teen adding to the list, or someone in your house starting to shop. Signing out or deleting your account removes the token. Some meal reminders are scheduled on your iPhone itself. You can change alerts in Settings, under Notifications.

When you tick off the first item on a shopping trip, the other members of your household get a notification that you started shopping. While that trip lasts, what they add to the list is sent to your iPhone. You can turn this off in Settings, under Notifications.

Google sign-in

If you choose Google sign-in, Google and Supabase process your basic profile, email address and account identifier. Baggy requests only the openid, email and profile scopes. We use this information to sign you in, create or find your Baggy account, and show your account details.

Baggy does not request access to your Gmail messages, Google Drive files, contacts or calendar. We do not use Google account data for advertising or send it to the AI coach. Baggy’s use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including its Limited Use requirements.

Who else handles your data

• Railway hosts Baggy’s server, database and backups.
• Supabase runs Apple, Google and phone sign-in and stores shared list links.
• Twilio sends phone verification codes.
• Resend sends password-reset emails.
• OpenRouter and OpenAI process Ask Baggy messages and photos. OpenRouter and Google process photos of products you scan with the AI on.
• RevenueCat and Apple handle subscriptions.
• Apple also provides Sign in with Apple, Maps, speech recognition and push notifications.
• Vercel and Cloudflare serve trybaggy.com and shared list pages and handle our support email.
• Retailers and product data services receive product searches, as described above.

We give each provider only what it needs for its job. Several of them are based in the United States, so your information may be processed there.

We do not sell your personal information, share it for targeted advertising, or use it to train AI models. We may disclose information if the law requires it, or to protect people or the service.

How long we keep data

• Account, household and list data: while your account exists. Lists belong to the household, so items you added stay for the remaining members.
• Server backups: daily backups are kept for 6 days and weekly backups for 27 days, so deleted information can remain in a backup for up to about four weeks.
• Ask Baggy: on your iPhone until you start a new chat or delete your account. Server answer copies are kept about 24 hours and usage records 40 days.
• Shared list links: seven days.
• Shopping trips: who started shopping, and the store’s name if they turned on store arrival, for up to a day.
• Verification and password-reset codes: until they are used or expire.
• Server and security logs: for a limited time, to fix problems and prevent abuse.
• Purchase records: Apple and RevenueCat keep these under their own policies and as tax and accounting rules require.

Deleting your account

You can delete your account in the app. In Settings, open Account & security and tap Delete my account. This deletes your profile and sign-in details, your household memberships, sign-in sessions, notification tokens, and the Ask Baggy chats and photos saved on that iPhone. If you signed in with Apple, Baggy’s access to your Apple ID is also revoked. The sign-in record kept by our sign-in provider, Supabase, is deleted too, so signing in again later starts a new, empty account.

If you own a house that other people are in, ownership passes to the adult member who has been there longest (a teen only if no adult remains), and their lists keep working. A house where you are the only member is deleted along with its lists.

Deleting your account does not cancel an App Store subscription. Cancel it in iPhone Settings first. If you can’t open the app, email support@trybaggy.com from the address on the account. We will confirm the account is yours before deleting it.

Age limit and teen accounts

Baggy is for people 13 and older. Before you sign in or create an account, the app asks for your date of birth. The app checks it on your device, and the year is not stored or sent to us. Baggy records only that you are 13 or older. If you are under 13, the app stops there. There are no accounts for children under 13.

We don’t knowingly collect personal information from children under 13. If you believe a child under 13 has a Baggy account, email support@trybaggy.com and we will delete it.

Households have four roles: owner, parent, roommate and teen. The teen role is for members aged 13 to 17. A teen can join only with a personal invite code from the house owner or a parent. Parents set the teen’s spending limit for each shopping trip, can get an alert when the teen adds to the list, and can remove the teen from the house. Teens can’t invite people or change anyone’s role. Ask Baggy is told to keep its answers suitable for teens. A teen’s account holds the same kinds of information as any other account.

Your rights and choices

You can view and edit most of your information in the app, start a new Ask Baggy chat, change location, camera, microphone and notification access in iPhone Settings, and delete your account. To get a copy of your data, correct it or delete it, email support@trybaggy.com. We will need to confirm the request comes from the account holder.

Depending on where you live, such as the EU, the UK or California, you may have more rights, including the right to object to or restrict some uses and to complain to a data protection authority. We will not treat you differently for using them.

Removing Baggy from your Apple ID or Google account settings stops that sign-in method but does not delete your Baggy data.

This website and changes

trybaggy.com has no advertising, analytics scripts, account forms or nonessential cookies. Our hosting and network providers may log connection and security information when you visit.

We will update this page when Baggy changes and change the date at the top. If a change is significant, we will tell you in the app or by email. Questions go to support@trybaggy.com.